# changelog

author: cx <cx22757@163.com> - 0.0.1-2
changelog:
  - fix: modify install permission for library and config file.
  - fix: update nullptr check.
  - fix: update VM consistency log.
  - fix: extend RPC transmission timeout to 20 seconds.
  - fix: clear const_cast in domain.cpp; solve memory leak.
  - fix: add debug log for TSB API.
  - fix: extend RPC transmission timeout


author: cx <cx22757@163.com> - 0.0.1-3
changelog:
  - 修改日志问题
  - fix: log ERROR when peer received a failure notification.
  - fix: remove unsupported flag in DomainMigrate log.
  - fix: remove redundant nullptr check.
  - fix: change measure item name from grub_cfg to grub.cfg.
  - 修改安全问题
  - fix: safety inspection.
  - 修改检视意见
  - 格式化代码
  - 修改安全排查
  - fix: remove option --undefinesource.
  - fix: add return value check for GetVRoots.
  - fix: remove `--allow-store-measurements` option in VM create.
  - fix: remove RPATH compile option.
  - fix: call MigrationNotify after migration success in source end.
  - 修改安全排查问题
  - fix: update doc.
  - fix: modify VM state to shutoff after migration.
  - fix: add memory free for error branch in foreign_mounter.cpp


author: cx <cx22757@163.com> - 0.0.1-4
changelog:
  - fix: adapt to new VerifyTrustReport API.
  - 增加start虚机耗时日志
  - 保持挂载和startVRoot进行异步，并且不可以让checkmeasure和startVRoot异步
  - delete no use function
  - 1: adapter mock 2：add time-consuming debug 3: async StartVRoot and CheckGuestBeforeStart
  - fix: update doc and CLI help info.


author: cx <cx22757@163.com> - 0.0.1-5
changelog:
  - fix: update TSB-agent mock implement.
  - docs: update supported OS version
  - fix: update download URL for libboundscheck.
  - fix: rename sessionId to uuid.
  - fix: add suggestion for edk2 version


author: Xu Zheng <xuzheng_yewu@cmss.chinamobile.com> - 0.1.0-32
changelog:
  - adapt to multiple qemu process 
  - virt_check update
  - optimize qemu_var and os_var matching formats


author: Wenhui Tang <wenhui.oerv@isrc.iscas.ac.cn> - 0.26.0-2
changelog:
  - Append flags to GOFLAGS to fix go linker bugs for riscv
  - Related issue: https://github.com/golang/go/issues/62465
  - This is a temporary solution that requires fixing the upstream riscv support for golang.


author: wenxin<wenxin32@foxmail.com> - v1.4.1-3
changelog:
  - fix the query error of cve associated host
  - update verification method for host ip fieldl;fix repo field filter error
  - update TimedCorrectTask method


author: wenxin<wenxin32@foxmail.com> - v2.0.0-3
changelog:
  - Added support for cluster features.
  - Adjusted Task Module logic to use Celery for task management and execution.


author: luxuexian<luxuexian@huawei.com> - v2.1.0-2
changelog:
  - Fixed exceptions in calling stored procedures and cases caused by SQLschema upgrade
  - Fixed errors reported in calling cve summary interface


author: liuchanggeng<liuchanggeng@huawei.com> - v1.3.4-12
changelog:
  - to maintain functional stability, da-tool only releases network related analysis
  - it is not allowed to modify the configuration file of the da-tool


author: wangguangge<wangguangge@huawei.com> - v1.4.1-1
changelog:
  - update to v1.4.1
  - update cve fix logic
  - support rollback operation for kernel hotpatch/coldpatch


author: zhuyuncheng<zhuyuncheng@huawei.com> - v1.1.3-3
changelog:
  - Bugfix: fix the alert count error
  - Bugfix: for ai model, increase queried data length and add
    a time range for error judgment.


author: gongzhengtang<gong_zhengtang@163.com> - v1.2.0-1
changelog:
  - update the structure of response body; update how to get session used to
  - connect to the database


author: Hu gang<18768366022@163.com> - v1.3.5-2
changelog:
  - Resolve the problem of host display of the expanded menu in the host management batch adding host interface
  - Optimize the logic of adding hosts in batches under different circumstances


author: Hu gang<18768366022@163.com> - v1.4.0-1
changelog:
  - adapt to NewRepair Tasks Including DetailsCreation TaskReports And TaskExecution
  - Modify the original rollback task to hot patch rollback
  - Added related rollback tasks


author: Hu gang<18768366022@163.com> - v1.4.0-2
changelog:
  - Added keyword search for host list
  - Fixed the problem of abnormal list rendering in task details task running state
  - Optimize some page copywriting
  - Adaptation rollback task related (creation, execution, detailed viewing, task report viewing, etc.)
  - Solve the problem of hot and cold patch execution tasks failing when creating a repair task.
  - Fix hotpatch remove list filter failed


author: Hu gang<18768366022@163.com> - v1.4.0-4
changelog:
  - Added an interface adaptation for host status
  - Added a field to determine whether the kernel changes after the host is restarted
  - Added a new hot patch prompt for creating a repair task
  - Fix some bug


author: Hu gang<18768366022@163.com> - v1.4.0-7
changelog:
  - Modify the task description copy of the create hot patch removal task
  - remove create rollback button in cve detail,add hotpatch button in cve detail


author: Hu gang<18768366022@163.com> - v2.1.2-4
changelog:
  - Update version to v2.1.2-4
  - Provides smart Q&A capabilities for big models
  - Provide vulnerability repair and configure traceability intelligent management
  - Supports traceability of file changes


author: wenxin<wenxin32@foxmail.com> - v2.0.0-1
changelog:
  - Adjusted configuration file loading method: changed format from INI to YAML.
  - Added support for reading and writing configuration through Zookeeper.
  - Added support for reading and writing cache through Redis, including logic for current cache keys.
  - Implemented RSA signature verification for data.
  - Removed deprecated files.
  - Optimized Prometheus import statements.
  - Added retry mechanism to `response` method.


author: wenxin<wenxin32@foxmail.com> - v2.0.0-1
changelog:
  - Split the existing service module into distinct modules:
    - Task Module: Handles task management and execution.
    - Host Module: Manages host configurations and interactions.
    - User Module: Manages user accounts and permissions.
    - Interface Dispatch Module: Manages the dispatching of requests to appropriate interfaces.
  - Added a new command line tool for enhanced functionality and management.
  - Introduced support for clustering, allowing for more robust and scalable deployments.
  - Reorganized the service architecture to improve modularity and maintainability.
  - Fixed various issues to enhance stability and performance.


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: allow root to use desktop manager
  - KYOS-F: feature(kiran): Support kiran desktop environment
  - KYOS-F: Support change desktop background image in kiran desktop(#I5I1HE)
  - KYOS-B: Fix the file rename error msg too long(#I5I8IM)
  - KYOS-B: Fix the file can be rename to only container space name(#I5I8KI)
  - KYOS-F: Let the location bar background change with theme(#I5I8V9)
  - KYOS-B: Not draw icon and text hight light color when icon not get force(#I5HRI0)
  - KYOS-B: Fix the open terminal can not correct to terminal icon


author: gaobo <gaobo@kylinsec.com.cn> - 1.28.0-2
changelog:
  - modify the logic that open kiran-control-panel when change the background (f:107366)
  - fix that background abnormal when change the scale to 200%. (b:121360)


author: wangdi <wangdi@kylinos.cn> - 0.15.0-3
changelog:
  - Change hardcoded deafult hash algorithm from legacy md4 to sha512
  - Change dependecy from ansible-2.9 to ansible since ansible version has bumped to 2.9


author: liheavy <lihaiwei8@huawei.com> - 1.0.0-3
changelog:
  - Disassemble yocto-embedded-tools and replace cjson, ninja, gn, openssl, libboundscheck
  - with openEuler software package


author: Yuying Mu <muyuying1@huawei.com> - 1.0.0-6
changelog:
  * Tue Nov 20 2023 Jiaqi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-6
  - Update dsoftbus from 3.1.2 to 3.2
  - Rename package name from dsoftbus to communication_dsoftbus


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.0-1
changelog:
  - Initial release of DevStore
  - Includes frontend Electron application
  - Includes backend Django application
  - Provides comprehensive development store management functionality
  - Added systemd service support for easy service management
  - Users can now start/stop DevStore using systemctl commands


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.1-1
changelog:
  - Support search functionality
  - Fix the issue where the list is empty when returning to the homepage from the details page
  - Auto-enable and start dev-store service after installation
  - Add error handling to ensure service startup failures don't affect package installation


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.3-1
changelog:
  - Replace MariaDB with SQLite database, optimize initialization process for faster startup
  - Optimize cleanup and write processes during data synchronization exceptions


author: dingjiahui <dingjiahui4@huawei.com> - 1.0.4-1
changelog:
  - Update desktop icon
  - Remove massive logs
  - Support for quickly adding MCP servers to PolyMind
  - Fix handling issue when oeDeploy plugin is duplicated
  - Optimize interface, support multiple tabs


author: Yuying Mu <muyuying1@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 Jiaqi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - Init and adapt device manager to openEuler


author: zhourenjian <zhourenjian@huawei.com> - 2025.36-1
changelog:
  - Adapt E2B to the arm64 architecture, remove its dependency on GCP, and add a one-click local installation script.Fix start-client process, use dnsmasq replace systemd-resolved, use paramater to decide current client belongs to which node pool, use glibc busybox,use provision.sh to install vm's deps while building template.Add arm vmlinux.bin and change x86 vmlinux.bin name.Make start-client process local.use dnsmasq replace systemd-resolved. Use paramater to decide current client belongs to which node pool. fix configure.sh run fail because busybox has no bash.change async to sync.complete readme.


author: chenyanpanHW <chenyanpan@huawei.com> - 0.5.0-16
changelog:
  - DESC: delete -Sgit from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/Add-PL_ARCH-for-AArch64.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/coverity.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-add-loongarch64-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-add-riscv-support.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f

  , and delete BuildRequires git


author: wangkai <13474090681@163.com> - 3.18.0-13
changelog:
  - Fix CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-33367
    CVE-2021-40263 CVE-2021-40266 CVE-2023-47995 CVE-2023-47997


author: luxuexian<luxuexian@huawei.com> - v2.1.0-3
changelog:
  - Optimize the query of the number of unsynchronized service domains
  - unified conftrace record in English


author: zhanglin <lin.zhang@turbolinux.com.cn> - 1:3.38.2-4
changelog:
  - fix build when Meson >= 0.61.5
  - add patch modify-meson-build-tepl6.patch
  - add patch fix-i18n-merge-file.patch


author: renjunkai1@example.com - 0.0.1-21
changelog:
  - fix: Add a cargo.lock file to lock dependency versions.
  - fix:[plugin manager] replace unwrap with results
  - fix:[policy engine] forbid custom functions and loop with number range
  - fix: Add libboundscheck library for building RPM agent and cli.
  - fix:[policy engine] forbid custom functions and loop with number range
  - feat: Modify the URL paths in the API documentation
  - feat: Add a default value for executables_value in the tpm_boot.rego file.
  - fix:fix key managerd workers


author: renjunkai1@example.com - 0.0.1-22
changelog:
  - feat: add compilation options for security requirements
  - fix: [attestation server] fix unwrap problem in initialization process
  - fix: strengthen the policy injection proctection
  - fix: delete tests that are commented out
  - fix: [endorsement] fix unwrap problem
  - fix: add more strict parameter validation for user id
  - feat:modify register white box inspection
  - fix:fix apikey block_on
  - Merge openeuler/master: resolve conflicts and integrate upstream changes
  - perf: optimize PCR index validation
  - config: update PCR banks config for batch processing
  - test: add test cases for TPM plugin improvements
  - fix:fix apikey block_on
  - fix:[attestation_agent][attestation_cli]Clean up Clippy scan warnings, rm -rf deletion issues, and unsafe code problems.
  - fix: optimize TPM NV reading and PCR collection


author: cx <cx22757@163.com> - 0.0.1-23
changelog:
  - fix:add tpm.rego,modify ut and agent_config
  - feat: fix log name
  - Revert "bugfix: add key_managerd.service to rpm"
  - bugfix: add key_managerd.service to rpm
  - feat: Adapting to the log of ascend npu
  - fix:fix server_config
  - feat: The virtCCA plugin supports log collection and verification in the dim format
  - feat:add TpmPlugin for attester and verfier dim_log
  - fix: cancel exporting unnecessary lib.
  - fix: clear magic number in CCA plugin.
  - fix: split the verify_logs func in CCA verifier.
  - fix: add UT for CCA verifier plugin.
  - fix: Optimize command-line options and their explanations
  - feat: update docs and RPM spec files for CCA.
  - feat: add CCA verifier plugin.
  - feat: Modify the input of the all policy to the output of the plugin.
  - feat: Modify the interface documentation
  - feat: The baseline generation tool supports dim baseline generation.
  - feat: Added all-type policy
  - feat: add CCA attester plugin.
  - fix: extract public log verify code.
  - fix:Fix failure to read IAK certificate
  - fix: Adapt to EAR token format for itrustee plugin.
  - fix: Adding the secure boot field to the token in the virtCCA plugin
  - fix: Remove unnecessary fields in itrustee.rego.
  - fix: Add public key information and display the realm challenge when no platform token exists.
  - Merge branch 'vcca' of git@gitcode.com:lyyyze/global-trust-authority.git into 'master' # Conflicts: #   conflict attestation_server/policy/src/services/policy_service.rs
  - fix: Add JWT signature verification when updating the policy
  - feat: Add platform token challenge field and refine software component serialization
  - fix: Modify the translated content of the document
  - fix: Modify the verification logic of the tpmboot plugin to validate digests only for specific events.
  - fix: Modified failed test cases
  - Merge remote-tracking branch 'origin/issue' into issue
  - fix: Capitalize the first letter of error messages
  - fix: Modify error messages to reduce module exceptions printed to the interface output.
  - fix: Add codecheck build script
  - fix: Modify error messages to reduce module exceptions printed to the interface output.
  - bugfix: add a chapter for readme
  - fix: add UT
  - feat(api): configure server limits and improve error handling
  - fix: Fixing some errors in the API documentation


author: cx <cx22757@163.com> - 0.0.1-24
changelog:
  - fix: declare dependency for ITrustee.
  - fix: add copyright notice.
  - test:add tpm and virtcca UT
  - fix: update descriptions of request params.
  - fix: fixes OpenSSL affected by CVE-2025-15467.
  - feat: add ascend_npu cbor data to policy
  - feat: Add the user policy for the TPM plugin


author: cx <cx22757@163.com> - 0.0.1-27
changelog:
  - Revert "feat: Added Compatibility Plugin"
  - Revert "feat: Add logic for the main plugin to retrieve information for each plugin."
  - feat: Added token verification interface, supporting custom public key input.
  - feat: Add logic for the main plugin to retrieve information for each plugin.
  - fix: update rustup source in code-check script.
  - fix: replace default rustup source in code-check script.
  - Merge remote-tracking branch 'upstream/master' into plugin
  - feat: add UT to key_manager
  - feat: Added Compatibility Plugin


author: cx <cx22757@163.com> - 0.0.1-28
changelog:
  - fix: Change the IP addresses in the document
  - fix: specify REM indexes when replaying boot log.
  - fix: Remove the parameters from the /global-trust-authority/service/v1/challenge endpoint
  - feat: Add logic for the main plugin to retrieve information for each plugin.
  - fix: address review comments
  - feat: add cca server unit tests
  - feat: remove obsolete CLI unit tests
  - feat: Add log data validation
  - feat: add unit test to endorserment, key and resource_provider
  - feat: expand client, validate, load_plugins, and error coverage
  - feat: add challenge and evidence verification handler coverage
  - feat: expand service, entities, utils, and signature update coverage
  - feat: add event log, parser, and serializer coverage
  - feat: add api-sub-key func
  - fix: move LICENSE to root directory.
  - fix: remove communication matrix in guide.
  - fix: add docs to tpm plugin
  - feat: delete Chinese for key_manager
  - feat: add UT to attestation_server
  - feat: add UT to attestation_common
  - feat: add UT to attestation_cli
  - Merge remote-tracking branch 'refs/remotes/origin/master'
  - Merge remote-tracking branch 'refs/remotes/origin/master'
  - add UT to attestation_agent


author: cx <cx22757@163.com> - 0.0.1-29
changelog:
  - feat: add attestation_client facade crate
  - refactor: move func process_nonce to NonceUtil
  - refactor: unify ascend npu evidence handling around base64 cbor
  - fix: Edit the cargo.toml file
  - fix: Change the agent's default setting to support HTTP one-way authentication; change the exist_time field in the configuration to expired_time.
  - Merge remote: openeuler/global-trust-authority master
  - fix: DICE verification configuration update
  - fix: move dependencies of cca to workspace level
  - feat: Added a new DICE verifier module
  - feat: Added SM2 and Ed25519 algorithm implementations and local configuration key mode for key management
  - feat: Added DICE authentication module and adapted CLI tool


author: cx <cx22757@163.com> - 0.0.1-30
changelog:
  - docs: fix typo ITrustee to itrustee in attestation_service.md
  - feat: add is_default field to ref_value API documentation
  - fix: Fix and refine attestation codebase and documentation
  - fix: Make the rate limiting for the agent service configurable
  - feat: Declare the dependencies of the policy_engine module separately
  - fix(agent): handle non-2xx HTTP responses to surface real error causes
  - fix: add restful configuration in attestation client
  - refactor(ref_value): remove redundant validate func
  - fix(docs): add cca type for ref_value and modify content size
  - test(attestation): add UTs for dice verifier and token
  - fix: modify dice uts
  - Merge atomgit/master into current branch
  - feat: Add documentation for dice plugin and support SM2 algorithm for token
  - test(attestation): add UTs for dice attester and verifier
  - perf: use AtomicBool for initialization check
  - fix: Modify the fields in the token so that the fields related to the log status become Boolean values
  - fix: Change the data type of the secureBoot field to boolean
  - fix: Remove the “ignore” field from all ref_value_match_status entries
  - fix: In the cca and virtCCA plugins, rename the configuration option “ccel_file_path” to “boot_log_file_p”


author: cx <cx22757@163.com> - 0.0.1-2
changelog:
  - feat(rbs-cli): add verbose tracing and refresh client command docs
  - feat(rbs):Added parameter validation to the User Management and Policy Management modules
  - feat(rbc,rbs-cli): unify token flow and extend resource auth modes
  - feat(rbs):Add logs for business logic processing
  - feat(rbs):Modify the URL for the certificate management interface
  - feat(rbs):Supports elliptic curve algorithms
  - feat(rbs):Change the key input parameter to Base64 encoding
  - Modify the business logic of the retrieve interface
  - feat(rbs):The export mode only supports JWE.
  - feat(rbs): add resource management module with JWE encryption and unified DB schema
  - feat(rbs): add policy management module with API documentation


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.2-4
changelog:
  - Add four patches to make gome-boxes avoid setting qemu unsupported modules
    add vnc instead of spice


author: wenlong ding <wenlong.ding@turbolinux.com.cn> - 43.2-2
changelog:
  - Move '%find_lang gnome-initial-setup' to %install, fix not found gnome-initial-setup.lang if disable %check build


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.36.0-1
changelog:
  - Upgrade to 3.36.0
  - Update Version, Release, Source0, stage 'build' and 'files'
  - Delete old patch that existed in new version, add new patch


author: wenlong ding <wenlong.ding@turbolinux.com.cn> - 43.0-2
changelog:
  - Move '%find_lang gnome-photos' to %install, fix not found gnome-photos.lang if disable %check build


author: laokz <zhangkai@iscas.ac.cn> - 44.5-2
changelog:
  - let BuildRequire valgrind depend on system i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 loongarch64 powerpc64le ppc64le sw_64


author: yaoxin <1024769339@qq.com> - 9.2.10-1
changelog:
  - Update to 9.2.10 for fix cves:CVE-2022-36062,CVE-2022-35957
    CVE-2022-39201,CVE-2022-31130,CVE-2022-31123,CVE-2022-39306
    CVE-2022-39307,CVE-2022-23552,CVE-2022-39324,CVE-2022-31097


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.3.13-3
changelog:
  - Solve bug of "PANIC: unprotected error in call to Lua API
    (attempt to call a nil value) Aborted"


author: yaoxin <1024769339@qq.com> - 2.8.139-1
changelog:
  - Update to 2.8.139:
    * Minor improvement of the `SOAP_XML_IGNORENS` (ignore XML
      namespaces) logic when performing non-strict XML validation
      (`SOAP_XML_STRICT` is not enabled) when ignoring extra XML
      extensibility elements in an inbound SOAP/XML message; no
      longer produces validation errors for non-serializable XML to
      "safely" ignore, unless strict XML validation is enabled with
      `SOAP_XML_STRICT`, as expected.
    * Minor update to improve XML entity parsing within limits.
    * The wsdl2h tool with SSL/TLS enabled for https no longer
      supports legacy SSLv3, only TLS 1.0 to 1.3, this avoids
      potential TLS/SSL handshake errors.
    * Corrected a logic bug in wsdl2h for attribute/elemenet
      reference qualification for C++ class and C struct members in
      the generated header interface file for soapcpp2.


author: herengui <herengui@kylinsec.com.cn> - 1.50.2-9
changelog:
  - Fix CVE-2026-28296: reject paths containing CR/LF characters in FTP backend
  - ftp: Reject paths with CR/LF in g_vfs_ftp_file_new_from_ftp (server-supplied paths)


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-151.0.0.137
changelog:
  - !20821 [OLK-6.6] Intel: Backport Architectual PEBS for Intel platforms
  - !22197  dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
  - !21790 Fix CVE-2026-31407
  - !22090 Fix CVE-2026-31424
  - !22088 Fix CVE-2026-31423
  - !22086 Fix CVE-2026-31420
  - !22085 Fix CVE-2026-31418
  - !22083 Fix CVE-2026-31516
  - !22084 Fix CVE-2026-31665
  - !22056 Fix CVE-2026-31590
  - !21974 Fix CVE-2026-31542
  - !22042 Fix CVE-2026-31628
  - !22189 Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically"
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
  - !22179 Fix CVE-2026-31532
  - !22177 Fix CVE-2026-31533
  - !22180 Fix CVE-2026-31429
  - !22153  iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
  - Revert "KVM: arm64: Add a module param to enable/disable pv_preempted dynamically"
  - !22172  PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup
  - !21260  bfq: Lock when clearing the q->elevator entry
  - !22024  nvmet: move async event work off nvmet-wq
  - !21972 Fix CVE-2026-31451
  - !21942 Fix CVE-2026-31450
  - !22015  Fix CVE-2026-31449
  - !21937 Fix CVE-2026-31447
  - !21941 Fix CVE-2026-31446
  - net: skb: fix cross-cache free of KFENCE-allocated skb head
  - can: raw: fix ro->uniq use-after-free in raw_rcv()
  - !21089 [OLK-6.6] Fix CVE-2025-68345
  - !21115 [OLK-6.6] Fix CVE-2025-68334
  - !21116 [OLK-6.6] Fix CVE-2025-68320
  - !21119 [OLK-6.6] Fix CVE-2025-68765
  - !21117 [OLK-6.6] Fix CVE-2025-68340
  - !21139 [OLK-6.6] Fix CVE-2025-68753
  - net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
  - !22158  perf/x86: Fix potential bad container_of in intel_pmu_hw_config
  - PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup
  - !21771 [OLK-6.6][Intel-SIG] Backport upstream x86/topo: SNC Divination patch series
  - !22156  drm/i915/gt: Check set_default_submission() before deferencing
  - !22155 urma: change kzalloc into vzalloc for ubcore
  - !22044  ALSA: ctxfi: Limit PTP to a single page
  - urma: change kzalloc into vzalloc for ubcore
  - perf/x86: Fix potential bad container_of in intel_pmu_hw_config
  - !22154 A set of CVE fixes for Bluetooth
  - !21931 Fix CVE-2026-31452
  - drm/i915/gt: Check set_default_submission() before deferencing
  - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
  - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
  - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
  - Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
  - Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop
  - iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
  - !22071 CVE-2026-31673
  - !22050 Fix CVE-2026-31674
  - !22069 CVE-2026-31680
  - !22025 Fix CVE-2026-31682
  - !22002 Fix CVE-2026-31546
  - !22011 Fix CVE-2026-31570
  - !22000 Fix CVE-2026-31495
  - !21999 Fix CVE-2026-31496
  - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
  - netfilter: conntrack: add missing netlink policy validations
  - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
  - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
  - bridge: mrp: reject zero test interval to avoid OOM panic
  - netfilter: ipset: drop logically empty buckets in mtype_del
  - netfilter: nft_ct: fix use-after-free in timeout object destroy
  - xfrm: prevent policy_hthresh.work from racing with netns teardown
  - af_unix: read UNIX_DIAG_VFS data under unix_state_lock
  - net: ipv6: flowlabel: defer exclusive option free until RCU teardown
  - netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
  - ALSA: ctxfi: Limit PTP to a single page
  - x86/CPU: Fix FPDSS on Zen1
  - bridge: br_nd_send: linearize skb before parsing ND options
  - nvmet: move async event work off nvmet-wq
  - ext4: validate p_idx bounds in ext4_ext_correct_indexes
  - ext4: prevent partial update of the extents path
  - ext4: refactor ext4_ext_rm_idx() to index 'path'
  - can: gw: fix OOB heap access in cgw_csum_crc8_rel()
  - net: bonding: fix NULL deref in bond_debug_rlb_hash_show
  - netfilter: ctnetlink: use netlink policy range checks
  - netfilter: nf_conntrack_expect: skip expectations in other netns via proc
  - x86/platform/uv: Handle deconfigured sockets
  - ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
  - ext4: publish jinode after initialization
  - ext4: fix use-after-free in update_super_work when racing with umount
  - ext4: reject mount if bigalloc with s_first_data_block != 0
  - ext4: convert inline data to extents when truncate exceeds inline size
  - x86/topo: Fix SNC topology mess
  - x86/topo: Replace x86_has_numa_in_package
  - x86/topo: Add topology_num_nodes_per_package()
  - x86/numa: Store extra copy of numa_nodes_parsed
  - x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled
  - x86/smpboot: moves x86_topology to static initialize and truncate
  - x86/smpboot: remove redundant CONFIG_SCHED_SMT
  - smpboot: introduce SDTL_INIT() helper to tidy sched topology setup
  - sched: Move sched domain name out of CONFIG_SCHED_DEBUG
  - x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly
  - x86/mm: Don't print out SRAT table information
  - powerpc/smp: Dynamically build Powerpc topology
  - powerpc/smp: Avoid asym packing within thread_group of a core
  - powerpc/smp: Add __ro_after_init attribute
  - powerpc/smp: Disable MC domain for shared processor
  - powerpc/smp: Enable Asym packing for cores on shared processor
  - bfq: Lock when clearing the q->elevator entry
  - ALSA: firewire-motu: add bounds check in put_user loop for DSP events
  - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
  - team: Move team device type change at the end of team_port_add
  - lan966x: Fix sleeping in atomic context
  - platform/x86/amd/pmc: Add support for Van Gogh SoC
  - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
  - tools headers: Sync x86 headers with kernel sources
  - perf/x86: Add PERF_CAP_PEBS_TIMING_INFO flag
  - perf/x86/intel: Use early_initcall() to hook bts_init()
  - perf/x86/intel: Fix NULL event dereference crash in handle_pmi_common()
  - perf/x86/intel: Fix and clean up intel_pmu_drain_arch_pebs() type use
  - perf/x86/intel: Optimize PEBS extended config
  - perf/x86/intel: Check PEBS dyn_constraints
  - perf/x86/intel: Add a check for dynamic constraints
  - perf/x86/intel: Add counter group support for arch-PEBS
  - perf/x86/intel: Setup PEBS data configuration and enable legacy groups
  - perf/x86/intel: Update dyn_constraint base on PEBS event precise level
  - perf/x86/intel: Allocate arch-PEBS buffer and initialize PEBS_BASE MSR
  - perf/x86/intel: Process arch-PEBS records or record fragments
  - perf/x86/intel/ds: Factor out PEBS group processing code to functions
  - perf/x86/intel/ds: Factor out PEBS record processing code to functions
  - perf/x86/intel: Initialize architectural PEBS
  - perf/x86/intel: Correct large PEBS flag check
  - perf/x86/intel: Replace x86_pmu.drain_pebs calling with static call
  - perf/x86: Fix NULL event access and potential PEBS record loss
  - perf/x86: Remove redundant is_x86_event() prototype
  - perf/core: Check sample_type in perf_sample_save_brstack
  - perf/core: Check sample_type in perf_sample_save_callchain
  - perf/x86/intel/ds: Remove redundant assignments to sample.period
  - perf/x86/intel: Introduce pairs of PEBS static calls
  - perf/x86/intel: Rename x86_pmu.pebs to x86_pmu.ds_pebs
  - perf/x86/intel: Decouple BTS initialization from PEBS initialization


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-152.0.0.138
changelog:
  - !22246  Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs"
  - Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs"
  - !22187  support mempool and NUMA.remote for 64KB page
  - !22201  mm: memcontrol: don't throttle dying tasks on memory.high
  - !22213  futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - !22212  drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
  - !22221  EDAC/mc: Fix error path ordering in edac_mc_alloc()
  - EDAC/mc: Fix error path ordering in edac_mc_alloc()
  - !22202  pstore: ram_core: fix incorrect success return when vmap() fails
  - !22203  perf/x86/intel/uncore: Skip discovery table for offline dies
  - !22215  usb: cdns3: gadget: fix state inconsistency on gadget init failure
  - !22078 Fix CVE-2026-31681
  - !22041 Fix CVE-2026-31664
  - !22082 Fix CVE-2026-31671
  - !22079 [OLK-6.6][linux-6.6.y sync] Backport 6.6.121-6.6.122 LTS Patches
  - !22199 CVE-2026-31414
  - !22185 Fix CVE-2026-31679
  - !22164 Fix CVE-2026-31551
  - usb: cdns3: gadget: fix state inconsistency on gadget init failure
  - futex: Clear stale exiting pointer in futex_lock_pi() retry path
  - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
  - !22173 Fix CVE-2026-31592
  - !22021  smb: client: fix off-by-8 bounds check in check_wsl_eas()
  - !22022  smb: client: fix OOB reads parsing symlink error response
  - !21926  nvme-pci: ensure we're polling a polled queue
  - !21924  ext4: avoid infinite loops caused by residual data
  - !21922  ksmbd: fix OOB write in QUERY_INFO for compound requests
  - !22171  xen/privcmd: fix double free via VMA splitting
  - !22167  *** fix CVE-2026-31443 ***
  - !22166  spi: spi-dw-dma: fix print error log when wait finish transaction
  - perf/x86/intel/uncore: Skip discovery table for offline dies
  - pstore: ram_core: fix incorrect success return when vmap() fails
  - mm: memcontrol: don't throttle dying tasks on memory.high
  - netfilter: nf_conntrack_expect: use expect->helper
  - netfilter: nf_conntrack_expect: honor expectation helper field
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup
  - mm/numa_remote: remove depends on ARM64_4K_PAGES
  - mm/pfn_range_alloc: add support for CONFIG_ARM64_64K_PAGES
  - openvswitch: validate MPLS set/set_masked payload length
  - xfrm_user: fix info leak in build_report()
  - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock
  - xen/privcmd: fix double free via VMA splitting
  - dmaengine: idxd: Fix crash when the event log is disabled
  - dmaengine: idxd: Delete unnecessary NULL check
  - spi: spi-dw-dma: fix print error log when wait finish transaction
  - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.
  - netfilter: xt_multiport: validate range encoding in checkentry
  - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size
  - btrfs: fix double free in create_space_info_sub_group() error path
  - btrfs: fix double free in create_space_info() error path
  - interconnect: debugfs: fix devm_kstrdup and kfree mismatch
  - Revert "ALSA: usb: Increase volume range that triggers a warning"
  - x86/kfence: fix booting on 32bit non-PAE systems
  - can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
  - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected()
  - btrfs: fix leak of kobject name for sub-group space_info
  - net: phy: fix phy_uses_state_machine()
  - fs/ntfs3: Initialize allocated memory before use
  - nvme: fix PCIe subsystem reset controller state transition
  - nvme-pci: do not directly handle subsys reset fallout
  - nvme-fc: rename free_ctrl callback to match name pattern
  - ASoC: codecs: wsa883x: fix unnecessary initialisation
  - ASoC: codecs: wsa881x: fix unnecessary initialisation
  - ASoC: codecs: wsa881x: Drop unused version readout
  - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()
  - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path
  - mm: kmsan: fix poisoning of high-order non-compound pages
  - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure
  - iio: adc: exynos_adc: fix OF populate on driver rebind
  - ALSA: scarlett2: Fix buffer overflow in config retrieval
  - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s
  - iio: core: add separate lockdep class for info_exist_lock
  - iio: core: add missing mutex_destroy in iio_dev_release()
  - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure
  - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure
  - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak
  - selftests/bpf: Check for timeout in perf_link test
  - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak
  - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak
  - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
  - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
  - perf/x86/intel: Do not enable BTS for guests
  - pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu
  - platform/x86: hp-bioscfg: Fix automatic module loading
  - netrom: fix double-free in nr_route_frame()
  - slimbus: core: fix device reference leak on report present
  - slimbus: core: fix runtime PM imbalance on report present
  - octeontx2: Fix otx2_dma_map_page() error return code
  - arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
  - wifi: rsi: Fix memory corruption due to not set vif driver data size
  - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize()
  - wifi: ath12k: fix dma_free_coherent() pointer
  - mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode
  - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function
  - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling
  - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl
  - iio: chemical: scd4x: fix reported channel endianness
  - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver
  - iio: adc: ad9467: fix ad9434 vref mask
  - iio: accel: iis328dq: fix gain values
  - of: platform: Use default match table for /firmware
  - of: fix reference count leak in of_alias_scan()
  - x86: make page fault handling disable interrupts properly
  - vsock/test: fix seqpacket message bounds test
  - net: openvswitch: fix data race in ovs_vport_get_upcall_stats
  - octeontx2-af: Fix error handling
  - net: dsa: fix off-by-one in maximum bridge ID determination
  - selftests: net: amt: wait longer for connection before sending packets
  - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2)
  - drm/amd/pm: Don't clear SI SMC table when setting power limit
  - usbnet: limit max_mtu based on device's hard_mtu
  - mISDN: annotate data-race around dev->work
  - be2net: fix data race in be_get_new_eqd
  - net: hns3: fix data race in hns3_fetch_stats
  - ALSA: usb: Increase volume range that triggers a warning
  - riscv: clocksource: Fix stimecmp update hazard on RV32
  - kconfig: fix static linking of nconf
  - spi: spi-sprd-adi: Fix double free in probe error path
  - spi: sprd-adi: switch to use spi_alloc_host()
  - spi: sprd: adi: Use devm_register_restart_handler()
  - interconnect: debugfs: initialize src_node and dst_node to empty strings
  - iio: adc: ad7280a: handle spi_setup() errors in probe()
  - iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection
  - platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro
  - platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names
  - comedi: Fix getting range information for subdevices 16 to 255
  - x86/kfence: avoid writing L1TF-vulnerable PTEs
  - arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro
  - arm64: dts: rockchip: remove dangerous max-link-speed from helios64
  - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
  - scsi: storvsc: Process unsupported MODE_SENSE_10
  - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA
  - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro
  - Revert "nfc/nci: Add the inconsistency check between the input data length and count"
  - w1: fix redundant counter decrement in w1_attach_slave_device()
  - w1: therm: Fix off-by-one buffer overflow in alarms_store
  - comedi: dmm32at: serialize use of paged registers
  - serial: 8250_pci: Fix broken RS485 for F81504/508/512
  - octeontx2: cn10k: fix RX flowid TCAM mask handling
  - veth: fix data race in veth_get_ethtool_stats
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO.
  - tools: ynl: Specify --no-line-number in ynl-regen.sh.
  - gue: Fix skb memleak with inner IP protocol 0.
  - amd-xgbe: avoid misleading per-packet error log
  - can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error
  - selftests: net: fib-onlink-tests: Convert to use namespaces by default
  - selftests/net: convert fib-onlink-tests.sh to run it in unique namespace
  - net: usb: dm9601: remove broken SR9700 support
  - igc: fix race condition in TX timestamp read for register 0
  - ice: Avoid detrimental cleanup for bond during interface stop
  - ice: initialize ring_stats->syncp
  - ata: libata: Print features also for ATAPI devices
  - ata: libata: Call ata_dev_config_lpm() for ATAPI devices
  - ata: libata-core: Introduce ata_dev_config_lpm()
  - ata: libata: Add cpr_log to ata_dev_print_features() early return
  - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP
  - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO
  - dt-bindings: power: qcom-rpmpd: split RPMh domains definitions
  - dt-bindings: power: qcom,rpmpd: add Turbo L5 corner
  - dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains
  - dt-bindings: power: rpmpd: Update part number to X1E80100
  - dt-bindings: power: qcom,rpmpd: document the SM8650 RPMh Power Domains
  - dt-bindings: power: rpmpd: Add MSM8917, MSM8937 and QM215
  - dt-bindings: power: qcom,rpmpd: Add SM7150
  - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE
  - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump()
  - hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_*
  - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links
  - io_uring: move local task_work in exit cancel loop
  - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type
  - dmaengine: ti: k3-udma: fix device leak on udma lookup
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
  - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation
  - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()
  - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
  - dmaengine: lpc18xx-dmamux: fix device leak on route allocation
  - dmaengine: idxd: fix device leaks on compat bind and unbind
  - dmaengine: dw: dmamux: fix OF node leak on route allocation failure
  - dmaengine: bcm-sba-raid: fix device leak on probe
  - dmaengine: at_hdmac: fix device leak on of_dma_xlate()
  - dmaengine: apple-admac: Add "apple,t8103-admac" compatible
  - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()
  - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
  - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare
  - drm/amdkfd: fix a memory leak in device_queue_manager_init()
  - drm/amd: Clean up kfd node on surprise disconnect
  - drm/amd/display: Bump the HDMI clock to 340MHz
  - LoongArch: Fix PMU counter allocation for mixed-type event groups
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
  - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free
  - EDAC/i3200: Fix a resource leak in i3200_probe1()
  - EDAC/x38: Fix a resource leak in x38_probe1()
  - hrtimer: Fix softirq base check in update_needs_ipi()
  - nvme-pci: disable secondary temp for Wodposit WPBSNM8
  - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable
  - USB: serial: option: add Telit LE910 MBIM composition
  - USB: OHCI/UHCI: Add soft dependencies on ehci_platform
  - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor
  - usb: dwc3: Check for USB4 IP_NAME
  - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7
  - phy: rockchip: inno-usb2: fix disconnection in gadget mode
  - phy: freescale: imx8m-pcie: assert phy reset during power on
  - phy: rockchip: inno-usb2: fix communication disruption in gadget mode
  - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers
  - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts
  - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit.
  - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
  - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer
  - HID: usbhid: paper over wrong bNumDescriptor field
  - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths
  - phy: stm32-usphyc: Fix off by one in probe()
  - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend
  - phy: drop probe registration printks
  - phy: phy-snps-eusb2: refactor constructs names
  - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it
  - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing
  - dmaengine: tegra-adma: Fix use-after-free
  - mm, kfence: describe @slab parameter in __kfence_obj_info()
  - textsearch: describe @list member in ts_ops search
  - ASoC: tlv320adcx140: fix word length
  - ASoC: tlv320adcx140: fix null pointer
  - selftests: drv-net: fix RPS mask handling for high CPU numbers
  - btrfs: fix memory leaks in create_space_info() error paths
  - btrfs: introduce btrfs_space_info sub-group
  - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups()
  - btrfs: factor out init_space_info() from create_space_info()
  - btrfs: store fs_info in space_info
  - net/mlx5e: Restore destroying state bit after profile cleanup
  - vsock/test: add a final full barrier after run all tests
  - net: update netdev_lock_{type,name}
  - net: bridge: annotate data-races around fdb->{updated,used}
  - net: bridge: Set BR_FDB_ADDED_BY_USER early in fdb_add_entry
  - btrfs: send: check for inline extents in range_is_hole_in_parent()
  - can: etas_es58x: allow partial RX URB allocation to succeed
  - ASoC: codecs: wsa884x: fix codec initialisation
  - firmware: imx: scu-irq: Set mu_resource_id before get handle
  - xfrm: clear trailing padding in build_polexpire()
  - smb: client: fix OOB reads parsing symlink error response
  - smb: client: fix off-by-8 bounds check in check_wsl_eas()
  - nvme-pci: ensure we're polling a polled queue
  - ext4: avoid infinite loops caused by residual data
  - ksmbd: fix OOB write in QUERY_INFO for compound requests


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-153.0.0.139
changelog:
  - !22406  CVE
  - !22327  ceph: fix i_nlink underrun during async unlink
  - !22400  bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs
  - !22401  Fix CVE-2026-31486
  - !22383  dmaengine: idxd: Fix not releasing workqueue on .release()
  - !22394  *** fix CVE-2026-31527 ***
  - !22335  ceph: fix memory leaks in ceph_mdsc_build_path()
  - !22351  ixgbevf: add missing negotiate_features op to Hyper-V ops table
  - !22333  ceph: supply snapshot context in ceph_zero_partial_object()
  - HID: core: Mitigate potential OOB by removing bogus memset()
  - HID: core: Add printk_ratelimited variants to hid_warn() etc
  - HID: multitouch: Check to ensure report responses match the request
  - Bluetooth: MGMT: validate LTK enc_size on load
  - hwmon: (pmbus/core) Protect regulator operations with mutex
  - hwmon: (pmbus/core) Declare regulator notification function as void
  - bpf, x86: Fix missing BTF_SET8_KFUNCS flag for arch kfuncs
  - !22336  HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
  - !22345  Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  - !22346  Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
  - !22353  Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - !22347  Bluetooth: MGMT: validate mesh send advertising payload length
  - !22367  Bluetooth: hci_event: move wake reason storage into validated event handlers
  - driver/core: Fix kabi broken of platform_device/bus_type/device
  - driver core: platform: use generic driver_override infrastructure
  - hwmon: axi-fan: don't use driver_override as IRQ name
  - driver core: generalize driver_override in struct device
  - dmaengine: idxd: Fix not releasing workqueue on .release()
  - !22275  CVE-2026-43313
  - !22272  EFI/CPER: don't dump the entire memory region
  - !22267  KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
  - !22266 v2  CVE-2026-43265
  - !22355  5 CVE fix patches
  - !22224  mm/userfaultfd: fix hugetlb fault mutex hash calculation
  - !22206 net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS
  - !22342  rxrpc: proc: size address buffers for %pISpc output
  - !22363  dmaengine: idxd: Fix leaking event log memory
  - !22356  dmaengine: idxd: Fix memory leak when a wq is reset
  - Bluetooth: hci_event: move wake reason storage into validated event handlers
  - !22321 Fix CVE-2026-43013
  - !22278 Fix CVE-2026-31699
  - !22269 Fix CVE-2026-31698
  - dmaengine: idxd: Fix leaking event log memory
  - dmaengine: idxd: Fix memory leak when a wq is reset
  - HID: core: clamp report_size in s32ton() to avoid undefined shift
  - HID: alps: fix NULL pointer dereference in alps_raw_event()
  - Input: uinput - fix circular locking dependency with ff-core
  - HID: apple: avoid memory leak in apple_report_fixup()
  - HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
  - Bluetooth: SMP: derive legacy responder STK authentication from MITM state
  - ixgbevf: add missing negotiate_features op to Hyper-V ops table
  - net: make CONFIG_UB_SOCKET_HANDSHAKE independent of CONFIG_UB_UMS
  - Bluetooth: MGMT: validate mesh send advertising payload length
  - Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
  - Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  - rxrpc: proc: size address buffers for %pISpc output
  - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure
  - ceph: fix memory leaks in ceph_mdsc_build_path()
  - ceph: supply snapshot context in ceph_zero_partial_object()
  - !22204  cgroupv2 io bugfix patches
  - !22264  Fix CVE-2026-43262
  - !22307  Fix CVE-2026-43363
  - !22320  Fix CVE-2026-43429
  - !20492  scsi: leapraid: add RAID disk hide/show events and fix misc issues
  - ceph: fix i_nlink underrun during async unlink
  - !22306  dmaengine: idxd: Fix possible invalid memory access after FLR
  - !22304  module: Fix kernel panic when a symbol st_shndx is out of bounds
  - !22317  drm/ioc32: stop speculation on the drm_compat_ioctl path
  - !22226  kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features
  - !22112 Revert "cpufreq: Fix re-boost issue after hotplugging a CPU"
  - !22105  cpufreq: conservative: Reset requested_freq on limits change
  - net/mlx5: lag: Check for LAG device before creating debugfs
  - !22313 drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0
  - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
  - USB: usbcore: Introduce usb_bulk_msg_killable()
  - !22037 Fix CVE-2026-31469
  - !22292 Fix CVE-2026-43407
  - drm/ioc32: stop speculation on the drm_compat_ioctl path
  - drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0
  - !22296 urma: fix potential parameter overflow in initialization
  - !22290  mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory
  - !22262 net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
  - x86/apic: Disable x2apic on resume if the kernel expects so
  - dmaengine: idxd: Fix possible invalid memory access after FLR
  - module: Fix kernel panic when a symbol st_shndx is out of bounds
  - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
  - !22276  crypto: af-alg - fix NULL pointer dereference in scatterwalk
  - mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory
  - urma: fix potential parameter overflow in initialization
  - !20782  tracing: Fix soft lockup when lseeking trace file
  - crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
  - !21650 urma: query resource options by id.
  - !22260 CVE-2026-31419
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk
  - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
  - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
  - !22217 Fix CVE-2026-31697
  - !22234 Fix CVE-2026-31422
  - !22076 Fix CVE-2026-31684
  - !22074 Fix CVE-2026-31685
  - EFI/CPER: don't dump the entire memory region
  - !22127 rnpvf: update rnpvf driver to version 1.1.10.
  - !22170 rnp: update rnp driver to version 1.1.14.
  - crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
  - KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
  - KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
  - KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject
  - gfs2: fiemap page fault fix
  - bonding: remove unused bond_is_first_slave and bond_is_last_slave macros
  - net: bonding: fix use-after-free in bond_xmit_broadcast()
  - bonding: do not set usable_slaves for broadcast mode
  - net: bonding: update the slave array for broadcast mode
  - net: hns3: add dcbnl_setbuffer and dcbnl_getbuffer support for pf
  - !22242 [OLK-6.6] ub: ubase: Add S Device ID, USC/UCP, DTU, and proxy support
  - !22241 Fix CVE-2026-31779
  - !22240  atm: lec: fix use-after-free in sock_def_readable()
  - !21958 Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - !22249 [OLK-6.6] Fix CVE-2026-43284
  - Ethernet: Linkdata: Supports Linkdata ethernet Controllers
  - xfrm: esp: avoid in-place decrypt on shared skb frags
  - ub: ubase: Added proxy functions to ubase
  - ub: ubase: support DTU feature
  - ub: ubase: add USC and UCP
  - ub: ubase: Add Ubase S Device ID
  - !22184 Fix CVE-2026-31675
  - !22220  net: Fix CVE-2026-31518
  - !22219  net/sched: Fix CVE-2026-31421
  - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
  - wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
  - atm: lec: fix use-after-free in sock_def_readable()
  - net: sched: act_csum: validate nested VLAN headers
  - net/sched: cls_flow: fix NULL pointer dereference on shared blocks
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets
  - kvm: arm64: Add HIP13 cpu type definition for detecting virtualization features
  - mm/userfaultfd: fix hugetlb fault mutex hash calculation
  - urma: query resource options by id.
  - esp: fix skb leak with espintcp and async crypto
  - xfrm: Fix the usage of skb->sk
  - net/sched: cls_fw: fix NULL dereference of "old" filters before change()
  - net/sched: cls_fw: fix NULL pointer dereference on shared blocks
  - blk-iocost: fix busy_level reset when no IOs complete
  - block: use min() instead of min_t()
  - blk-throttle: fix lower bps rate by throtl_trim_slice()
  - block: flush all throttled bios when deleting the cgroup
  - jbd2: increase IO priority of checkpoint
  - blk-throttle: don't take carryover for prioritized processing of metadata
  - blk-throttle: support prioritized processing of metadata
  - blk-throttle: fix lower control under super low iops limit
  - rnp: update rnp driver to version 1.1.14.
  - net/sched: sch_netem: fix out-of-bounds access in packet corruption
  - rnpvf: update rnpvf driver to version 1.1.10.
  - Revert "cpufreq: Fix re-boost issue after hotplugging a CPU"
  - cpufreq: conservative: Reset requested_freq on limits change
  - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
  - tracing: Fix soft lockup when lseeking trace file
  - scsi: leapraid: add RAID disk hide/show events and fix misc issues


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-154.0.0.140
changelog:
  - !22660 Fix CVE-2026-43119
  - !22696  CVEs
  - !22652 Fix CVE-2026-43223
  - !22651 Fix CVE-2026-43472
  - !22329 Fix CVE-2026-31752
  - !22709  config: x86: Fix CI "checkdefconfig" warning by updating defconfig
  - config: x86: Fix CI "checkdefconfig" warning by updating defconfig
  - Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
  - fbcon: check return value of con2fb_acquire_newinfo()
  - !22646 obmm: implement 64K pagesize support
  - !22580 obmm: fix GDB/ptrace support and enhance ownership tracking on device-based memory
  - !22542 ub: cdma: add software TLB invalidation for KSVA memory
  - !22661  USB: core: Limit the length of unkillable synchronous timeouts
  - !22124  CVE-2026-31503
  - !22567 Fix CVE-2026-43170
  - !22475 Fix CVE-2026-43427
  - !22643 KVM: arm64: Fix timer_early_inject conflict with CVM
  - USB: core: Limit the length of unkillable synchronous timeouts
  - !22599  Fix dup panic
  - Bluetooth: hci_sync: annotate data-races around hdev->req_status
  - !21825 [OLK-6.6] Decouple resctrl x86 with mpam and backport Intel RDT-SNC and AET
  - media: pvrusb2: fix URB leak in pvr2_send_request_ex
  - unshare: fix unshare_fs() handling
  - !22479 crypto: hisilicon - turn mainline patch
  - !22561 virtCCA-Live-Migration: Add host agent support for CVM live migration
  - !22563 fix migvm_queue_dev_mmap buffer check
  - !22449 [OLK-6.6][linux-6.6.y sync] Backport 6.6.122-6.6.123 LTS Patches
  - !21130 [OLK-6.6] Hygon: Update ccp-crypto driver, to support SM4-XTS/GCM and model 10h cpu
  - KVM: arm64: Fix timer_early_inject conflict with CVM
  - virtCCA-Live-Migration: Add host agent support for CVM live migration
  - !22600 sched_ext: Sync openeuler_defconfig for sched_ext
  - fix migvm_queue_dev_mmap buffer check
  - !22530  KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated
  - !22535  usb: xhci: Prevent interrupt storm on host controller error (HCE)
  - ub/obmm: set OBMM_BASIC_GRANU to 2M rather than PMD_SIZE
  - obmm: relax contig_mem_pool restriction for 64KB pages
  - obmm: add VMA access for ptrace/GDB on PFNMAP regions
  - obmm: support VMA split with ownership-aligned attributes
  - !22560 net/oenetcls: Limit rxqs against combined_channels
  - !22523 net/oenetcls: free sk entry hash on ntuple cleanup
  - !22315 sched/fair: Fix overflow in vruntime_eligible()
  - obmm: refactor ownership tracking for PMD-granularity support
  - !22564 Fix CVE-2026-43212
  - !22514  ceph: add a bunch of missing ceph_path_info initializers
  - !22559  blk-cgroup: skip dying blkg in blkcg_activate_policy()
  - x86: config: Enable resctrl related configs
  - !22055 urma: fix the panic when ipourma module is repeatedly loaded
  - sched_ext: Sync openeuler_defconfig for sched_ext
  - alloc_fdtable(): change calling conventions.
  - fs: consistently deref the files table with rcu_dereference_raw()
  - !22462  net: ipa: fix event ring index not programmed for IPA v5.0+
  - !22551 net/oenetcls: RPS enhancements and bug fixes
  - !22182 Fix CVE-2026-31755
  - !22576  arm64: entry: Fix missing sync_sei in irq_ventry
  - obmm: fix PTE protection bits for READWRITE mappings
  - arm64: entry: Fix missing sync_sei in irq_ventry
  - crypto: hisilicon - remove unused and non-public APIs for qm and sec
  - crypto: hisilicon/qm - drop redundant variable initialization
  - crypto: hisilicon/qm - remove else after return
  - crypto: hisilicon/qm - add const qualifier to info_name in struct qm_cmd_dump_item
  - crypto: hisilicon - fix the format string type error
  - crypto: hisilicon/sec2 - prevent req used-after-free for sec
  - crypto: hisilicon - add device load query functionality to debugfs
  - crypto: hisilicon/qm - increase wait time for mailbox
  - crypto: hisilicon/qm - obtain the mailbox configuration at one time
  - crypto: hisilicon/qm - remove unnecessary code in qm_mb_write()
  - Revert "crypto: hisilicon/qm - obtain the mailbox configuration at one time"
  - Revert "hisi_acc_vfio_pci: obtain the mailbox configuration at one time"
  - crypto: hisilicon/qm - move the barrier before writing to the mailbox register
  - crypto: hisilicon/zip - add lz4 algorithm for hisi_zip
  - !22287 patchset for sched_ext
  - usb: dwc3: gadget: Move vbus draw to workqueue context
  - !22504  dm: clear cloned request bio pointer when last clone bio completes
  - LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE
  - !22554  CVE-2026-46333
  - net/oenetcls: Limit rxqs against combined_channels
  - blk-cgroup: skip dying blkg in blkcg_activate_policy()
  - ptrace: Fix kabi breakage in struct task_struct
  - ptrace: slightly saner 'get_dumpable()' logic
  - net/oenetcls: remove duplicated linux/inet.h include
  - config: Enable SMT_QOS
  - arm64: Add arch code for SMT QoS
  - sched/fair: Add SMT QoS sched core code
  - sched/fair: Move dynamic affinity helper functions to sched.h
  - sched: Add qos_sched_enabled() helper for future expansion
  - sched: Split out QOS_LEVEL from QOS_SCHED for reuse
  - sched_ext: Update comments replacing breather with aborting mechanism
  - sched_ext: Pass held rq to SCX_CALL_OP() for core_sched_before
  - sched_ext: Pass held rq to SCX_CALL_OP() for dump_cpu/dump_task
  - sched_ext: Guard scx_dsq_move() against NULL kit->dsq after failed iter_new
  - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper pointer
  - tools/sched_ext: update scx_show_state.py for scx_aborting change
  - scx_central: Defer timer start to central dispatch to fix init error
  - sched_ext: Fix ops.cgroup_move() invocation kf_mask and rq tracking
  - sched_ext: Track @p's rq lock across set_cpus_allowed_scx -> ops.set_cpumask
  - sched_ext: Fix stale direct dispatch state in ddsp_dsq_id
  - sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback
  - selftests/sched_ext: Add missing error check for exit__load()
  - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags
  - sched_ext: Fix starvation of scx_enable() under fair-class saturation
  - sched_ext: Disable preemption between scx_claim_exit() and kicking helper work
  - watchdog/softlockup: fix sample ring index wrap in need_counting_irqs()
  - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq()
  - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue()
  - sched_ext: Fix bypass depth leak on scx_enable() failure
  - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks
  - sched_ext: Exit dispatch and move operations immediately when aborting
  - sched_ext: Simplify breather mechanism with scx_aborting flag
  - sched_ext: Use per-CPU DSQs instead of per-node global DSQs in bypass mode
  - sched_ext: Refactor do_enqueue_task() local and global DSQ paths
  - sched_ext: Fix SCX_KICK_WAIT to work reliably
  - tools/sched_ext: Provide a compatible helper for scx_bpf_events()
  - tools/sched_ext: Sync with scx repo
  - sched_ext: Add scx_bpf_events() and scx_read_event() for BPF schedulers
  - sched_ext: Use SCX_TASK_READY test instead of tryget_task_struct() during class switch
  - sched_ext: Fix unsafe locking in the scx_dump_state()
  - sched_ext: Don't kick CPUs running higher classes
  - sched_ext: Always use SMP versions in kernel/sched/ext.c
  - sched_ext: Mark scx_bpf_dsq_move_set_[slice|vtime]() with KF_RCU
  - sched_ext: Drop kfuncs marked for removal in 6.15
  - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl()
  - sched/ext: Prevent update_locked_rq() calls with NULL rq
  - sched_ext: Fix rq lock state in hotplug ops
  - sched_ext: Remove duplicate BTF_ID_FLAGS definitions
  - rhashtable: Fix rhashtable_try_insert test
  - sched_ext: Make scx_kf_allowed_if_unlocked() available outside ext.c
  - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group()
  - sched_ext: Make scx_group_set_weight() always update tg->scx.weight
  - sched/ext: Fix invalid task state transitions on class switch
  - sched/fair: Fix sched_can_stop_tick() for fair tasks
  - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator
  - sched_ext: Fix missing rq lock in scx_bpf_cpuperf_set()
  - sched_ext: Make scx_locked_rq() inline
  - sched_ext: Track currently locked rq
  - sched_ext: Move built-in idle CPU selection policy to a separate file
  - sched_ext: Implement SCX_OPS_ALLOW_QUEUED_WAKEUP
  - selftests/sched_ext: Fix exit selftest hang on UP
  - sched_ext: Use kvzalloc for large exit_dump allocation
  - sched_ext: create_dsq: Return -EEXIST on duplicate request
  - rhashtable: Fix potential deadlock by moving schedule_work outside lock
  - tools include UAPI: Sync linux/sched.h copy with the kernel sources
  - sched/doc: Update documentation after renames and synchronize Chinese version
  - sched/fair: Remove stale FREQUENCY_UTIL comment
  - <linux/cleanup.h>: Allow the passing of both iomem and non-iomem pointers to no_free_ptr()
  - file: add take_fd() cleanup helper
  - sched/ext: Remove sched_fork() hack
  - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance()
  - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx
  - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h.
  - sched_ext: selftests: Fix grammar in tests description
  - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq()
  - sched_ext: Fix migration disabled handling in targeted dispatches
  - sched_ext: Implement auto local dispatching of migration disabled tasks
  - sched_ext: Fix incorrect time delta calculation in time_delta()
  - sched_ext: Fix lock imbalance in dispatch_to_local_dsq()
  - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems
  - tools/sched_ext: Add helper to check task migration state
  - sched_ext: Fix incorrect autogroup migration detection
  - sched_ext: selftests/dsp_local_on: Fix sporadic failures
  - selftests/sched_ext: Fix enum resolution
  - sched_ext: Include task weight in the error state dump
  - sched_ext: Fixes typos in comments
  - sched_ext: fix kernel-doc warnings
  - sched_ext: Use time helpers in BPF schedulers
  - sched_ext: Replace bpf_ktime_get_ns() to scx_bpf_now()
  - sched_ext: Add time helpers for BPF schedulers
  - sched_ext: Add scx_bpf_now() for BPF scheduler
  - sched_ext: Implement scx_bpf_now()
  - sched_ext: Relocate scx_enabled() related code
  - sched_ext: Add option -l in selftest runner to list all available tests
  - sched_ext: Include remaining task time slice in error state dump
  - sched_ext: update scx_bpf_dsq_insert() doc for SCX_DSQ_LOCAL_ON
  - sched_ext: idle: small CPU iteration refactoring
  - sched_ext: idle: introduce check_builtin_idle_enabled() helper
  - sched_ext: idle: clarify comments
  - sched_ext: idle: use assign_cpu() to update the idle cpumask
  - cpumask: introduce assign_cpu() macro
  - sched_ext: Use str_enabled_disabled() helper in update_selcpu_topology()
  - sched_ext: Use sizeof_field for key_len in dsq_hash_params
  - tools/sched_ext: Receive updates from SCX repo
  - sched_ext: Use the NUMA scheduling domain for NUMA optimizations
  - sched_ext: keep running prev when prev->scx.slice != 0
  - sched_ext: idle: Refresh idle masks during idle-to-idle transitions
  - sched_ext: switch class when preempted by higher priority scheduler
  - sched_ext: Replace rq_lock() to raw_spin_rq_lock() in scx_ops_bypass()
  - sched_ext: Fix dsq_local_on selftest
  - sched_ext: initialize kit->cursor.flags
  - sched_ext: Fix invalid irq restore in scx_ops_bypass()
  - MAINTAINERS: add me as reviewer for sched_ext
  - MAINTAINERS: add self as reviewer for sched_ext
  - scx: Fix maximal BPF selftest prog
  - sched_ext: fix application of sizeof to pointer
  - selftests/sched_ext: fix build after renames in sched_ext API
  - sched_ext: Add __weak to fix the build errors
  - sched_ext: Replace scx_next_task_picked() with switch_class() in comment
  - sched_ext: Rename scx_bpf_dispatch[_vtime]_from_dsq*() -> scx_bpf_dsq_move[_vtime]*()
  - sched_ext: Rename scx_bpf_consume() to scx_bpf_dsq_move_to_local()
  - sched_ext: Rename scx_bpf_dispatch[_vtime]() to scx_bpf_dsq_insert[_vtime]()
  - sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context
  - sched_ext: add a missing rcu_read_lock/unlock pair at scx_select_cpu_dfl()
  - sched_ext: Clarify sched_ext_ops table for userland scheduler
  - sched_ext: Enable the ops breather and eject BPF scheduler on softlockup
  - watchdog/softlockup: Report the most frequent interrupts
  - watchdog/softlockup: Low-overhead detection of interrupt storm
  - genirq: Provide a snapshot mechanism for interrupt statistics
  - genirq: Fix kabi for kstat_irqs in struct irq_desc
  - genirq: Convert kstat_irqs to a struct
  - genirq: Deduplicate interrupt descriptor initialization
  - sched_ext: Avoid live-locking bypass mode switching
  - sched_ext: Fix incorrect use of bitwise AND
  - sched_ext: Do not enable LLC/NUMA optimizations when domains overlap
  - sched_ext: Introduce NUMA awareness to the default idle selection policy
  - sched_ext: Replace set_arg_maybe_null() with __nullable CFI stub tags
  - sched_ext: Rename CFI stubs to names that are recognized by BPF
  - sched_ext: Introduce LLC awareness to the default idle selection policy
  - sched_ext: Clarify ops.select_cpu() for single-CPU tasks
  - sched_ext: improve WAKE_SYNC behavior for default idle CPU selection
  - sched_ext: Use btf_ids to resolve task_struct
  - sched/ext: Use tg_cgroup() to elieminate duplicate code
  - sched/ext: Fix unmatch trailing comment of CONFIG_EXT_GROUP_SCHED
  - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq()
  - sched_ext: ops.cpu_acquire() should be called with SCX_KF_REST
  - sched_ext: Handle cases where pick_task_scx() is called without preceding balance_scx()
  - sched_ext: Update scx_show_state.py to match scx_ops_bypass_depth's new type
  - sched_ext: Add a missing newline at the end of an error message
  - sched_ext: Fix enq_last_no_enq_fails selftest
  - sched_ext: Make cast_mask() inline
  - scx: Fix raciness in scx_ops_bypass()
  - scx: Fix exit selftest to use custom DSQ
  - sched_ext: Fix function pointer type mismatches in BPF selftests
  - selftests/sched_ext: add order-only dependency of runner.o on BPFOBJ
  - sched: Pass correct scheduling policy to __setscheduler_class
  - sched: Add __setscheduler_class() for sched_ext
  - sched_ext: Remove unnecessary cpu_relax()
  - sched_ext: Don't hold scx_tasks_lock for too long
  - sched_ext: Move scx_tasks_lock handling into scx_task_iter helpers
  - sched_ext: bypass mode shouldn't depend on ops.select_cpu()
  - sched_ext: Move scx_buildin_idle_enabled check to scx_bpf_select_cpu_dfl()
  - sched_ext: Start schedulers with consistent p->scx.slice values
  - Revert "sched_ext: Use shorter slice while bypassing"
  - sched_ext: use correct function name in pick_task_scx() warning message
  - selftests: sched_ext: Add sched_ext as proper selftest target
  - sched_ext: Documentation: Update instructions for running example schedulers
  - sched_ext, scx_qmap: Add and use SCX_ENQ_CPU_SELECTED
  - sched/core: Add ENQUEUE_RQ_SELECTED to indicate whether ->select_task_rq() was called
  - sched/core: Make select_task_rq() take the pointer to wake_flags instead of value
  - sched_ext: scx_cgroup_exit() may be called without successful scx_cgroup_init()
  - sched_ext: Improve error reporting during loading
  - sched_ext: Add __weak markers to BPF helper function decalarations
  - sched_ext: Remove redundant p->nr_cpus_allowed checker
  - sched_ext: Decouple locks in scx_ops_enable()
  - sched_ext: Decouple locks in scx_ops_disable_workfn()
  - sched_ext: Add scx_cgroup_enabled to gate cgroup operations and fix scx_tg_online()
  - sched_ext: Enable scx_ops_init_task() separately
  - sched_ext: Fix SCX_TASK_INIT -> SCX_TASK_READY transitions in scx_ops_enable()
  - sched_ext: Initialize in bypass mode
  - sched_ext: Remove SCX_OPS_PREPPING
  - sched_ext: Relocate check_hotplug_seq() call in scx_ops_enable()
  - sched_ext: Use shorter slice while bypassing
  - sched_ext: Split the global DSQ per NUMA node
  - sched_ext: Relocate find_user_dsq()
  - sched_ext: Allow only user DSQs for scx_bpf_consume(), scx_bpf_dsq_nr_queued() and bpf_iter_scx_dsq_new()
  - scx_flatcg: Use a user DSQ for fallback instead of SCX_DSQ_GLOBAL
  - tools/sched_ext: Receive misc updates from SCX repo
  - sched_ext: Add __COMPAT helpers for features added during v6.12 devel cycle
  - sched_ext: Build fix for !CONFIG_SMP
  - sched_ext: Provide a sysfs enable_seq counter
  - sched_ext: Fix build when !CONFIG_STACKTRACE
  - sched_ext: Don't trigger ops.quiescent/runnable() on migrations
  - sched_ext: Synchronize bypass state changes with rq lock
  - scx_qmap: Implement highpri boosting
  - sched_ext: Implement scx_bpf_dispatch[_vtime]_from_dsq()
  - sched_ext: Compact struct bpf_iter_scx_dsq_kern
  - sched_ext: Replace consume_local_task() with move_local_task_to_local_dsq()
  - sched_ext: Move consume_local_task() upward
  - sched_ext: Move sanity check and dsq_mod_nr() into task_unlink_from_dsq()
  - sched_ext: Reorder args for consume_local/remote_task()
  - sched_ext: Restructure dispatch_to_local_dsq()
  - sched_ext: Fix processs_ddsp_deferred_locals() by unifying DTL_INVALID handling
  - sched_ext: Make find_dsq_for_dispatch() handle SCX_DSQ_LOCAL_ON
  - sched_ext: Refactor consume_remote_task()
  - sched_ext: Rename scx_kfunc_set_sleepable to unlocked and relocate
  - sched_ext: Add missing static to scx_dump_data
  - sched_ext: Add missing static to scx_has_op[]
  - sched_ext: Temporarily work around pick_task_scx() being called without balance_scx()
  - sched: Add dummy version of sched_group_set_idle()
  - sched: Fix kabi for int idle in struct task_group
  - sched: Put task_group::idle under CONFIG_GROUP_SCHED_WEIGHT
  - sched_ext: Add a cgroup scheduler which uses flattened hierarchy
  - sched_ext: Fix kabi for scx_flags and scx_weight in struct task_group
  - sched_ext: Add cgroup support
  - sched: Introduce CONFIG_GROUP_SCHED_WEIGHT
  - sched: Make cpu_shares_read_u64() use tg_weight()
  - sched: Expose css_tg()
  - sched_ext: TASK_DEAD tasks must be switched into SCX on ops_enable
  - sched_ext: TASK_DEAD tasks must be switched out of SCX on ops_disable
  - sched_ext: Remove sched_class->switch_class()
  - sched_ext: Remove switch_class_scx()
  - sched_ext: Relocate functions in kernel/sched/ext.c
  - sched_ext: Unify regular and core-sched pick task paths
  - sched_ext: Replace SCX_TASK_BAL_KEEP with SCX_RQ_BAL_KEEP
  - sched_ext: Don't call put_prev_task_scx() before picking the next task
  - sched: Fix kabi for put_prev_task in struct sched_class
  - sched: Add put_prev_task(.next)
  - sched: Combine the last put_prev_task() and the first set_next_task()
  - sched: Fix kabi pick_task in struct sched_class
  - sched: Rework pick_next_task()
  - sched: Split up put_prev_task_balance()
  - sched: Fixup set_next_task() implementations
  - sched/fair: Unify pick_{,next_}_task_fair()
  - sched/fair: Cleanup pick_task_fair()'s curr
  - sched/fair: Cleanup pick_task_fair() vs throttle
  - sched/fair: Remove unused 'curr' argument from pick_next_entity()
  - sched: Use set_next_task(.first) where required
  - sched_ext: Use sched_clock_cpu() instead of rq_clock_task() in touch_core_sched()
  - sched_ext: Use task_can_run_on_remote_rq() test in dispatch_to_local_dsq()
  - sched_ext: Add missing cfi stub for ops.tick
  - scx_central: Fix smatch checker warning
  - sched_ext: Don't use double locking to migrate tasks across CPUs
  - sched_ext: define missing cfi stubs for sched_ext
  - sched_ext: Improve logging around enable/disable
  - sched_ext: Make scx_rq_online() also test cpu_active() in addition to SCX_RQ_ONLINE
  - sched_ext: Fix unsafe list iteration in process_ddsp_deferred_locals()
  - sched_ext: Enable CONFIG_SCHED_CLASS_EXT on ARM64
  - sched_ext: Make task_can_run_on_remote_rq() use common task_allowed_on_cpu()
  - sched_ext: Improve comment on idle_sched_class exception in scx_task_iter_next_locked()
  - sched_ext: Fix kabi for balance in struct sched_class
  - sched_ext: Simplify UP support by enabling sched_class->balance() in UP
  - sched_ext: Use update_curr_common() in update_curr_scx()
  - sched_ext: Add scx_enabled() test to @start_class promotion in put_prev_task_balance()
  - sched_ext: Simplify scx_can_stop_tick() invocation in sched_can_stop_tick()
  - sched_ext: Allow p->scx.disallow only while loading
  - sched_ext: Build fix on !CONFIG_STACKTRACE[_SUPPORT]
  - scx/selftests: Verify we can call create_dsq from prog_run
  - scx: Allow calling sleepable kfuncs from BPF_PROG_TYPE_SYSCALL
  - sched_ext: Fixes incorrect type in bpf_scx_init()
  - sched_ext/scx_qmap: Pick idle CPU for direct dispatch on !wakeup enqueues
  - sched_ext: Allow SCX_DSQ_LOCAL_ON for direct dispatches
  - sched_ext: s/SCX_RQ_BALANCING/SCX_RQ_IN_BALANCE/ and add SCX_RQ_IN_WAKEUP
  - sched_ext: Unpin and repin rq lock from balance_scx()
  - sched: Move struct balance_callback definition upward
  - sched_ext: Make scx_bpf_reenqueue_local() skip tasks that are being migrated
  - sched_ext: Reimplement scx_bpf_reenqueue_local()
  - sched_ext/scx_qmap: Add an example usage of DSQ iterator
  - sched_ext: Implement DSQ iterator
  - sched_ext: Take out ->priq and ->flags from scx_dsq_node
  - sched, sched_ext: Move some declarations from kernel/sched/ext.h to sched.h
  - sched, sched_ext: Open code for_balance_class_range()
  - sched_ext: Minor cleanups in kernel/sched/ext.h
  - sched_ext: Disallow loading BPF scheduler if isolcpus= domain isolation is in effect
  - sched_ext: Account for idle policy when setting p->scx.weight in scx_ops_enable_task()
  - sched, sched_ext: Simplify dl_prio() case handling in sched_fork()
  - sched/ext: Add BPF function to fetch rq
  - sched_ext: Documentation: Remove mentions of scx_bpf_switch_all
  - sched_ext: Swap argument positions in kcalloc() call to avoid compiler warning
  - sched_ext: add CONFIG_DEBUG_INFO_BTF dependency
  - sched_ext: fix typo in set_weight() description
  - sched_ext: Fix spelling mistake: "intead" -> "instead"
  - sched_ext: Drop tools_clean target from the top-level Makefile
  - sched_ext: Make scx_bpf_cpuperf_set() @cpu arg signed
  - sched_ext: Add cpuperf support
  - cpufreq_schedutil: Refactor sugov_cpu_is_busy()
  - sched_ext: Fix kabi for switch_class in struct sched_class
  - sched, sched_ext: Replace scx_next_task_picked() with sched_class->switch_class()
  - sched_ext: Add selftests
  - sched_ext: Documentation: scheduler: Document extensible scheduler class
  - sched_ext: Add vtime-ordered priority queue to dispatch_q's
  - sched_ext: Implement core-sched support
  - sched_ext: Bypass BPF scheduler while PM events are in progress
  - sched_ext: Implement sched_ext_ops.cpu_online/offline()
  - sched_ext: Implement sched_ext_ops.cpu_acquire/release()
  - sched_ext: Implement SCX_KICK_WAIT
  - sched_ext: Track tasks that are subjects of the in-flight SCX operation
  - sched_ext: Implement tickless support
  - sched_ext: Add task state tracking operations
  - sched_ext: Make watchdog handle ops.dispatch() looping stall
  - sched_ext: Add a central scheduler which makes all scheduling decisions on one CPU
  - sched_ext: Implement scx_bpf_kick_cpu() and task preemption support
  - tools/sched_ext: Add scx_show_state.py
  - sched_ext: Print debug dump after an error exit
  - sched_ext: Print sched_ext info when dumping stack
  - sched_ext: Allow BPF schedulers to disallow specific tasks from joining SCHED_EXT
  - sched_ext: Implement runnable task stall watchdog
  - sched_ext: Add sysrq-S which disables the BPF scheduler
  - sched_ext: Add scx_simple and scx_example_qmap example schedulers
  - sched_ext: Allow dequeue_task_scx to fail
  - sched_ext: Fix kabi for scx in struct task_struct
  - sched_ext: Implement BPF extensible scheduler class
  - sched: Fix kabi for dequeue_task in struct sched_class
  - sched: Allow sched_class::dequeue_task() to fail
  - sched/deadline: Move bandwidth accounting into {en,de}queue_dl_entity
  - sched/fair: Fix kabi for check_preempt_curr and wakeup_preempt in struct sched_class
  - sched/fair: Rename check_preempt_curr() to wakeup_preempt()
  - sched/fair: Rename check_preempt_wakeup() to check_preempt_wakeup_fair()
  - sched_ext: Add boilerplate for extensible scheduler class
  - sched: Add normal_policy()
  - sched: Factor out update_other_load_avgs() from __update_blocked_others()
  - sched: Factor out cgroup weight conversion functions
  - sched: Fix kabi for switching_to in struct sched_class
  - sched: Add sched_class->switching_to() and expose check_class_changing/changed()
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
  - sched/syscalls: Fix kabi for EXPORT_SYMBOL moved from core.c to syscalls.c
  - sched/syscalls: Split out kernel/sched/syscalls.c from kernel/sched/core.c
  - sched/cpufreq: Rework schedutil governor performance estimation
  - Reapply "sched: Fix kabi breakage of struct task_struct for saved_state"
  - sched/core: Remove ifdeffery for saved_state
  - sched: Misc cleanups
  - Revert "sched/core: Remove ifdeffery for saved_state"
  - Revert "sched: Fix kabi breakage of struct task_struct for saved_state"
  - sched: Simplify sched_move_task()
  - sched: Simplify sched_rr_get_interval()
  - sched: Simplify yield_to()
  - sched: Simplify sched_{set,get}affinity()
  - sched: Simplify syscalls
  - Revert "sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting"
  - sched: Simplify set_user_nice()
  - cleanup: Make no_free_ptr() __must_check
  - sched: Fix kabi for reweight_task in struct sched_class
  - sched: Add sched_class->reweight_task()
  - sched: Allow sched_cgroup_fork() to fail and introduce sched_cancel_fork()
  - sched: Restructure sched_class order sanity checks in sched_init()
  - Revert "sched: Split out QOS_LEVEL from QOS_SCHED for reuse"
  - Revert "sched: Add qos_sched_enabled() helper for future expansion"
  - Revert "sched/fair: Move dynamic affinity helper functions to sched.h"
  - Revert "sched/fair: Add SMT QoS sched core code"
  - Revert "arm64: Add arch code for SMT QoS"
  - Revert "config: Enable SMT_QOS"
  - ub: cdma: add software TLB invalidation for KSVA memory
  - !22510 ub: udma: code optimization about safe mode
  - !21986 urma: Enable RH2D streaming by IPoURMA
  - !22521 v12  SMT QOS
  - usb: xhci: Prevent interrupt storm on host controller error (HCE)
  - !21948 urma: fix spinlock usage in ubagg_get_seg_info function
  - net/oenetcls: fix mode-0 init rollback for ntuple resources
  - !22501  smb: client: prevent races in ->query_interfaces()
  - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated
  - !22482  cifs: some missing initializations on replay
  - !22472  smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
  - !22426  smb: client: prevent races in ->query_interfaces()
  - net/oenetcls: fix RPS CPU index scaling bias
  - ub: udma: code optimization
  - net/oenetcls: free sk entry hash on ntuple cleanup
  - !22511  apei: use blocking notifier for page offline policy chain
  - config: Enable SMT_QOS
  - arm64: Add arch code for SMT QoS
  - sched/fair: Add SMT QoS sched core code
  - sched/fair: Move dynamic affinity helper functions to sched.h
  - sched: Add qos_sched_enabled() helper for future expansion
  - sched: Split out QOS_LEVEL from QOS_SCHED for reuse
  - !22442 v5  ext4 hardware atomic write support
  - urma: Enable RH2D streaming by IPoURMA
  - !22503 ub: ub_fwctl: add querying the peak bandwidth.
  - !22500 ub:ubus: Bugfix control software restart features
  - ceph: add a bunch of missing ceph_path_info initializers
  - apei: use blocking notifier for page offline policy chain
  - urma: fix spinlock usage in ubagg_get_seg_info function
  - ub: udma: resolve legacy issues of shared page tables.
  - ub: udma: support dtu function.
  - ub: udma: support jetty_opt.
  - ub: udma: support ucp & udp.
  - ub: udma: support sharing JFC.
  - ub: udma: supports write with atomic.
  - ub: udma: Supports Safe Mode.
  - !22256 urma: fix reference count imbalance in ubagg and uburma modules
  - Fix kabi breakage in kernfs_node, kernfs_ops and bin_attribute
  - x86: config: Enable Intel Application Energy Telemetry (AET)
  - perf/x86/intel/uncore: Add per-scheduler IMC CAS count events
  - x86,fs/resctrl: Update documentation for telemetry events
  - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG
  - fs/resctrl: Move RMID initialization to first mount
  - x86,fs/resctrl: Compute number of RMIDs as minimum across resources
  - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[]
  - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG
  - x86/resctrl: Add energy/perf choices to rdt boot option
  - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG
  - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp()
  - fs/resctrl: Refactor mkdir_mondata_subdir()
  - x86/resctrl: Read telemetry events
  - x86/resctrl: Find and enable usable telemetry events
  - x86,fs/resctrl: Add architectural event pointer
  - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs
  - x86/resctrl: Discover hardware telemetry events
  - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains
  - x86,fs/resctrl: Add and initialize a resource for package scope monitoring
  - x86,fs/resctrl: Add an architectural hook called for first mount
  - x86,fs/resctrl: Support binary fixed point event counters
  - x86,fs/resctrl: Handle events that can be read from any CPU
  - fs/resctrl: Make event details accessible to functions when reading events
  - x86,fs/resctrl: Rename some L3 specific functions
  - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain
  - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters
  - fs/resctrl: Split L3 dependent parts out of __mon_event_count()
  - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr
  - x86/resctrl: Clean up domain_remove_cpu_ctrl()
  - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types
  - x86/resctrl: Move L3 initialization into new helper function
  - x86,fs/resctrl: Improve domain type checking
  - fs/resctrl: Consider sparse masks when initializing new group's allocation
  - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode
  - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
  - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled
  - MAINTAINERS: resctrl: Add myself as reviewer
  - x86/resctrl: Configure mbm_event mode if supported
  - fs/resctrl: Introduce the interface to switch between monitor modes
  - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled
  - fs/resctrl: Introduce the interface to modify assignments in a group
  - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group
  - fs/resctrl: Auto assign counters on mkdir and clean up on group removal
  - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir
  - fs/resctrl: Provide interface to update the event configurations
  - fs/resctrl: Add event configuration directory under info/L3_MON/
  - fs/resctrl: Support counter read/reset with mbm_event assignment mode
  - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read()
  - x86/resctrl: Refactor resctrl_arch_rmid_read()
  - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode
  - fs/resctrl: Pass struct rdtgroup instead of individual members
  - fs/resctrl: Add the functionality to unassign MBM events
  - fs/resctrl: Add the functionality to assign MBM events
  - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC
  - fs/resctrl: Introduce event configuration field in struct mon_evt
  - x86/resctrl: Add data structures and definitions for ABMC assignment
  - fs/resctrl: Introduce interface to display number of free MBM counters
  - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain
  - fs/resctrl: Add resctrl file to display number of assignable counters
  - fs/resctrl: Introduce the interface to display monitoring modes
  - x86/resctrl: Add support to enable/disable AMD ABMC feature
  - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details
  - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource
  - x86/resctrl: Add ABMC feature in the command line options
  - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC)
  - x86,fs/resctrl: Prepare for more monitor events
  - x86/resctrl: Remove the rdt_mon_features global variable
  - x86,fs/resctrl: Replace architecture event enabled checks
  - x86,fs/resctrl: Consolidate monitor event descriptions
  - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest
  - fs/resctrl: Optimize code in rdt_get_tree()
  - fs/resctrl: Eliminate false positive lockdep warning when reading SNC counters
  - resctrl: get rid of pointless debugfs_file_{get,put}()
  - x86,fs/resctrl: Remove inappropriate references to cacheinfo in the resctrl subsystem
  - fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring rdtgroup_mutex
  - MAINTAINERS: Add reviewers for fs/resctrl
  - x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl
  - x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name
  - x86/resctrl: Always initialise rid field in rdt_resources_all[]
  - x86/resctrl: Relax some asm #includes
  - x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context()
  - x86/resctrl: Squelch whitespace anomalies in resctrl core code
  - x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h
  - x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs
  - x86/resctrl: Move enum resctrl_event_id to resctrl.h
  - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl
  - fs/resctrl: Add boiler plate for external resctrl code
  - !22506 ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process
  - x86/resctrl: Add 'resctrl' to the title of the resctrl documentation
  - x86/resctrl: Split trace.h
  - x86/resctrl: Expand the width of domid by replacing mon_data_bits
  - x86/resctrl: Add end-marker to the resctrl_event_id enum
  - x86/resctrl: Move is_mba_sc() out of core.c
  - x86/resctrl: Drop __init/__exit on assorted symbols
  - x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point
  - x86/resctrl: Check all domains are offline in resctrl_exit()
  - x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_"
  - x86/resctrl: Remove the limit on the number of CLOSID
  - x86/resctrl: Optimize cpumask_any_housekeeping()
  - kernfs: Move dput() outside of the RCU section.
  - kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked().
  - kernfs: annotate different lockdep class for of->mutex of writable files
  - kernfs: Use RCU to access kernfs_node::name.
  - kernfs: Use RCU to access kernfs_node::parent.
  - kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy()
  - kernfs: Acquire kernfs_rwsem in kernfs_node_dentry().
  - kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry().
  - kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn().
  - kernfs: mount: Remove unnecessary ‘NULL’ values from knparent
  - kernfs: Convert kernfs_name_locked() from strlcpy() to strscpy()
  - kernfs: Convert kernfs_walk_ns() from strlcpy() to strscpy()
  - kernfs: sysfs: support custom llseek method for sysfs entries
  - ptrace: Convert ptrace_attach() to use lock guards
  - cpumask: Add cpumask_{first,next}_andnot() API
  - find: Add find_first_andnot_bit()
  - cpumask: Relax cpumask_any_but()
  - cpumask: Switch from inline to __always_inline
  - cpumask: Introduce cpumask_first_and_and()
  - cpumask: add cpumask_weight_andnot()
  - cpumask: add cpumask_any_and_but()
  - cpumask: kernel-doc cleanups and additions
  - x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their callers
  - x86/resctrl: Move get_config_index() to a header
  - x86/resctrl: Handle throttle_mode for SMBA resources
  - x86/resctrl: Move RFTYPE flags to be managed by resctrl
  - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr
  - x86/resctrl: Make prefetch_disable_bits belong to the arch code
  - x86/resctrl: Allow an architecture to disable pseudo lock
  - x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions
  - x86/resctrl: Move mbm_cfg_mask to struct rdt_resource
  - x86/resctrl: Move mba_mbps_default_event init to filesystem code
  - x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers
  - x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC
  - x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h
  - x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers
  - x86/resctrl: Move monitor init work to a resctrl init call
  - x86/resctrl: Move monitor exit work to a resctrl exit call
  - x86/resctrl: Add an arch helper to reset one resource
  - x86/resctrl: Move resctrl types to a separate header
  - x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code
  - x86/resctrl: Expose resctrl fs's init function to the rest of the kernel
  - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid()
  - x86/resctrl: Add helper for setting CPU default properties
  - x86/resctrl: Generate default_ctrl instead of sharing it
  - x86/resctrl: Add max_bw to struct resctrl_membw
  - x86/resctrl: Remove data_width and the tabular format
  - x86/resctrl: Use schema type to determine the schema format string
  - x86/resctrl: Use schema type to determine how to parse schema values
  - x86/resctrl: Remove fflags from struct rdt_resource
  - x86/resctrl: Add a helper to avoid reaching into the arch code resource list
  - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors
  - x86/resctrl: Document the new "mba_MBps_event" file
  - x86/resctrl: Add write option to "mba_MBps_event" file
  - x86/resctrl: Add "mba_MBps_event" file to CTRL_MON directories
  - x86/resctrl: Make mba_sc use total bandwidth if local is not supported
  - x86/resctrl: Compute memory bandwidth for all supported events
  - x86/resctrl: Modify update_mba_bw() to use per CTRL_MON group event
  - x86/resctrl: Prepare for per-CTRL_MON group mba_MBps control
  - x86/resctrl: Introduce resctrl_file_fflags_init() to initialize fflags
  - x86/resctrl: Use kthread_run_on_cpu()
  - x86/resctrl: Support Sub-NUMA cluster mode SNC6
  - x86/resctrl: Slightly clean-up mbm_config_show()
  - x86/resctrl: Annotate get_mem_config() functions as __init
  - x86/resctrl: Avoid overflow in MB settings in bw_validate()
  - x86/resctrl: Fix arch_mbm_* array overrun on SNC
  - x86/resctrl: Update documentation with Sub-NUMA cluster changes
  - x86/resctrl: Detect Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Enable shared RMID mode on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Make __mon_event_count() handle sum domains
  - x86/resctrl: Fill out rmid_read structure for smp_call*() to read a counter
  - x86/resctrl: Handle removing directories in Sub-NUMA Cluster (SNC) mode
  - x86/resctrl: Create Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Allocate a new field in union mon_data_bits
  - x86/resctrl: Refactor mkdir_mondata_subdir() with a helper function
  - x86/resctrl: Initialize on-stack struct rmid_read instances
  - x86/resctrl: Add a new field to struct rmid_read for summation of domains
  - x86/resctrl: Prepare for new Sub-NUMA Cluster (SNC) monitor files
  - x86/resctrl: Block use of mba_MBps mount option on Sub-NUMA Cluster (SNC) systems
  - x86/resctrl: Introduce snc_nodes_per_l3_cache
  - x86/resctrl: Add node-scope to the options for feature scope
  - x86/resctrl: Split the rdt_domain and rdt_hw_domain structures
  - x86/resctrl: Prepare for different scope for control/monitor operations
  - x86/resctrl: Prepare to split rdt_domain structure
  - x86/resctrl: Prepare for new domain scope
  - x86/resctrl: Replace open coded cacheinfo searches
  - cacheinfo: Add function to get cacheinfo for a given CPU and cache level
  - cpu: Drop "extern" from function declarations in cpuhplock.h
  - cpu: Move CPU hotplug function declarations into their own header
  - x86/resctrl: Don't try to free nonexistent RMIDs
  - x86/resctrl: Add tracepoint for llc_occupancy tracking
  - x86/resctrl: Rename pseudo_lock_event.h to trace.h
  - x86/resctrl: Simplify call convention for MSR update functions
  - x86/resctrl: Pass domain to target CPU
  - x86/resctrl: Switch to new Intel CPU model defines
  - x86/resctrl: Fix uninitialized memory read when last CPU of domain goes offline
  - Documentation/x86: Fix title underline length
  - Documentation/x86: Document that resctrl bandwidth control units are MiB
  - x86/resctrl: Remove lockdep annotation that triggers false positive
  - x86/resctrl: Separate arch and fs resctrl locks
  - x86/resctrl: Move domain helper migration into resctrl_offline_cpu()
  - x86/resctrl: Add CPU offline callback for resctrl work
  - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but CPU
  - x86/resctrl: Add CPU online callback for resctrl work
  - x86/resctrl: Add helpers for system wide mon/alloc capable
  - x86/resctrl: Make rdt_enable_key the arch's decision to switch
  - x86/resctrl: Move alloc/mon static keys into helpers
  - x86/resctrl: Make resctrl_mounted checks explicit
  - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read()
  - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep
  - x86/resctrl: Queue mon_event_read() instead of sending an IPI
  - x86/resctrl: Add cpumask_any_housekeeping() for limbo/overflow
  - x86/resctrl: Move CLOSID/RMID matching and setting to use helpers
  - x86/resctrl: Allocate the cleanest CLOSID by searching closid_num_dirty_rmid
  - x86/resctrl: Use __set_bit()/__clear_bit() instead of open coding
  - x86/resctrl: Track the number of dirty RMID a CLOSID has
  - x86/resctrl: Allow RMID allocation to be scoped by CLOSID
  - x86/resctrl: Access per-rmid structures by index
  - x86/resctrl: Track the closid with the rmid
  - x86/resctrl: Move RMID allocation out of mkdir_rdt_prepare()
  - x86/resctrl: Create helper for RMID allocation and mondata dir creation
  - x86/resctrl: Free rmid_ptrs from resctrl_exit()
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain()
  - x86/resctrl: Implement new mba_MBps throttling heuristic
  - x86/resctrl: Read supported bandwidth sources from CPUID
  - x86/resctrl: Remove hard-coded memory bandwidth limit
  - x86/resctrl: Fix unused variable warning in cache_alloc_hsw_probe()
  - x86: Decouple resctrl with resctrl-mpam
  - ub: ub_fwctl: add querying the peak bandwidth.
  - ub: ubase&unic&cdma&udma: Supporting the restart optimization of the management and control process
  - dm: clear cloned request bio pointer when last clone bio completes
  - net/oenetcls: Add rps policy switch for phy NIC
  - net/oenetcls: Make OENETCLS default as module
  - net/oenetcls: Support ipv6 for ntuple mode
  - net/oenetcls: Supports rxq multiplexing
  - net/oenetcls: Add local flow NUMA-aware rps
  - net/oenetcls: Fix possible hash collision issue
  - net/oenetcls: Prioritize oenetcls hooks over rps
  - net/oenetcls: Add mode 2 for rps numa affinity
  - smb: client: prevent races in ->query_interfaces()
  - ub:ubus: Bugfix control software restart features
  - !22481 v3  optimize copy_from_user
  - !22490 ub: ubase&unic: Advanced Features for issue #9110
  - !22424  powerpc, perf: Check that current->mm is alive before getting user callchain
  - gpiolib: acpi: Fix potential out-of-boundary left shift
  - ub: ubase: Provide interface for obtaining ub feature
  - ub: ubase&unic: ubase & unic use non mirror mem
  - !22359 linkdata: fix compile error
  - ub: ubase: Supports real-time traffic control functions such as enabling, querying, and disabling only
  - ub: ubase: The ubase supports the configuration of QoS priority mapping using the hccn_tool
  - !22456 ub:ubus: change the condition of io decoder creating page table or not
  - !22470 ub/unic: bugfix for ubase&unic driver
  - !22436 iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg()
  - !22310 iommu: Optimize the iommu PLBI Framework
  - !22437 iommu/ummu: remove swap operation when ungrant
  - cifs: some missing initializations on replay
  - !22438 iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation
  - arm64: uaccess: add CONFIG control for copy_from_user_opt
  - arm64: uaccess: add optimized copy_from_user for Hisilicon platforms
  - arm64: cputype: Add CPU type for HISI_CPU_PART_HIP11
  - usb: class: cdc-wdm: fix reordering issue in read code path
  - !22427  perf/x86/intel/uncore: Fix die ID init and look up bugs
  - smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path
  - ub: ubase: reinitialize cmdq in uninit flow to resolve UE deregistration failure after ELR reset failure
  - ub: ubase: Resolve the issue of insufficient ctrlq sequences
  - ub: ubase: Modify the log rate limiting interface, add frequency-limited logs, and add maintenance logs
  - ub: ubase: Locking is performed on the seq_tbl processing in the proxy response
  - net: unic: Fixed the problem of being unable to replenish rqe to the chip in time
  - ub: ubase: Solve the mailbox processing times out in abnormal scenarios
  - net: unic: Fixed the issue of memory overwriting in unic traffic flow
  - ub: ubase&unic: encoding alarm rectification
  - ub: ubase: Fix the issue where the mailbox buffer is not released after a cmdq submission failure
  - net: unic: Supports querying of the Ethernet port's NL-layer register
  - ub: ubase: Fix the problem of frequent log printing
  - ub: ubase: Adjustment of conditions for creating ubase proxy auxiliary devices
  - ub: ubase: Delete residual DTU window of the UDMA during reset
  - ub: ubase: Add DTU capability bit printing
  - net: unic: The unsupported VL rate limit value is displayed as 0
  - net: unic: Notify MAMI when the LACP status changes
  - net: unic: adapt to the change for ETS tsa and bw configuration permission
  - !22413 ub: ub_fwctl: query port link status add construct first link data
  - bpf/selftests: test_select_reuseport_kern: Remove unused header
  - Revert "net: Remove conditional threaded-NAPI wakeup based on task state."
  - Revert "net: Allow to use SMP threads for backlog NAPI."
  - ksmbd: fix recursive locking in RPC handle list access
  - pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins
  - mptcp: avoid dup SUB_CLOSED events after disconnect
  - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0
  - drm/msm/a6xx: fix bogus hwcg register updates
  - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver
  - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
  - net/sched: act_ife: convert comma to semicolon
  - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate()
  - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
  - wifi: mac80211: move TDLS work to wiphy work
  - ksmbd: Fix race condition in RPC handle list access
  - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
  - ksmbd: smbd: fix dma_unmap_sg() nents
  - mei: trace: treat reg parameter as string
  - mm/kfence: randomize the freelist on initialization
  - drm/amdgpu/gfx11: fix wptr reset in KGQ init
  - drm/amdgpu/gfx10: fix wptr reset in KGQ init
  - drm/amdgpu/soc21: fix xclk for APUs
  - drm/imx/tve: fix probe device leak
  - scripts: generate_rust_analyzer: Add compiler_builtins -> core dep
  - flex_proportions: make fprop_new_period() hardirq safe
  - selftests: mptcp: join: fix local endp not being tracked
  - mptcp: only reset subflow errors when propagated
  - scsi: qla2xxx: edif: Fix dma_free_coherent() size
  - gpio: pca953x: mask interrupts in irq shutdown
  - ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO
  - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()
  - ASoC: fsl: imx-card: Do not force slot width to sample width
  - rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target
  - riscv: compat: fix COMPAT_UTS_MACHINE definition
  - pinctrl: meson: mark the GPIO controller as sleeping
  - dma/pool: distinguish between missing and exhausted atomic pools
  - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler
  - ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion
  - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()
  - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload
  - net: bridge: fix static key check
  - nfc: nci: Fix race between rfkill and nci_unregister_device().
  - net/mlx5e: Account for netdev stats in ndo_get_stats64
  - net/mlx5e: Report rx_discards_phy via rx_dropped
  - ice: stop counting UDP csum mismatch as rx_errors
  - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
  - rocker: fix memory leak in rocker_world_port_post_fini()
  - net: wwan: t7xx: fix potential skb->frags overflow in RX path
  - ipv6: use the right ifindex when replying to icmpv6 from localhost
  - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()
  - octeon_ep: Fix memory leak in octep_device_setup()
  - net: bcmasp: fix early exit leak with fixed phy
  - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()
  - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
  - !22370  scsi: target: tcm_loop: Drain commands in target_reset handler
  - !22364  cifs: Fix locking usage for tcon fields
  - net: ipa: fix event ring index not programmed for IPA v5.0+
  - !22458 ub:ubus: Add control software restart features
  - !22447 v4  arm64/ras: Firmware-first SEI error handling with ESB synchronization
  - iommu/ummu: remove swap operation when ungrant
  -  Linkdata: fix build failure due to missing IPsec configs in defconfig
  - ub:ubus: Add control software restart features
  - ub: ub_fwctl: supports the configuration and query of packet statistics on the UBOE interface based on the NL-layer VL.
  - ub: ub_fwctl: query port link status add construct first link data
  - !22395 ub:ubus: support getting supported features data
  - iommu/ummu-core: ummu_fill_pages interface provides GFP flags for memory allocation
  - !22453 Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors"
  - ub:ubus: Add KABI_RESERVE to struct ub_decoder and message_device
  - ub:ubus: Will not enable decoder if matt jurisdiction is UBFM
  - ub:ubus: change the condition of io decoder creating page table or not
  - Revert "!21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors"
  - arm64: openeuler_defconfig: enable CONFIG_ARM64_SYNC_SEI by default
  - ACPI/APEI/arm64: add vendor SEI handling for firmware-first RAS
  - arm64: Add runtime switch to control ESB for SEI synchronization
  - arm64/entry: Add support to synchronize SEI at the exception boundary
  - !22417 iommu/ummu-core: support TID sharing within same mm
  - urma: fix reference count imbalance in ubagg and uburma modules
  - !22432  spi: use generic driver_override infrastructure
  - Documentation: ext4: Convert includes into toctrees
  - Documentation: ext4: atomic_writes: Demote last three sections
  - block: Don't allow an atomic write be truncated in blkdev_write_iter()
  - nvme: stop using AWUPF
  - ext4: Simplify last in leaf check in ext4_map_query_blocks
  - ext4: Unwritten to written conversion requires EXT4_EX_NOCACHE
  - block: Fix blk_validate_atomic_write_limits() build for arm32
  - block: fix kabi broken in enum req_flag_bits
  - iomap: Lift blocksize restriction on atomic writes
  - ext4: Add atomic block write documentation
  - ext4: Enable support for ext4 multi-fsblock atomic write using bigalloc
  - ext4: Add multi-fsblock atomic write support with bigalloc
  - ext4: Add support for EXT4_GET_BLOCKS_QUERY_LEAF_BLOCKS
  - ext4: Make ext4_meta_trans_blocks() non-static for later use
  - ext4: Check if inode uses extents in ext4_inode_can_atomic_write()
  - ext4: Document an edge case for overwrites
  - ext4: Do not fallback to buffered-io for DIO atomic write
  - ext4: Support setting FMODE_CAN_ATOMIC_WRITE
  - ext4: Check for atomic writes support in write iter
  - ext4: Add statx support for atomic writes
  - fs: fix kabi broken in struct kstat
  - fs: Add initial atomic write support info to statx
  - fs: iomap: Atomic write support
  - fs: Export generic_atomic_write_valid()
  - nvme: Atomic write support
  - block: Add bdev atomic write limits helpers
  - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid()
  - block/fs: Pass an iocb to generic_atomic_write_valid()
  - block: Add fops atomic write support
  - block: Call blkdev_dio_unaligned() from blkdev_direct_IO()
  - block: fix kabi broken in struct queue_limits
  - block: Add core atomic write support
  - fs: Initial atomic write support
  - block: Generalize chunk_sectors support as boundary support
  - block: Pass blk_queue_get_max_sectors() a request pointer
  - iommu/ummu-core: fix uaf in ummu_core_invalidate_cfg()
  - !21810 [OLK-6.6] apei/ghes: Add Zhaoxin platform support for ghes_edac
  - !21807 [OLK-6.6] x86/cpu: detect extended topology for Zhaoxin CPUs
  - !21804 [OLK-6.6] x86/delay: Update support for Zhaoxin PAUSEOPT instruction
  - !21803 [OLK-6.6] ALSA: HDA: Add Centaur HDMI Controller and Codec support
  - !21797 [OLK-6.6] iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe
  - !21796 [OLK-6.6] x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors
  - !21795 [OLK-6.6] efi/cper: Add Zhaoxin mem error decode for KH-50000
  - !21794 [OLK-6.6] hwmon: zhaoxin-cputemp: Update for KX-8000
  - !21793 [OLK-6.6] zhaoxin: Update hardware random number generator driver
  - !21792 [OLK-6.6] ALSA: hda: Add support for Zhaoxin SB HDAC controller
  - spi: use generic driver_override infrastructure
  - iommu/ummu-core: support TID sharing within same mm
  - perf/x86/intel/uncore: Fix die ID init and look up bugs
  - smb: client: prevent races in ->query_interfaces()
  - powerpc, perf: Check that current->mm is alive before getting user callchain
  - iommu: Optimize the iommu PLBI Framework
  - ub:ubus: support getting supported features data
  - iommu/vt-d: fix NULL pointer issue in acpi_rmrr_andd_probe
  - scsi: target: tcm_loop: Drain commands in target_reset handler
  - cifs: Fix locking usage for tcon fields
  - bridge: br_nd_send: validate ND option lengths
  - sched/fair: Fix overflow in vruntime_eligible()
  - sched/fair: Introduce and use the vruntime_cmp() and vruntime_op() wrappers for wrapped-signed aritmetics
  - sched/fair: Mark m*_vruntime() with __maybe_unused
  - sched/fair: Clear rel_deadline when initializing forked entities
  - Revert "sched/fair: Clear rel_deadline when initializing forked entities"
  - usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
  - udp: Fix wildcard bind conflict check when using hash2
  - tcp: Rearrange tests in inet_csk_bind_conflict().
  - x86/delay: add support for Zhaoxin PAUSEOPT instruction
  - urma: fix the panic when ipourma module is repeatedly loaded
  - apei/ghes: Add Zhaoxin platform support for ghes_edac
  - x86/cpu: detect extended topology for Zhaoxin CPUs
  - ALSA: HDA: Add Centaur HDMI Controller and Codec support
  - x86/mce/zhaoxin: Enable mcelog to decode PCIE, ZDI/ZPI, and DRAM errors
  - efi/cper: Add Zhaoxin mem error decode for KH-50000
  - efi/cper: Add Zhaoxin cache error decode
  - efi/cper: Add Zhaoxin micro-architectural error decode
  - efi/cper: Add Zhaoxin non standard cper error decode
  - efi/cper: Add Zhaoxin ZDI ZPI error decode for KH-50000
  - efi: cper: Update Zhaoxin/Centaur ZDI/ZPI error decode
  - hwmon: zhaoxin-cputemp: Update for KX-8000
  - zhaoxin: Update hardware random number generator driver
  - ALSA: hda: Add support for Zhaoxin SB HDAC controller
  - crypto: ccp: fix build issue like redefined RI_XXX_PRESENT
  - crypto: ccp: SM2 ccp encryption support Hygon model 10h
  - crypto: ccp: check if ccp supports sm4-xts/sm4-gcm
  - mm: export split_vma for module use
  - crypto: ccp: Support SM4-GCM for hygon ccp
  - crypto: ccp: Support SM4-XTS for hygon ccp


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-155.0.0.141
changelog:
  - !22935 iommu/ummu: Adapt disable DVM
  - !22522 [OLK-6.6]LoongArch: KVM:update patches from upstream
  - !22468 [OLK-6.6] x86/microcode: Add Zhaoxin cpu microcode update driver
  - iommu/ummu: Adapt disable DVM
  - !22925  Fix hist_field_name issue
  - !22864 drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop
  - !22735 drivers/ub/sentry: support link up/down event
  - !22874 urma: zero-initialize cg_obj to prevent uninitialized memory access
  - tracing: Avoid NULL return from hist_field_name() on truncation
  - tracing: Fix fully-qualified variable reference printing in histograms
  - tracing: Rebuild full_name on each hist_field_name() call
  - !22868  tracing/probe: reject non-closed empty immediate strings
  - !22867  tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()
  - !22862  tracing: branch: Fix inverted check on stat tracer registration
  - !22817 PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn()
  - !22543 netkit, bpf: Add bpf programmable net device
  - drivers/ub/sentry: Add timestamp logging and optimize ACK wait loop
  - !22860 ub:ubus: bugfix for QEMU'addr 8byte check
  - !22891 sched: Remove redundant rcu_read_lock() in build_soft_domain()
  - !22838 [OLK-6.6][linux-6.6.y sync] Backport 6.6.124-6.6.125 LTS Patches
  - !22828 sched/idle: Preserve prev task for soft quota fair repick
  - sched: Remove redundant rcu_read_lock() in build_soft_domain()
  - !22859 ub: cdma: move cleanup helper to event and remove unused include
  - !22244  Fix CVE-2026-31729
  - !22469 LoongArch: KVM: fix vm start failed
  - !22129 [Hygon][6.6][Feature] KVM: x86: Add support for CPUID leaf 0x8C860000
  - PCI/IOV: Fix use-after-free in pci_iov_remove_virtfn()
  - !22800 Fix CVE-2026-43381
  - !22849  pstore/ram: fix resource leak when ioremap() fails
  - !22815 【OLK-6.6】crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode.
  - !22666 Fix CVE-2026-43037
  - !22627 Fix CVE-2026-43038
  - !22626 Fix CVE-2026-43040
  - !22638 Fix CVE-2026-43057
  - sched/idle: Fix soft quota fair repick state handling
  - !22697 x86/sev: Fix potential sign extension in amd_enc_status_change_finish()
  - drivers/ub/sentry: add link down/up event detection and reporting
  - !22740 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
  - !22779 [OLK-6.6] PCI: Fix PCIe unplug Enumeration Long Blocking Issue
  - urma: zero-initialize cg_obj to prevent uninitialized memory access
  - !22539 mm: introduce CMA-based folio allocation
  - ub:ubus: bugfix for QEMU'addr 8byte check
  - tracing/probe: reject non-closed empty immediate strings
  - tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()
  - tracing: branch: Fix inverted check on stat tracer registration
  - x86/microcode: Add Zhaoxin cpu microcode update driver
  - ub:ubus: bugfix for UE probe without MUE'lock
  - ub:ubus: Fixing the bug of concurrent hotplug and device reset
  - ub: cdma: move cleanup helper to event and remove unused include
  - !22798  sched/fair: Do not send IPI if WFI timeout is 0
  - pstore/ram: fix resource leak when ioremap() fails
  - !22790 v2  Fix NULL pointer dereference
  - !22816 Fix CVE-2026-43492
  - Revert "driver core: enforce device_lock for driver_match_device()"
  - gpio: omap: do not register driver in probe()
  - mm/cma_folio: make CMA folio allocation per-task opt-in via procfs
  - mm: introduce CMA-based folio allocation
  - ub: cdma: fix multiple code quality and potential bug issues
  - !22772 Fix CVE-2026-43493
  - vsock/test: verify socket options after setting them
  - net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module
  - scsi: qla2xxx: Query FW again before proceeding with login
  - scsi: qla2xxx: Allow recovery for tape devices
  - wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()
  - nilfs2: Fix potential block overflow that cause system hang
  - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req
  - crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
  - crypto: octeontx - Fix length check to avoid truncation in ucode_load_store
  - Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB
  - driver core: enforce device_lock for driver_match_device()
  - !22758  bpf mainline for olk-6.6
  - !22463 net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5
  - !21813 [OLK-6.6] cpufreq: Add CPU frequency policy change notification support
  - !21806 [OLK-6.6] efi/cper: Print correctable AER information
  - !22016 [OLK-6.6] Loongarch: Fixed warning about legacy_boot.h when build kernel
  - !22708 libbpf: Fix -Wdiscarded-qualifiers under C23
  - net/hinic5: Add Huawei Intelligent Network Card Driver: hinic5
  - !22821 config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig
  - config: x86: Restore CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} in openeuler_defconfig
  - !21802 [OLK-6.6] pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket
  - !22730 [OLK-6.6] Backport Upstream patches of Hygon Platform QoS
  - !22781 ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue
  - !22752  Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
  - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
  - crypto：Fix panic caused by OFB and CFB self-test failure when starting in FIPS mode.
  - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels
  - config: Enable NETKIT
  - set BPF_NETKIT_PRIMARY=54, BPF_NETKIT_PEER=55
  - add __GENKSYMS__ in uapi bpf.h and if_link.h
  - !22799 ub: udma: alloc jfc_id avoid the ccu/starts type.
  - !22547 iommu/ummu: Use non mirror mem.
  - !22548 iommu/ummu: Introduce struct ummu_device_event
  - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
  - LoongArch: KVM: Move unconditional delay into timer clear scenery
  - LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software
  - LoongArch: KVM: Move AVEC interrupt injection into switch loop
  - LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte()
  - LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read()
  - LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS
  - LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry
  - LoongArch: KVM: Compile switch.S directly into the kernel
  - LoongArch: KVM: Add DMSINTC inject msi to vCPU
  - LoongArch: KVM: Add DMSINTC device support
  - LoongArch: KVM: Make vcpu_is_preempted() as a macro rather than function
  - LoongArch: KVM: Move host CSR_GSTAT save and restore in context switch
  - LoongArch: KVM: Move host CSR_EENTRY save and restore in context switch
  - LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests()
  - LoongArch: KVM: Use CSR_CRMD_PLV in kvm_arch_vcpu_in_kernel()
  - LoongArch: KVM: Handle the case that EIOINTC's coremap is empty
  - LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust
  - LoongArch: KVM: Fix typo issue in kvm_vm_init_features()
  - LoongArch: KVM: Add paravirt vcpu_is_preempted() support in guest side
  - LoongArch: KVM: Add paravirt preempt feature in hypervisor side
  - LoongArch: KVM: Set default return value in KVM IO bus ops
  - LoongArch: KVM: Add FPU/LBT delay load support
  - LoongArch: KVM: Move LBT capability check in exception handler
  - LoongArch: KVM: Move LASX capability check in exception handler
  - LoongArch: KVM: Move LSX capability check in exception handler
  - LoongArch: KVM: Handle LOONGARCH_CSR_IPR during vCPU context switch
  - LoongArch: KVM: Check VM msgint feature during interrupt handling
  - LoongArch: KVM: Add msgint registers in kvm_init_gcsr_flag()
  - LoongArch: KVM: Move feature detection in kvm_vm_init_features()
  - LoongArch: KVM: Add more CPUCFG mask bits
  - LoongArch: Complete CPUCFG registers definition
  - crypto: virtio - Replace package id with numa node id
  - crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req
  - ACPICA: iASL: Add definitions for the IOVT table
  - LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy()
  - LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy()
  - LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy()
  - LoongArch: Add and use some macros for AVEC
  - LoongArch: KVM: Fix the compatibility issue between eioint and the upstream qemu
  - LoongArch: KVM: Add AVEC basic support
  - LoongArch: KVM: Get VM PMU capability from HW GCFG register
  - LoongArch: KVM: Register perf callbacks for guest
  - LoongArch: KVM: Implement arch-specific functions for guest perf
  - LoongArch: KVM: Remove PGD saving during VM context switch
  - LoongArch: KVM: Rework pch_pic_update_batch_irqs()
  - LoongArch: KVM: Add different length support in loongarch_pch_pic_write()
  - LoongArch: KVM: Add different length support in loongarch_pch_pic_read()
  - LoongArch: KVM: Add IRR and ISR register read emulation
  - LoongArch: KVM: Set version information at initial stage
  - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_pch_pic_regs_access()
  - LoongArch: KVM: Add address alignment check in pch_pic register access
  - LoongArch: KVM: Add stat information with kernel irqchip
  - LoongArch: KVM: sync pch_pic to upstream
  - LoongArch: KVM: Access mailbox directly in mail_send()
  - LoongArch: KVM: Add implementation with IOCSR_IPI_SET
  - CVE-2025-39704: LoongArch: KVM: Fix stack protector issue in send_ipi_data()
  - LoongArch: KVM: sync kvm_ipi to upstream
  - LoongArch: KVM: Ensure that kvm eiointc is compatible with older versions
  - LoongArch: KVM: Use 64-bit register definition for EIOINTC
  - LoongArch: KVM: Fix max supported vCPUs set with EIOINTC
  - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_sw_status_access()
  - LoongArch: KVM: Avoid copy_*_user() with lock hold in kvm_eiointc_ctrl_access()
  - LoongArch: KVM: Replace eiointc_enable_irq() with eiointc_update_irq()
  - LoongArch: KVM: Use generic function loongarch_eiointc_write()
  - LoongArch: KVM: Use generic function loongarch_eiointc_read()
  - LoongArch: KVM: Use standard bitops API with eiointc
  - LoongArch: KVM: Remove never called default case statement
  - LoongArch: KVM: Remove unused parameter len
  - LoongArch: KVM: Remove unnecessary local variable
  - LoongArch: KVM: Disable updating of "num_cpu" and "feature"
  - CVE-2025-38366: LoongArch: KVM: Check validity of "num_cpu" from user space
  - LoongArch: KVM: Check interrupt route from physical CPU
  - LoongArch: KVM: Fix interrupt route update with EIOINTC
  - LoongArch: KVM: Add address alignment check for IOCSR emulation
  - drivers/iommu: Fixed the problem that some network cards in dpdk could not work properly with iommu
  - sched/fair: Do not send IPI if WFI timeout is 0
  - ub: udma: alloc jfc_id avoid the ccu/starts type.
  - ub: udma: optimize the remove process.
  - CVE-2025-38367: LoongArch: KVM: Avoid overflow with array index
  - LoongArch: KVM: sync eiointc to upstream
  - LoongArch: KVM: Delete the kvm mmu interfaces that are no longer in use
  - LoongArch: KVM: Fix VM migration failure with PTW enabled
  - LoongArch: KVM: Do not flush tlb if HW PTW supported
  - LoongArch: KVM: Skip PMU checking on vCPU context switch
  - LoongArch: KVM: Add sign extension with kernel IOCSR read emulation
  - LoongArch: KVM: Add sign extension with kernel MMIO read emulation
  - irqchip/loongson-eiointc: Add multiple interrupt pin routing support
  - irqchip/loongson-eiointc: Add virt extension support
  - irqchip/loongson-eiointc: Route interrupt parsed from bios table
  - LoongArch: KVM: Protect kvm_io_bus_{read,write}() with SRCU
  - LoongArch: config: enable paravirt feature
  - x86/sev: Fix potential sign extension in amd_enc_status_change_finish()
  - ipmi: hisi_pso: fix atomic sleep and use-after-free via async workqueue
  - bpf: Fix tcx/netkit detach permissions when prog fd isn't given
  - bpf: align CAP_NET_ADMIN checks with bpf_capable() approach
  - rtnetlink: add needed_{head,tail}room attributes
  - bpftool: Fix cgroup command to only show cgroup bpf programs
  - netkit: Allow for configuring needed_{head,tail}room
  - selftests/bpf: Extend netkit tests to validate skb meta data
  - tools: Sync if_link.h uapi tooling header
  - netkit: Simplify netkit mode over to use NLA_POLICY_MAX
  - netkit: Add option for scrubbing skb meta data
  - netkit: Disable netpoll support
  - bpftool: Query only cgroup-related attach types
  - selftests/bpf: Add netkit test for pkt_type
  - selftests/bpf: Add netkit tests for mac address
  - netkit: Fix pkt_type override upon netkit pass verdict
  - netkit: Fix setting mac address in l2 mode
  - bpf, docs: Fix bpf_redirect_peer header doc
  - bpf: Add missing BPF_LINK_TYPE invocations
  - netkit: Reject IFLA_NETKIT_PEER_INFO in netkit_change_link
  - selftests/bpf: Add netkit to tc_redirect selftest
  - bpf, netkit: Add indirect call wrapper for fetching peer dev
  - netkit: Add tstats per-CPU traffic counters
  - netkit: Remove explicit active/peer ptr initialization
  - selftests/bpf: Add selftests for netkit
  - bpftool: Extend net dump with netkit progs
  - bpftool: Implement link show support for netkit
  - libbpf: Add link-based API for netkit
  - tools: Sync if_link uapi header
  - netkit, bpf: Add bpf programmable net device
  - !22738  tracepoints: get correct superblock from dentry in event btrfs_sync_file()
  - !22649  e1000/e1000e: Fix leak in DMA error cleanup
  - xSched: fix NULL pointer dereference in cfs_rq during class switch
  - xSched/dmem: memory allocation size must larger than 0
  - xSched: prevent HBM allocation for non-AI tasks
  - xSched: fix incorrect error returns in vstream allocation
  - xSched/cgroup: remove legacy cftypes due to cgroup v1 incompatibility
  - !22546 iommu/ummu: Optimized ubmem register compatibility
  - !22545 iommu/ummu: Support pplb.
  - !22732 urma: add rate limit for modify jetty error logs
  - !22467 rme: add debugfs nodes for rme firmware log control
  - PCI: Fix PCIe unplug Enumeration Long Blocking Issue
  - !22766  mfs: fix inode resource leak when cache object fd is zero
  - urma: add rate limit for modify error logs
  - crypto: pcrypt - Fix handling of MAY_BACKLOG requests
  - mfs: fix inode resource leak when cache object fd is zero
  - !22656 [OLK-6.6][linux-6.6.y sync] Backport 6.6.123-6.6.124 LTS Patches
  - bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path
  - bpf: Use copy_map_value_locked() in alloc_htab_elem() for BPF_F_LOCK
  - bpf: Fix OOB in pcpu_init_value
  - bpf: Fix stale offload->prog pointer after constant blinding
  - bpf: fix end-of-list detection in cgroup_storage_get_next_key()
  - bpf: Fix RCU stall in bpf_fd_array_map_clear()
  - bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks
  - bpf: Fix use-after-free in offloaded map/prog info fill
  - bpf, arm64: Fix off-by-one in check_imm signed range check
  - bpf: Fix NULL deref in map_kptr_match_type for scalar regs
  - Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
  - !22268 vsock driver add translate cid and gpa interface
  - rme: add debugfs nodes for rme firmware log control
  - !22613 [OLK-6.6] Fix CVE-2026-31668
  - rme: reorder hisi_ext_cmd enum values by numeric order
  - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
  - btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()
  - btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file()
  - !22659 mm/userswap: Fix NULL pointer dereference with unaligned small mremap length
  - !22706 drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread
  - x86/resctrl: Fix memory bandwidth counter width for Hygon
  - x86/resctrl: Add missing resctrl initialization for Hygon
  - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
  - x86/cpu/hygon: Clean up out-of-tree resctrl code
  - libbpf: Fix -Wdiscarded-qualifiers under C23
  - drivers/ub/sentry: Reduce the sleep time of sentry_urma_kthread thread
  - ub: cdma: specify log and add hardware version
  - ub: cdma: reconstruct the event reporting module
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
  - dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler
  - dpaa2-switch: do not clear any interrupts automatically
  - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom
  - mm/userswap: Fix NULL pointer dereference with unaligned small mremap length
  - ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU.
  - spi: tegra114: Preserve SPI mode bits in def_command1_reg
  - spi: tegra: Fix a memory leak in tegra_slink_probe()
  - btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
  - hwmon: (occ) Mark occ_init_attribute() as __printf
  - drm/mgag200: fix mgag200_bmc_stop_scanout()
  - net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi()
  - tipc: use kfree_sensitive() for session key material
  - net: don't touch dev->stats in BPF redirect paths
  - dpaa2-switch: add bounds check for if_id in IRQ handler
  - net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
  - net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
  - net: liquidio: Initialize netdev pointer before queue setup
  - dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero
  - platform/x86: hp-bioscfg: Skip empty attribute names
  - platform/x86: intel_telemetry: Fix PSS event register mask
  - platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
  - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice
  - wifi: mac80211: correctly check if CSA is active
  - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
  - wifi: cfg80211: Fix bitrate calculation overflow for HE rates
  - ASoC: tlv320adcx140: Propagate error codes during probe
  - ASoC: amd: yc: Fix microphone on ASUS M6500RE
  - ASoC: davinci-evm: Fix reference leak in davinci_evm_probe
  - wifi: mac80211: collect station statistics earlier when disconnect
  - ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free
  - HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101)
  - HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
  - HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list
  - netfilter: replace -EEXIST with -EBUSY
  - ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk
  - HID: playstation: Center initial joystick axes to prevent spurious events
  - HID: intel-ish-hid: Reset enum_devices_done before enumeration
  - btrfs: fix reservation leak in some error paths when inserting inline extent
  - HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL
  - HID: intel-ish-hid: Update ishtp bus match to support device ID table
  - LoongArch: Enable exception fixup for specific ADE subcode
  - LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED
  - block,bfq: fix aux stat accumulation destination
  - net: usb: sr9700: support devices with virtual driver CD
  - wifi: wlcore: ensure skb headroom before skb_push
  - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
  - tracing: Fix ftrace event field alignments
  - KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures
  - binderfs: fix ida_alloc_max() upper bound
  - binder: fix BR_FROZEN_REPLY error log
  - ublk: fix deadlock when reading partition table
  - Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"
  - ARM: 9468/1: fix memset64() on big-endian
  - rbd: check for EOD after exclusive lock is ensured to be held
  - pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
  - pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup
  - pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset
  - pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup
  - pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state
  - platform/x86: intel_telemetry: Fix swapped arrays in PSS output
  - e1000/e1000e: Fix leak in DMA error cleanup
  - iommu/ummu: Support pplb.
  - net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
  - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak
  - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
  - seg6: separate dst_cache for input and output paths in seg6 lwtunnel
  - net: ipv6: fix dst ref loop on input in rpl lwt
  - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
  - net: ipv6: fix dst ref loop on input in seg6 lwt
  - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue
  - iommu/ummu: Introduce struct ummu_device_event
  - iommu/ummu: Use non mirror mem.
  - iommu/ummu: Optimized ubmem register compatibility
  - iommu/ummu: Support free_bit.
  - iommu/ummu: Optimized stage2 bypass support
  - pinctrl/zhaoxin: Refactor KH50000 pinctrl to support multi‑socket
  - LoongArch: KVM: fix vm start fail
  - vsock driver add translate cid and gpa interface
  - efi/cper: Print correctable AER information
  - pinctrl: zhaoxin: kx7000: Fix logic error in GPIO type mapping
  - usb: typec: ucsi: skip connector validation before init
  - usb: typec: ucsi: validate connector number in ucsi_notify_common()
  - KVM: x86: Add support for CPUID leaf 0x8C860000
  - Loongarch: Fixed warning about legacy_boot.h when build kernel
  - cpufreq: Add CPU frequency policy change notification support


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-155.0.0.141.20260530.691966fd0b26
changelog:
  - !22508 urma: General Msg Handler Interface
  - !22806 ACPI: processor: idle: Reset cpuidle on C-state list changes
  - !23013  CVE-2026-45968
  - !23092 udma: optimize log format.
  - !23088 v4  Support open_tree OPEN_TREE_NAMESPACE
  - !22425  ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()
  - urma: fix the scenario-specific message processing interface
  - !22739  backport cpuidle patches from linux mainline
  - !23089 urma: fix resource leaks in uburma and ubcore error paths
  - !22550 ub:ubfi: fix the resource maintenance issue in the ubfi ummu node parsing
  - !23052  cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
  - !23070  tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
  - !23051  Bluetooth: SMP: force responder MITM requirements before building the pairing response
  - ub: udma: optimize log format.
  - !22049 AMD Turin iommu support patches for openEuler 6.6 kernel
  - !22443  nbd: replace socks pointer array with xarray to eliminate queue freeze
  - !22558 arch/x86/mm: reserve memblock for CSV3 guest
  - !22675 update rnpgbevf driver to version 1.0.1
  - !23022 ub: cdma: inline cdma_id_find_ctp into cdma_delete_ctp
  - !23046 ub:ubus: Optimize error log and add mutex lock for ub memory ras
  - mount: hold namespace_sem across copy in create_new_namespace()
  - mount: add OPEN_TREE_NAMESPACE
  - tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
  - !22877 Fix CVE-2026-43503
  - !22873 Fix CVE-2026-46300
  - !22839 mm: fix some minor per-VMA lock issues in userfaultfd
  - update rnpgbevf driver to version 1.0.1.
  - ub:ubus: Optimize error log and add mutex lock for ub memory ras
  - ub:ubus: add mutex lock for port local ras
  - !22910 ub/ubdevshm: Fix spelling errors and optimize prints
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
  - Bluetooth: SMP: force responder MITM requirements before building the pairing response
  - !22492 urma: Introduce EID radix tree for primary EID lookup
  - !22418 urma: move capability of querying physical devices from ubcore to ubagg
  - !22975 ub:ubus: add error return when send config message
  - !22841  backport dma map and smmu patches from linux mainline
  - mm: fix some minor per-VMA lock issues in userfaultfd
  - userfaultfd: use per-vma locks in userfaultfd operations
  - mm: add vma_assert_locked() for !CONFIG_PER_VMA_LOCK
  - userfaultfd: protect mmap_changing with rw_sem in userfaulfd_ctx
  - userfaultfd: fix operator precedence bug in UFFDIO_COPY mode check
  - !22149 bnxt_en: Update firmware interface to 1.10.2.171
  - ub: cdma: inline cdma_id_find_ctp into cdma_delete_ctp
  - sched: idle: Make skipping governor callbacks more consistent
  - cpuidle: Skip governor when only one idle state is available
  - !22902  arm64/ACPI: fix build error when CONFIG_ACPI_APEI_GHES is disabled
  - !22945 KVM: arm64: fix vtimer WARN and CVM conflict
  - !22979 drivers/ub/sentry: use fixed short interval for ACK wait loop polling
  - !22474 Fix CVE-2026-43148
  - !22897  libceph: define and enforce CEPH_MAX_KEY_LEN
  - !22899  scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
  - !22846  net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
  - !22702 net/oenetcls: validate module params and reject zero table sizes
  - !22937 oenetcls: fix worker-context locking, async add/del race, and runtime policy toggles
  - !22950 sched: Fix bpf_sched_set_task_prefer_nid() build error
  - sched: Fix bpf_sched_set_task_prefer_nid() build error
  - !22802 arm64: kernel: fix Clang integrated assembler errors in entry.S
  - bnxt_en: Update VNIC resource calculation for VFs
  - bnxt_en: Do not call sleeping hwmon_notify_event() from NAPI
  - bnxt_en: Support QOS and TPID settings for the SRIOV VLAN
  - Revert "bnxt_en: Support QOS and TPID settings for the SRIOV VLAN"
  - bnxt_en: Support QOS and TPID settings for the SRIOV VLAN
  - bnxt_en: Event handler for Thermal event
  - bnxt_en: Use non-standard attribute to expose shutdown temperature
  - bnxt_en: Expose threshold temperatures through hwmon
  - bnxt_en: Modify the driver to use hwmon_device_register_with_info
  - bnxt_en: Move hwmon functions into a dedicated file
  - bnxt_en: Enhance hwmon temperature reporting
  - eth: bnxt: fix backward compatibility with older devices
  - bnxt_en: Fix 2 stray ethtool -S counters
  - urma: move capability of querying physical devices from ubcore to ubagg
  - !22901 RDMA/hns: Fix hung task when drain qp failed.
  - drivers/ub/sentry: use fixed short interval for ACK wait loop polling
  - !22944  drm: Account property blob allocations to memcg
  - !22680 Fix CVE-2026-31738
  - !22683 Fix CVE-2026-43036
  - !22655 Fix fair build error with !CONFIG_SMP
  - !22938 bugfixs for sched_ext and soft_quota in idle.c
  - !22889  lib/crypto: chacha: Zeroize permuted_state before it leaves scope
  - !22927 drivers/ub/sentry: delete unimportant logs and optimize some log content
  - !22940 [OLK-6.6][linux-6.6.y sync] Backport 6.6.126-6.6.127 LTS Patches
  - ub:ubus: add error return when send config message
  - sched/idle: Fall back to idle after failed soft quota repick
  - sched/idle: Update SCX idle mask only when picking idle
  - urma: Introduce EID patricia trie for primary EID lookup
  - ASoC: fsl_xcvr: Revert fix missing lock in fsl_xcvr_mode_put()
  - KVM: arm64: reuse vgic_write_guest_lock to suppress spurious WARN_ON when no vCPU is running
  - KVM: arm64: add CVM VM check when initializing union to avoid corrupting KABI isolation
  - drm: Account property blob allocations to memcg
  - net/oenetcls: make rps policy module params read-only
  - net/oenetcls: fix async delete race with pending rule add
  - net/oenetcls: move listen-time tuple resolution to worker context
  - USB: serial: option: add Telit FN920C04 RNDIS compositions
  - f2fs: fix to avoid mapping wrong physical block for swapfile
  - f2fs: fix zoned block device information initialization
  - f2fs: fix to avoid UAF in f2fs_write_end_io()
  - f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes
  - f2fs: fix out-of-bounds access in sysfs attribute read/write
  - f2fs: fix to add gc count stat in f2fs_gc_range
  - fbdev: smscufx: properly copy ioctl memory to kernelspace
  - fbdev: rivafb: fix divide error in nv3_arb()
  - Revert "wireguard: device: enable threaded NAPI"
  - gpiolib: acpi: Fix gpio count with string references
  - ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()
  - ASoC: cs42l43: Correct handling of 3-pole jack load detection
  - platform/x86: panasonic-laptop: Fix sysfs group leak in error path
  - platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro
  - ASoC: amd: yc: Add quirk for HP 200 G2a 16
  - ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9
  - drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used
  - romfs: check sb_set_blocksize() return value
  - ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel
  - ALSA: hda/realtek: Add quirk for Inspur S14-G1
  - gpio: sprd: Change sprd_gpio lock to raw_spin_lock
  - ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list
  - ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
  - PCI: endpoint: Avoid creating sub-groups asynchronously
  - PCI: endpoint: Remove unused field in struct pci_epf_group
  - drivers/ub/sentry: delete unimportant logs and optimize some log content
  - ub/ubmem-vmmu: optimize prints
  - ub/ubmempfd: update note and optimize format
  - ub/ubdevshm: Fix spelling errors and optimize prints
  - arm64/ACPI: fix build error when CONFIG_ACPI_APEI_GHES is disabled
  - RDMA/hns: Fix hung task when drain qp failed.
  - RDMA/hns: Support drain SQ and RQ
  - RDMA/hns: Fix WQ_MEM_RECLAIM warning
  - ub:ubfi: fix the resource maintenance issue in the ubfi ummu node parsing
  - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
  - libceph: define and enforce CEPH_MAX_KEY_LEN
  - update rnpgbevf driver to version 1.0.1.
  - lib/crypto: chacha: Zeroize permuted_state before it leaves scope
  - net: skbuff: preserve shared-frag marker during coalescing
  - net: skbuff: propagate shared-frag marker through frag-transfer helpers
  - RDMA/hns: Notify ULP of remaining soft-WCs during reset
  - RDMA/hns: Fix udca not unregistered when reset entry allocation failed
  - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode
  - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains
  - tools/dma: Add dma_map_sg support
  - dma-mapping: benchmark: add support for dma_map_sg
  - dma-mapping: benchmark: modify the framework to adapt to more map modes
  - urma: fix resource leaks in uburma and ubcore error paths
  - ACPI: processor: idle: Reset cpuidle on C-state list changes
  - cpuidle: Extract and export no-lock variants of cpuidle_unregister_device()
  - cpuidle: Simplify cpuidle_register_device() with guard()
  - ACPI: processor: idle: Fix NULL pointer dereference in hotplug path
  - ACPI: processor: idle: Reset power_setup_done flag on initialization failure
  - ACPI: processor: idle: Remove redundant static variable and rename cstate check function
  - ACPI: processor: idle: Move max_cstate update out of the loop
  - ACPI: processor: idle: Remove redundant cstate check in acpi_processor_power_init
  - ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle states
  - ACPI: processor: idle: Rework the handling of acpi_processor_ffh_lpi_probe()
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_dev() to void
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_states() to void
  - ACPI: processor: idle: Add debug log for states with invalid entry methods
  - ACPI: processor: idle: Replace strlcat() with better alternative
  - ACPI: processor: idle: Add missing bounds check in flatten_lpi_states()
  - ACPI: processor: Do not expose global variable acpi_idle_driver
  - ACPI: processor: Update cpuidle driver check in __acpi_processor_start()
  - ACPI: processor: idle: Redefine two functions as void
  - ACPI: processor: idle: Rearrange declarations in header file
  - ACPI: processor: Remove unused empty stubs of some functions
  - ACPI: processor: idle: Optimize ACPI idle driver registration
  - ACPI: processor: idle: Drop redundant C-state count checks
  - ACPI: processor: idle: Relocate state flags initialization
  - ACPI: processor: idle: Eliminate static variable flat_state_cnt
  - sched/fair: fix !CONFIG_SMP build errors
  - net/oenetcls: validate module params and reject zero table sizes
  - powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()
  - arm64: kernel: fix Clang integrated assembler errors in entry.S
  - update rnpgbevf driver to version 1.0.1.
  - arm64: topology: Fix false warning in counters_read_on_cpu() for same-CPU reads
  - cpufreq: CPPC: Update FIE arch_freq_scale in ticks for non-PCC regs
  - cpufreq: CPPC: Factor out cppc_fie_kworker_init()
  - ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu()
  - cpufreq: CPPC: Don't warn if FIE init fails to read counters
  - Revert "cpufreq: CPPC: Don't warn on failing to read perf counters on offline cpus"
  - PM / devfreq: use _visible attribute to replace create/remove_sysfs_files()
  - cpufreq: Replace magic number
  - cpufreq: Update sscanf() to kstrtouint()
  - update to sysfs_emit() for safer buffer handling
  - net: use skb_header_pointer() for TCPv4 GSO frag_off check
  - vxlan: validate ND option lengths in vxlan_na_create
  - iommu/pages: Make iommu_put_pages_list() work with high order allocations
  - iommu/amd: Fix alias device DTE setting
  - iommu/amd: Fix error path in amd_iommu_probe_device()
  - iommu/amd: Remove unused PPR_* macros
  - iommu/amd: Fix header file
  - iommu/amd: Preserve default DTE fields when updating Host Page Table Root
  - iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers
  - iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags
  - mm: delete the unused put_pages_list()
  - iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB
  - iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all()
  - iommu/amd: Handle error path in amd_iommu_probe_device()
  - iommu/amd: Remove unused DTE_GCR3_INDEX_* macros
  - iommu/amd: Invalidate cache before removing device from domain list
  - iommu/amd: Introduce per device DTE update function
  - configs/hardening: Fix disabling UBSAN configurations
  - iommu/amd: use page allocation function provided by iommu-pages.h
  - iommu/dma: use iommu_put_pages_list() to releae freelist
  - iommu/amd: Fix possible irq lock inversion dependency issue
  - iommu/amd: Fix sleeping in atomic context
  - iommu/amd: Introduce per-device domain ID to fix potential TLB aliasing issue
  - iommu/amd: Refactor GCR3 table helper functions
  - iommu/amd: Refactor protection_domain helper functions
  - iommu/amd: Refactor attaching / detaching device functions
  - iommu/amd: Refactor helper function for setting / clearing GCR3
  - iommu/amd: Rearrange GCR3 table setup code
  - iommu/amd: Add support for device based TLB invalidation
  - iommu/amd: Introduce per-device GCR3 table
  - iommu/amd: Introduce struct protection_domain.pd_mode
  - iommu/amd: Introduce get_amd_iommu_from_dev()
  - iommu/amd/pgtbl_v2: Invalidate updated page ranges only
  - iommu/amd: Make domain_flush_pages as global function
  - iommu/amd: Consolidate amd_iommu_domain_flush_complete() call
  - iommu/amd: Refactor device iotlb invalidation code
  - iommu/amd: Refactor IOMMU tlb invalidation code
  - iommu/amd: Add support to invalidate multiple guest pages
  - iommu/amd: Remove redundant passing of PDE bit
  - iommu/amd: Remove redundant domain flush from attach_device()
  - hardening: x86: drop reference to removed config AMD_IOMMU_V2
  - iommu/amd: Miscellaneous clean up when free domain
  - iommu/amd: Consolidate logic to allocate protection domain
  - hardening: Provide Kconfig fragments for basic options
  - iommu/amd: Enable support for up to 2K interrupts per function
  - iommu/amd: Rename DTE_INTTABLEN* and MAX_IRQS_PER_TABLE macro
  - iommu/amd: Lock DTE before updating the entry with WRITE_ONCE()
  - iommu/amd: Introduce helper function get_dte256()
  - iommu/amd: Introduce helper function to update 256-bit DTE
  - iommu/amd: Update PASID, GATS, GLX, SNPAVICSUP feature related macros
  - iommu/amd: Introduce iommu_dev_data.max_pasids
  - iommu/amd: Rename amd_iommu_v2_supported() as amd_iommu_pasid_supported()
  - iommu/amd: Pass struct iommu_dev_data to set_dte_entry()
  - iommu/amd: Remove unused EXPORT_SYMBOLS
  - iommu/amd: Remove amd_iommu_device_info()
  - iommu/amd: Introduce iommu_dev_data.flags to track device capabilities
  - iommu/amd: Introduce iommu_dev_data.ppr
  - iommu/amd: Rename ats related variables
  - iommu/amd: Modify logic for checking GT and PPR features
  - iommu/amd: Replace slab cache allocator with page allocator
  - iommu/vt-d: add wrapper functions for page allocations
  - iommu/amd: Introduce generic function to set multibit feature value
  - iommu/amd: Move PPR-related functions into ppr.c
  - iommu/amd: Remove PPR support
  - iommu/amd: Remove iommu_v2 module
  - iommu/amd: Consolidate feature detection and reporting logic
  - iommu/amd: Introduce helper functions for managing GCR3 table
  - iommu/amd: Consolidate timeout pre-define to amd_iommu_type.h
  - arch/x86/mm: reserve memblock for CSV3 guest
  - nbd: remove queue freeze in nbd_add_socket
  - nbd: remove redundant num_connections boundary checks
  - nbd: replace socks pointer array with xarray
  - nbd: simplify find_fallback() by removing redundant logic
  - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()
  - bnxt_en: Update firmware interface to 1.10.2.171


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-155.0.0.141.20260531.5c5d740fe786
changelog:
  - !23193  Fix CVE-2026-45984
  - !23179 kvm: arm64: Fix NULL pointer dereference in kvm_destroy_cvm() with timer early inject
  - gfs2: Fix use-after-free in iomap inline data write path
  - gfs2: Add metapath_dibh helper
  - !23139  Fix CVE-2026-45943
  - !23072  Fix CVE-2026-45861
  - !23055  Fix CVE-2026-45961
  - !23047  Fix CVE-2026-45999
  - !23039  Fix CVE-2026-46078
  - !23050 Fix CVE-2026-43099
  - !22987 Fix CVE-2026-43186
  - !22988 Fix CVE-2026-43194
  - kvm: arm64: Fix NULL pointer dereference in kvm_destroy_cvm() with timer early inject
  - !23121 ub:ubfi: add numa node get from firmware mode
  - !23102 ub:ubus: optimize error print for ubus and hisi_ubus
  - !23090 vfio:ubus: add vfio ub cfg0 and cfg1 basic attr perm
  - erofs: fix inline data read failure for ztailpacking pclusters
  - ub:ubus: optimize error print for ubus and hisi_ubus
  - ub:ubfi: add numa node get from firmware mode
  - vfio:ubus: add vfio ub cfg0 and cfg1 basic attr perm
  - gfs2: Fix slab-use-after-free in qd_put
  - gfs2: fix memory leaks in gfs2_fill_super error path
  - ipv4: icmp: fix null-ptr-deref in icmp_build_probe()
  - erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()
  - erofs: fix the out-of-bounds nameoff handling for trailing dirents
  - net: consume xmit errors of GSO frames
  - ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-155.0.0.141.20260602.b35be856065b
changelog:
  - !22507 urma: refactor connect_bonding from ubcore to ubagg
  - !23300 urma: fix main_ue_eid flush ioctl argument
  - !23298  net: usb: pegasus: enable basic endpoint checking
  - !23295  mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock
  - urma: fix main_ue_eid flush ioctl argument
  - !22496  bpf-rvi: Fix possible AA deadlock pidns_list_lock
  - !23192  RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
  - !23181  Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
  - !23175  Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt
  - !23247  CVE-2026-31759
  - net: usb: pegasus: enable basic endpoint checking
  - !23208  CVE-2026-43240
  - !23184  APEI/GHES: ensure that won't go past CPER allocated record
  - !23267 Fix CVE-2026-46151
  - !23269 Fix CVE-2026-46167
  - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock
  - !23259 Fix CVE-2026-46190
  - urma: refactor connect_bonding from ubcore to ubagg
  - !23217 drivers/ub/sentry: remove send/recv counter-based tjetty rebuild mechanism
  - !23244 Fix CVE-2026-46187
  - !23243 Fix CVE-2026-46214
  - !23242 Fix CVE-2026-46098
  - !23200 Fix CVE-2026-46047
  - !23201 Fix CVE-2026-45890
  - !23276  Disable userswap by default
  - !23203  ceph: only d_add() negative dentries when they are unhashed
  - openeuler_defconfig: disable CONFIG_USERSWAP by default
  - mm/userswap: remove boot param
  - !23248 net: hibmcge: move dma_rmb() after dma_sync_single_for_cpu() in RX path
  - !23207  CVE-2026-43421
  - !23172  thermal: core: Fix thermal zone governor cleanup issues
  - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
  - usb: usblp: fix heap leak in IEEE 1284 device ID via short response
  - !23147 backport soc cache patches from linux mainline.
  - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
  - !23167 change wk1 to wk2 to send data and add responsibility for transmission
  - !23049 urma: fix device change namespace calltrace
  - !22837 urma: redefine links field as bool connectivity matrix.
  - !22861 urma: refactor main_primary_eid lookup and support ue-granularity batch configuration
  - !23093  mainline for bpf
  - wifi: rsi: fix kthread lifetime race between self-exit and external-stop
  - net: hibmcge: move dma_rmb() after dma_sync_single_for_cpu() in RX path
  - net: hibmcge: disable Relaxed Ordering to fix RX packet corruption
  - usb: ulpi: fix memory leak on ulpi_register() error paths
  - usb: ulpi: fix double free in ulpi_register_interface() error path
  - vsock/virtio: fix accept queue count leak on transport mismatch
  - soc cache: Fix unsafe shift left
  - drivers/ub/sentry: remove send/recv counter-based tjetty rebuild mechanism
  - net: caif: clear client service pointer on teardown
  - !23187  eventfs: Hold eventfs_mutex and SRCU when remount walks events
  - !23091 mfs: update mfs doc for adding sysfs part
  - urma: change wk1 to wk2 to send data and add responsibility
  - x86/kexec: add a sanity check on previous kernel's ima kexec buffer
  - ima: verify the previous kernel's IMA buffer lies in addressable RAM
  - usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo
  - usb: gadget: f_ncm: Fix net_device lifecycle with device_move
  - cleanup: Provide retain_and_null_ptr()
  - usb: gadget: ncm: Fix indentations in documentation of NCM section
  - usb: gadget: ncm: Fix endianness of wMaxSegmentSize variable in ecm_desc
  - usb: gadget: ncm: Add support to update wMaxSegmentSize via configfs
  - ceph: only d_add() negative dentries when they are unhashed
  - xen-netback: reject zero-queue configuration from guest
  - net: qrtr: ns: Fix use-after-free in driver remove()
  - urma: fix main_ue_eid query table configuration path
  - urma: topology supports parallel planes
  - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
  - eventfs: Hold eventfs_mutex and SRCU when remount walks events
  - APEI/GHES: ensure that won't go past CPER allocated record
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
  - Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt
  - thermal: core: Fix thermal zone governor cleanup issues
  - urma: fix device change namespace calltrace
  - bpf: Fix variable length stack write over spilled pointers
  - bpf: Do not allow deleting local storage in NMI
  - bpf: Convert bpf_selem_unlink to failable
  - bpf: Convert bpf_selem_link_map to failable
  - bpf: Convert bpf_selem_unlink_map to failable
  - bpf: Select bpf_local_storage_map_bucket based on bpf_local_storage
  - mfs: update mfs doc for adding sysfs part
  - mfs: handle close event in user-space side
  - mfs: post close event to user-space side
  - mfs: add file operation event filtering
  - mfs: add sysfs interface to configure event
  - bpf-rvi: Fix possible AA deadlock pidns_list_lock


author: Tengda Wu <wutengda2@huawei.com> - 6.6.0-156.0.0.142
changelog:
  - !23508 v2  bpf: Remove smap argument from bpf_selem_free()
  - !23457 v2  bpf mainline
  - !23442 ub: udma&ubase: add get tp list function.
  - !23415 drivers/ub/sentry: adapt to ubcore_get_tp_list semantic change
  - ub: udma: add get tp list function.
  - !22887 [OLK-6.6] urma: fix RNR ERR under CTP mode in IPoURMA
  - !23416 urma: implement kernel-space get tp list with hash table.
  - bpf: Remove smap argument from bpf_selem_free()
  - urma: implement kernel-space get tp list with hash table.
  - !23418  bpf: Avoid soft lockup in bpf_uprobe_unregister
  - drivers/ub/sentry: adapt to ubcore_get_tp_list semantic change
  - !23229 obmm: add feature-based enable control
  - !23362  CVE-2026-43201
  - !23351 Fix CVE-2026-43292
  - !22903 [OLK-6.6][linux-6.6.y sync] Backport 6.6.128-6.6.141 LTS Patches
  - !23228 obmm: fix VMA access for ptrace/GDB on export regions
  - selftests/bpf: Add test for stale pkt range after scalar arithmetic
  - bpf: Drop pkt_end markers on arithmetic to prevent is_pkt_ptr_branch_taken
  - obmm: add feature-based enable control
  - !23374 urma: increase topo max node limit to 1024
  - !23403 urma: add v2p function in kernel for dfx such as urma_admin
  - netfs: Fix potential uninitialised var in netfs_extract_user_iter()
  - net/rds: reset op_nents when zerocopy page pin fails
  - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker
  - mptcp: pm: ADD_ADDR rtx: fix potential data-race
  - spi: sifive: fix controller deregistration
  - spi: sifive: Simplify clock handling with devm_clk_get_enabled()
  - media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0
  - spi: st-ssc4: fix controller deregistration
  - spi: st-ssc4: switch to use modern name
  - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
  - f2fs: fix false alarm of lockdep on cp_global_sem lock
  - f2fs: fix incorrect file address mapping when inline inode is unwritten
  - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0
  - mptcp: pm: prio: skip closed subflows
  - mptcp: fix rx timestamp corruption on fastopen
  - mptcp: drop __mptcp_fastopen_gen_msk_ackseq()
  - RDMA/mana: Validate rx_hash_key_len
  - btrfs: fix missing last_unlink_trans update when removing a directory
  - btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I()
  - btrfs: use inode already stored in local variable at btrfs_rmdir()
  - smb: client: Use FullSessionKey for AES-256 encryption key derivation
  - drm/v3d: Reject empty multisync extension to prevent infinite loop
  - eventfs: Use list_add_tail_rcu() for SRCU-protected children list
  - pmdomain: core: Fix detach procedure for virtual devices in genpd
  - drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init
  - drm/gma500/oaktrail_lvds: fix hang on init failure
  - drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup
  - drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout()
  - drm/i915: skip __i915_request_skip() for already signaled requests
  - iommu/vt-d: Disable DMAR for Intel Q35 IGFX
  - libceph: handle rbtree insertion error in decode_choose_args()
  - libceph: Fix potential out-of-bounds access in crush_decode()
  - libceph: Fix potential null-ptr-deref in decode_choose_args()
  - libceph: Fix potential out-of-bounds access in osdmap_decode()
  - netfs: fix error handling in netfs_extract_user_iter()
  - powerpc/warp: Fix error handling in pika_dtm_thread
  - io-wq: check that the predecessor is hashed in io_wq_remove_pending()
  - ceph: fix a buffer leak in __ceph_setxattr()
  - ALSA: usb-audio: Bound MIDI endpoint descriptor scans
  - ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans
  - drm/i915/dp: Fix VSC dynamic range signaling for RGB formats
  - ASoC: SOF: Intel: hda: Fix NULL pointer dereference
  - ASoC: SOF: Intel: hda-dai: add support for dspless mode beyond HDAudio
  - ASoC: SOF: Intel: hda-dai: remove dspless special case
  - KVM: x86: Fix Xen hypercall tracepoint argument assignment
  - KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic
  - KVM: Reject wrapped offset in kvm_reset_dirty_gfn()
  - audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV
  - net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled
  - netfilter: nft_ct: fix missing expect put in obj eval
  - audit: fix incorrect inheritable capability in CAPSET records
  - netfilter: nf_conntrack_sip: get helper before allocating expectation
  - workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path
  - i40e: Cleanup PTP pins on probe failure
  - crypto: af_alg - Cap AEAD AD length to 0x80000000
  - netconsole: avoid out-of-bounds access on empty string in trim_newline()
  - net/sched: sch_pie: annotate more data-races in pie_dump_stats()
  - ksmbd: validate response sizes in ipc_validate_msg()
  - net: bcmgenet: fix leaking free_bds
  - net: bcmgenet: Initialize u64 stats seq counter
  - crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx
  - ntfs: ->d_compare() must not block
  - net/sched: cls_flower: revert unintended changes
  - sfc: fix error code in efx_devlink_info_running_versions()
  - net: tls: fix strparser anchor skb leak on offload RX setup failure
  - ice: fix NULL pointer dereference in ice_reset_all_vfs()
  - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler
  - iavf: wait for PF confirmation before removing VLAN filters
  - iavf: stop removing VLAN filters from PF on interface down
  - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING
  - bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner
  - drm/amd/display: Read EDID from VBIOS embedded panel info
  - drm/amd/display: Allow DCE link encoder without AUX registers
  - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup
  - ALSA: hda/conexant: Fix missing error check for jack detection
  - ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87
  - ALSA: hda/conexant: fix some typos
  - netconsole: propagate device name truncation in dev_name_store()
  - net: netconsole: move newline trimming to function
  - net/sched: sch_cake: annotate data-races in cake_dump_stats() (V)
  - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()
  - ipv6: rename and move ip6_dst_lookup_tunnel()
  - ipv4: add new arguments to udp_tunnel_dst_lookup()
  - ipv4: remove "proto" argument from udp_tunnel_dst_lookup()
  - ipv4: rename and move ip_route_output_tunnel()
  - sctp: discard stale INIT after handshake completion
  - netfilter: skip recording stale or retransmitted INIT
  - ASoC: codecs: ab8500: Fix casting of private data
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring
  - drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring
  - drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring
  - drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings
  - drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings
  - net: phy: dp83869: fix setting CLK_O_SEL field.
  - net: mctp i2c: check length before marking flow active
  - ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams
  - neigh: let neigh_xmit take skb ownership
  - neighbour: add RCU protection to neigh_tables[]
  - net/sched: taprio: fix NULL pointer dereference in class dump
  - NFC: trf7970a: Ignore antenna noise when checking for RF field
  - net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit
  - net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()
  - vrf: Fix a potential NPD when removing a port from a VRF
  - net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats()
  - net/sched: sch_choke: annotate data-races in choke_dump_stats()
  - net/sched: netem: check for negative latency and jitter
  - net/sched: netem: fix slot delay calculation overflow
  - net/sched: netem: validate slot configuration
  - net/sched: netem: only reseed PRNG when seed is explicitly provided
  - net/sched: netem: fix queue limit check to include reordered packets
  - net/sched: netem: fix probability gaps in 4-state loss model
  - netdevsim: zero initialize struct iphdr in dummy sk_buff
  - cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro()
  - arm64/scs: Fix potential sign extension issue of advance_loc4
  - drm/sysfb: ofdrm: fix PCI device reference leaks
  - spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ
  - netfilter: nf_conntrack_sip: don't use simple_strtoul
  - netfilter: xt_policy: fix strict mode inbound policy matching
  - drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2)
  - drm/amdgpu/uvd3.1: Don't validate the firmware when already validated
  - drm/amdgpu: fix spelling typos
  - drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG
  - nvme-pci: fix missed admin queue sq doorbell write
  - netfilter: arp_tables: fix IEEE1394 ARP payload parsing
  - nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
  - btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent()
  - mailbox: mailbox-test: make data_ready a per-instance variable
  - mailbox: mailbox-test: initialize struct earlier
  - mailbox: mailbox-test: don't free the reused channel
  - mailbox: add sanity check for channel array
  - cgroup/rdma: fix integer overflow in rdmacg_try_charge()
  - mailbox: mailbox-test: free channels on probe error
  - fbdev: offb: fix PCI device reference leak on probe failure
  - rtc: abx80x: Disable alarm feature if no interrupt attached
  - fs/adfs: validate nzones in adfs_validate_bblk()
  - vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll()
  - tipc: fix double-free in tipc_buf_append()
  - nfp: fix swapped arguments in nfp_encode_basic_qdr() calls
  - net: dsa: realtek: rtl8365mb: fix mode mask calculation
  - net/sched: sch_sfb: annotate data-races in sfb_dump_stats()
  - net/sched: sch_red: annotate data-races in red_dump_stats()
  - net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats()
  - net/sched: sch_pie: annotate data-races in pie_dump_stats()
  - net_sched: sch_hhf: annotate data-races in hhf_dump_stats()
  - net/rds: zero per-item info buffer before handing it to visitors
  - ksmbd: scope conn->binding slowpath to bound sessions only
  - ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open
  - ksmbd: destroy async_ida in ksmbd_conn_free()
  - ksmbd: add support for supplementary groups
  - ksmbd: Use struct_size() to improve smb_direct_rdma_xmit()
  - ksmbd: destroy tree_conn_ida in ksmbd_session_destroy()
  - arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number
  - slip: bound decode() reads against the compressed packet length
  - slip: reject VJ receive packets on instances with no rstate array
  - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check
  - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
  - ipvs: fix MTU check for GSO packets in tunnel mode
  - netfilter: xtables: restrict several matches to inet family
  - netfilter: conntrack: remove sprintf usage
  - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO
  - netfilter: nft_osf: restrict it to ipv4
  - openvswitch: cap upcall PID array size and pre-size vport replies
  - sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks
  - ipv6: fix possible UAF in icmpv6_rcv()
  - e1000e: Unroll PTP in probe error handling
  - i40e: don't advertise IFF_SUPP_NOFCS
  - ice: fix double-free of tx_buf skb
  - ice: Remove jumbo_remove step from TX path
  - tcp: annotate data-races around tp->plb_rehash
  - tcp: annotate data-races around (tp->write_seq - tp->snd_nxt)
  - tcp: annotate data-races around tp->dsack_dups
  - tcp: annotate data-races around tp->bytes_retrans
  - tcp: annotate data-races around tp->bytes_sent
  - tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans
  - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch
  - nexthop: fix IPv6 route referencing IPv4 nexthop
  - net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys
  - macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF
  - arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT
  - PCMCIA: Fix garbled log messages for KERN_CONT
  - arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT
  - arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT
  - crypto: ccp - copy IV using skcipher ivsize
  - crypto: sa2ul - Fix AEAD fallback algorithm names
  - drm/i915/wm: Verify the correct plane DDB entry
  - drm/i915: Loop over all active pipes in intel_mbus_dbox_update
  - drm/i915: Extract intel_dbuf_mdclk_cdclk_ratio_update()
  - drm/i915: Simplify watermark state checker calling convention
  - drm/i915: Constify watermark state checker
  - f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()
  - f2fs: Use sysfs_emit_at() to simplify code
  - clk: visconti: pll: initialize clk_init_data to zero
  - lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug()
  - clk: qcom: dispcc-sc7180: Add missing MDSS resets
  - dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets
  - clk: xgene: Fix mapping leak in xgene_pllclk_init()
  - clk: qoriq: avoid format string warning
  - clk: imx8mq: Correct the CSI PHY sels
  - clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels()
  - clk: imx: imx6q: Fix device node reference leak in pll6_bypassed()
  - clk: qcom: dispcc-sm8250: Enable parents for pixel clocks
  - clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk
  - clk: qcom: gcc-sc8180x: Use retention for PCIe power domains
  - clk: qcom: gcc-sc8180x: Use retention for USB power domains
  - clk: qcom: gcc-sc8180x: Add missing GDSCs
  - dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs
  - scsi: target: core: Fix integer overflow in UNMAP bounds check
  - clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers
  - scsi: sg: Resolve soft lockup issue when opening /dev/sgX
  - scsi: sg: Fix sysctl sg-big-buff register during sg_init()
  - scsi: sg: Make sg_sysfs_class constant
  - clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source
  - RDMA/core: Prefer NLA_NUL_STRING
  - platform/x86: dell-wmi-sysman: bound enumeration string aggregation
  - platform/x86: dell_rbu: avoid uninit value usage in packet_size_write()
  - fs/ntfs3: terminate the cached volume label after UTF-8 conversion
  - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist()
  - mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata()
  - platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup
  - tty: hvc_iucv: fix off-by-one in number of supported devices
  - leds: lgm-sso: Remove duplicate assignments for priv->mmap
  - platform/surface: surfacepro3_button: Drop wakeup source on remove
  - backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt()
  - dev_printk: add new dev_err_probe() helpers
  - i3c: mipi-i3c-hci: fix IBI payload length calculation for final status
  - perf util: Kill die() prototype, dead for a long time
  - ipmi: ssif_bmc: change log level to dbg in irq callback
  - ipmi: ssif_bmc: fix message desynchronization after truncated response
  - ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure
  - perf expr: Return -EINVAL for syntax error in expr__find_ids()
  - perf lock: Fix option value type in parse_max_stack
  - pinctrl: abx500: Fix type of 'argument' variable
  - perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace
  - perf branch: Avoid incrementing NULL
  - pinctrl: cy8c95x0: Avoid returning positive values to user space
  - pinctrl: cy8c95x0: Unify messages with help of dev_err_probe()
  - pinctrl: cy8c95x0: remove duplicate error message
  - pinctrl: pinctrl-pic32: Fix resource leak
  - bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT
  - bpf: allow UTF-8 literals in bpf_bprintf_prepare()
  - bpf: Fix precedence bug in convert_bpf_ld_abs alignment check
  - bpf, sockmap: Take state lock for af_unix iter
  - bpf, sockmap: Fix af_unix null-ptr-deref in proto update
  - bpf, sockmap: Fix af_unix iter deadlock
  - HID: usbhid: fix deadlock in hid_post_reset()
  - mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob
  - mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions
  - mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path
  - mtd: spi-nor: swp: check SR_TB flag when getting tb_mask
  - mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation
  - mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook
  - mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook
  - mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations
  - dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range
  - mtd: physmap_of_gemini: Fix disabled pinctrl state check
  - HID: asus: do not abort probe when not necessary
  - HID: asus: make asus_resume adhere to linux kernel coding standards
  - ima: check return value of crypto_shash_final() in boot aggregate
  - soundwire: cadence: Clear message complete before signaling waiting thread
  - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register()
  - soundwire: bus: demote UNATTACHED state warnings to dev_dbg()
  - dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function
  - ocfs2: validate group add input before caching
  - ocfs2: validate bg_bits during freefrag scan
  - ocfs2: fix listxattr handling when the buffer is full
  - ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended
  - arm64/xor: fix conflicting attributes for xor_block_template
  - ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX
  - arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP
  - soc: qcom: aoss: compare against normalized cooling state
  - soc: qcom: llcc: fix v1 SB syndrome register offset
  - ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison
  - ocfs2/dlm: validate qr_numregions in dlm_match_regions()
  - unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure
  - soc/tegra: cbb: Set ERD on resume for err interrupt
  - arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual
  - arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot
  - arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl
  - arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes
  - arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes
  - arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller
  - arm64: dts: qcom: sm8550: Fix GIC_ITS range length
  - arm64: dts: qcom: sm8450: Fix GIC_ITS range length
  - soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available
  - soc: qcom: ocmem: register reasons for probe deferrals
  - soc: qcom: ocmem: use scoped device node handling to simplify error paths
  - soc: qcom: ocmem: make the core clock optional
  - arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight
  - arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value
  - arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count
  - arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count
  - arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1)
  - arm64: dts: imx8-apalis: Fix LEDs name collision
  - memory: tegra30-emc: Fix dll_change check
  - memory: tegra124-emc: Fix dll_change check
  - ARM: dts: mediatek: mt7623: fix efuse fallback compatible
  - ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine
  - efi/capsule-loader: fix incorrect sizeof in phys array reallocation
  - gfs2: prevent NULL pointer dereference during unmount
  - gfs2: add some missing log locking
  - quota: Fix race of dquot_scan_active() with quota deactivation
  - ktest: Run POST_KTEST hooks on failure and cancellation
  - ktest: Honor empty per-test option overrides
  - ktest: Avoid undef warning when WARNINGS_FILE is unset
  - gfs2: Call unlock_new_inode before d_instantiate
  - crypto: jitterentropy - replace long-held spinlock with mutex
  - dm cache: fix missing return in invalidate_committed's error path
  - ALSA: sc6000: Keep the programmed board state in card-private data
  - ALSA: sc6000: Use standard print API
  - spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback
  - PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well
  - PCI: tegra194: Use DWC IP core version
  - PCI: tegra194: Allow system suspend when the Endpoint link is not up
  - PCI: tegra194: Disable direct speed change for Endpoint mode
  - PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select"
  - PCI: tegra194: Disable PERST# IRQ only in Endpoint mode
  - PCI: tegra194: Don't force the device into the D0 state before L2
  - PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0()
  - PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down
  - PCI: tegra194: Increase LTSSM poll time on surprise link down
  - PCI: tegra194: Fix polling delay for L2 state
  - ASoC: SOF: compress: return the configured codec from get_params
  - ALSA: scarlett2: Add missing sentinel initializer field
  - selftest: memcg: skip memcg_sock test if address family not supported
  - Documentation: fix a hugetlbfs reservation statement
  - selftests/mm: skip migration tests if NUMA is unavailable
  - PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found
  - PCI: Enable AtomicOps only if Root Port supports them
  - ASoC: rsnd: Fix potential out-of-bounds access of component_dais[]
  - crypto: qat - use swab32 macro
  - ASoC: qcom: qdsp6: topology: check widget type before accessing data
  - ASoC: fsl_easrc: Change the type for iec958 channel status controls
  - ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits()
  - ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits()
  - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put()
  - ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put()
  - ASoC: fsl_micfil: Fix event generation in micfil_quality_set()
  - ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state()
  - ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode()
  - ASoC: fsl_micfil: Fix event generation in hwvad_put_enable()
  - ASoC: fsl_micfil: Add access property for "VAD Detected"
  - pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe()
  - pmdomain: ti: omap_prm: Fix a reference leak on device node
  - drm/msm/a6xx: Use barriers while updating HFI Q headers
  - drm/msm/shrinker: Fix can_block() logic
  - drm/msm/a6xx: Fix HLSQ register dumping
  - ASoC: SOF: Intel: hda: Place check before dereference
  - ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}')
  - drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board
  - drm/amd/pm/ci: Fill DW8 fields from SMC
  - drm/amd/pm/ci: Clear EnabledForActivity field for memory levels
  - drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0
  - drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock
  - drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs
  - drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled
  - ALSA: core: Validate compress device numbers without dynamic minors
  - drm/panel: simple: Correct G190EAN01 prepare timing
  - drm/panel: sharp-ls043t1le01: make use of prepare_prev_first
  - drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0
  - drm/msm/dsi: add the missing parameter description
  - drm/msm/dpu: fix mismatch between power and frequency
  - spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo
  - drm/amdgpu/gfx10: look at the right prop for gfx queue priority
  - crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs
  - crypto: atmel - Use unregister_{aeads,ahashes,skciphers}
  - crypto: atmel - Remove cfb and ofb
  - fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break
  - dm init: ensure device probing has finished in dm-mod.waitfor=
  - drm/amdgpu: Add default case in DVI mode validation
  - drm/sun4i: Fix resource leaks
  - spi: fsl-qspi: Use reinit_completion() for repeated operations
  - drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check
  - drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs
  - drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable()
  - dm log: fix out-of-bounds write due to region_count overflow
  - dm cache metadata: fix memory leak on metadata abort retry
  - platform/chrome: chromeos_tbmc: Drop wakeup source on remove
  - dm cache: fix dirty mapping checking in passthrough mode switching
  - dm cache: support shrinking the origin device
  - dm cache: fix concurrent write failure in passthrough mode
  - dm cache policy smq: fix missing locks in invalidating cache blocks
  - dm cache: fix write hang in passthrough mode
  - dm cache: fix write path cache coherency in passthrough mode
  - dm cache: fix null-deref with concurrent writes in passthrough mode
  - ASoC: sti: use managed regmap_field allocations
  - ASoC: sti: Return errors from regmap_field_alloc()
  - drm/sun4i: backend: fix error pointer dereference
  - drm/komeda: fix integer overflow in AFBC framebuffer size check
  - net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master
  - sctp: fix missing encap_port propagation for GSO fragments
  - net: phy: qcom: at803x: Use the correct bit to disable extended next page
  - net: phy: move at803x PHY driver to dedicated directory
  - net: phy: add Rust Asix PHY driver
  - net: phy: aquantia: move to separate directory
  - bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
  - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic()
  - net/mlx5e: Fix features not applied during netdev registration
  - dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110
  - net: ipa: Fix decoding EV_PER_EE for IPA v5.0+
  - net: ipa: Fix programming of QTIME_TIMESTAMP_CFG
  - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
  - net/rds: Restrict use of RDS/IB to the initial network namespace
  - net/rds: Optimize rds_ib_laddr_check
  - net/sched: act_ct: Only release RCU read lock after ct_ft
  - net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
  - 6pack: propagage new tty types
  - netfilter: nft_fwd_netdev: check ttl/hl before forwarding
  - netfilter: xt_socket: enable defrag after all other checks
  - net: bcmgenet: fix racing timeout handler
  - net: bcmgenet: switch to use 64bit statistics
  - net: bcmgenet: support reclaiming unsent Tx packets
  - net: bcmgenet: move DESC_INDEX flow to ring 0
  - net: bcmgenet: add bcmgenet_has_* helpers
  - net: bcmgenet: Remove custom ndo_poll_controller()
  - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
  - arm64: kexec: Remove duplicate allocation for trans_pgd
  - ACPI: AGDI: fix missing newline in error message
  - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()
  - wifi: brcmfmac: Fix error pointer dereference
  - macvlan: annotate data-races around port->bc_queue_len_used
  - selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15
  - selftests/powerpc: Re-order *FLAGS to follow lib.mk
  - powerpc/crash: fix backup region offset update to elfcorehdr
  - r8152: fix incorrect register write to USB_UPHY_XTAL
  - wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap()
  - wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work()
  - wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event
  - arm64: cpufeature: Make PMUVer and PerfMon unsigned
  - wifi: mt76: mt7996: fix FCS error flag check in RX descriptor
  - wifi: mt76: mt7915: fix use_cts_prot support
  - wifi: mt76: mt7615: fix use_cts_prot support
  - wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr()
  - module: Fix freeing of charp module parameters when CONFIG_SYSFS=n
  - params: Replace __modinit with __init_or_module
  - s390/bpf: Zero-extend bpf prog return values and kfunc arguments
  - dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n
  - dpaa2: add independent dependencies for FSL_DPAA2_SWITCH
  - bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap
  - bpf: Add CHECKSUM_COMPLETE to bpf test progs
  - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet
  - wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt()
  - firmware: dmi: Correct an indexing error in dmi.h
  - locking: Fix rwlock support in <linux/spinlock_up.h>
  - hrtimer: Reduce trace noise in hrtimer_start()
  - hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns()
  - hrtimers: Update the return type of enqueue_hrtimer()
  - irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter
  - s390/cio: use generic driver_override infrastructure
  - s390/cio: convert sprintf()/snprintf() to sysfs_emit()
  - s390/cio: make sch->lock spinlock pointer a member
  - debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str()
  - debugfs: check for NULL pointer in debugfs_create_str()
  - thermal/drivers/spear: Fix error condition for reading st,thermal-flags
  - devres: fix missing node debug info in devm_krealloc()
  - ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver
  - ACPI: x86: cmos_rtc: Clean up address space handler driver
  - blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current()
  - nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty()
  - loop: fix partition scan race between udev and loop_reread_partitions()
  - drbd: Balance RCU calls in drbd_adm_dump_devices()
  - fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START
  - blk-cgroup: wait for blkcg cleanup before initializing new disk
  - smb: client: use kzalloc to zero-initialize security descriptor buffer
  - mtd: spi-nor: sst: Fix SST write failure
  - drm/amdgpu/vcn4: Avoid overflow on msg bound check
  - drm/amdgpu/vcn3: Avoid overflow on msg bound check
  - vsock/virtio: fix length and offset in tap skb for split packets
  - vsock: fix buffer size clamping order
  - KVM: arm64: Wake-up from WFI when iqrchip is in userspace
  - usb: dwc3: Move GUID programming after PHY initialization
  - tracing/probes: Limit size of event probe to 3K
  - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak
  - pwm: imx-tpm: Count the number of enabled channels in probe
  - mtd: spi-nor: sst: Fix write enable before AAI sequence
  - mtd: spi-nor: sst: Factor out common write operation to `sst_nor_write_data()`
  - ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger
  - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values
  - usb: typec: tcpm: reset internal port states on soft reset AMS
  - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values
  - mm/damon/core: implement damon_kdamond_pid()
  - mm/damon/core: disallow time-quota setting zero esz
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
  - fbcon: Avoid OOB font access if console rotation fails
  - spi: microchip-core-qspi: fix controller deregistration
  - spi: microchip-core-qspi: Use helper function devm_clk_get_enabled()
  - mm/hugetlb_cma: round up per_node before logging it
  - spi: uniphier: fix controller deregistration
  - spi: uniphier: Simplify clock handling with devm_clk_get_enabled()
  - spi: uniphier: switch to use modern name
  - spi: tegra20-sflash: fix controller deregistration
  - spi: tegra114: fix controller deregistration
  - spi: sun6i: fix controller deregistration
  - spi: sun6i: switch to use modern name
  - spi: zynq-qspi: fix controller deregistration
  - spi: zynq-qspi: Simplify clock handling with devm_clk_get_enabled()
  - spi: zynq-qspi: switch to use modern name
  - spi: ti-qspi: fix controller deregistration
  - spi: spi-ti-qspi: switch to use modern name
  - spi: spi-ti-qspi: Convert to platform remove callback returning void
  - spi: sun4i: fix controller deregistration
  - spi: sun4i: switch to use modern name
  - spi: syncuacer: fix controller deregistration
  - spi: synquacer: switch to use modern name
  - Bluetooth: hci_conn: fix potential UAF in create_big_sync
  - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
  - xfrm: ah: account for ESN high bits in async callbacks
  - net: ipv6: stop checking crypto_ahash_alignmask
  - net: ipv4: stop checking crypto_ahash_alignmask
  - net: stmmac: Prevent NULL deref when RX memory exhausted
  - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY()
  - net: stmmac: avoid shadowing global buf_sz
  - crypto: caam - guard HMAC key hex dumps in hash_digest_key
  - printk: add print_hex_dump_devel()
  - wifi: rtl8xxxu: fix potential use of uninitialized value
  - hfsplus: fix held lock freed on hfsplus_fill_super()
  - hfsplus: fix uninit-value by validating catalog record size
  - xfs: fix a resource leak in xfs_alloc_buftarg()
  - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs
  - udf: fix partition descriptor append bookkeeping
  - firmware: google: framebuffer: Do not unregister platform device
  - spi: fix resource leaks on device setup failure
  - net: qrtr: ns: Limit the total number of nodes
  - net: qrtr: ns: Limit the maximum number of lookups
  - net: qrtr: ns: Limit the maximum server registration per node
  - net: bridge: use a stable FDB dst snapshot in RCU readers
  - net: mctp: fix don't require received header reserved bits to be zero
  - RDMA/mana_ib: Disable RX steering on RSS QP destroy
  - sched: Use u64 for bandwidth ratio calculations
  - block: relax pgmap check in bio_add_page for compatible zone device pages
  - PCI: epf-mhi: Return 0, not remaining timeout, when eDMA ops complete
  - wifi: mt76: mt792x: fix mt7925u USB WFSYS reset handling
  - wifi: mt76: mt792x: describe USB WFSYS reset with a descriptor
  - wifi: mt76: connac: introduce helper for mt7925 chipset
  - lib: test_hmm: evict device pages on file close to avoid use-after-free
  - wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup()
  - batman-adv: bla: put backbone reference on failed claim hash insert
  - batman-adv: bla: only purge non-released claims
  - batman-adv: bla: prevent use-after-free when deleting claims
  - batman-adv: stop caching unowned originator pointers in BAT IV
  - batman-adv: reject new tp_meter sessions during teardown
  - batman-adv: fix integer overflow on buff_pos
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
  - drm/amdgpu/pm: align Hawaii mclk workaround with radeon
  - drm/amdgpu/pm: add missing revision check for CI
  - drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission
  - drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ
  - drm/amdgpu: zero-initialize GART table on allocation
  - drm/radeon: add missing revision check for CI
  - drm/amdkfd: validate SVM ioctl nattr against buffer size
  - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
  - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg
  - drm/amdgpu/vce: Prevent partial address patches
  - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB
  - drm/amdgpu: Add bounds checking to ib_{get,set}_value
  - drm/amdkfd: Add upper bound check for num_of_nodes
  - drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure
  - spi: cadence: fix unclocked access on unbind
  - spi: cadence: fix controller deregistration
  - spi: mpc52xx: fix use-after-free on unbind
  - spi: orion: fix clock imbalance on registration failure
  - spi: orion: fix runtime pm leak on unbind
  - spi: imx: fix runtime pm leak on probe deferral
  - spi: img-spfi: fix controller deregistration
  - spi: rspi: fix controller deregistration
  - spi: sprd: fix controller deregistration
  - spi: coldfire-qspi: fix controller deregistration
  - spi: bcmbca-hsspi: fix controller deregistration
  - spi: fsl: fix controller deregistration
  - spi: sh-hspi: fix controller deregistration
  - spi: mtk-nor: fix controller deregistration
  - spi: omap2-mcspi: fix controller deregistration
  - spi: fsl-espi: fix controller deregistration
  - spi: s3c64xx: fix controller deregistration
  - spi: dln2: fix controller deregistration
  - media: omap3isp: drop the use count of v4l2 pipeline
  - media: i2c: ov08d10: fix image vertical start setting
  - media: staging: imx: request mbus_config in csi_start
  - media: i2c: imx412: Assert reset GPIO during probe
  - media: dib8000: avoid division by 0 in dib8000_set_dds()
  - media: pci: zoran: fix potential memory leak in zoran_probe()
  - platform/x86: hp-wmi: Ignore backlight and FnLock events
  - media: saa7164: add ioremap return checks and cleanups
  - spi: at91-usart: fix controller deregistration
  - spi: qup: fix controller deregistration
  - spi: lantiq-ssc: fix controller deregistration
  - regulator: bd9571mwv: fix OF node reference imbalance
  - regulator: act8945a: fix OF node reference imbalance
  - media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
  - regulator: rk808: fix OF node reference imbalance
  - media: rc: streamzap: Error handling in probe
  - media: rc: xbox_remote: heed DMA restrictions
  - regulator: max77650: fix OF node reference imbalance
  - regulator: mt6357: fix OF node reference imbalance
  - staging: media: atomisp: Disallow all private IOCTLs
  - spi: atmel: fix controller deregistration
  - spi: bcm63xx: fix controller deregistration
  - media: i2c: ov8856: free control handler on error in ov8856_init_controls()
  - media: uvcvideo: Enable VB2_DMABUF for metadata stream
  - HID: playstation: Clamp num_touch_reports
  - exit: Sleep at TASK_IDLE when waiting for application core dump
  - LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup
  - LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()
  - KVM: arm64: Fix initialisation order in __pkvm_init_finalise()
  - KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value
  - f2fs: fix node_cnt race between extent node destroy and writeback
  - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks()
  - f2fs: fix fiemap boundary handling when read extent cache is incomplete
  - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode()
  - mptcp: fix scheduling with atomic in timestamp sockopt
  - mptcp: sockopt: set timestamp flags on subflow socket, not msk
  - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure
  - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure
  - mptcp: fastclose msk when linger time is 0
  - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
  - RDMA/rxe: Reject unknown opcodes before ICRC processing
  - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads
  - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
  - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
  - power: supply: max17042: avoid overflow when determining health
  - PCI/AER: Stop ruling out unbound devices as error source
  - PCI/AER: Clear only error bits in PCIe Device Status
  - KVM: x86: check for nEPT/nNPT in slow flush hypercalls
  - smb: client: validate dacloffset before building DACL pointers
  - smb/client: fix out-of-bounds read in symlink_data()
  - smb/client: fix out-of-bounds read in smb2_compound_op()
  - s390/debug: Reject zero-length input in debug_input_flush_fn()
  - RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
  - nvme-apple: drop invalid put of admin queue reference count
  - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
  - libceph: Fix slab-out-of-bounds access in auth message processing
  - lib/scatterlist: fix temp buffer in extract_user_to_sg()
  - lib/scatterlist: fix length calculations in extract_kvec_to_sg
  - isofs: validate block number from NFS file handle in isofs_export_iget
  - isofs: validate Rock Ridge CE continuation extent against volume size
  - dm-verity-fec: correctly reject too-small hash devices
  - dm-verity-fec: correctly reject too-small FEC devices
  - dm: fix a buffer overflow in ioctl processing
  - dm: don't report warning when doing deferred remove
  - dm-thin: fix metadata refcount underflow
  - ASoC: qcom: q6apm: remove child devices when apm is removed
  - ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens
  - ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop
  - ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error
  - ASoC: fsl_easrc: fix comment typo
  - ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table
  - cpuidle: powerpc: avoid double clear when breaking snooze
  - clk: microchip: mpfs-ccc: fix out of bounds access during output registration
  - clk: imx: imx8-acm: fix flags for acm clocks
  - spi: topcliff-pch: fix use-after-free on unbind
  - thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp
  - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata
  - udf: reject descriptors with oversized CRC length
  - ibmveth: Disable GSO for packets with small MSS
  - hv_sock: fix ARM64 support
  - gpio: of: clear OF_POPULATED on hog nodes in remove path
  - extcon: ptn5150: handle pending IRQ events during system resume
  - cifs: change_conf needs to be called for session setup
  - cifs: abort open_cached_dir if we don't request leases
  - block: add pgmap check to biovec_phys_mergeable
  - af_unix: Reject SIOCATMARK on non-stream sockets
  - hwmon: (corsair-psu) Close HID device on probe errors
  - clk: rk808: fix OF node reference imbalance
  - hwmon: (ltc2992) Fix u32 overflow in power read path
  - hwmon: (ltc2992) Clamp threshold writes to hardware range
  - parisc: Fix IRQ leak in LASI driver
  - net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler
  - net/rds: handle zerocopy send cleanup before the message is queued
  - ip6_gre: Use cached t->net in ip6erspan_changelink().
  - net: libwx: fix VF illegal register access
  - sound: ua101: fix division by zero at probe
  - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo
  - fanotify: fix false positive on permission events
  - staging: vme_user: fix root device leak on init failure
  - spi: s3c64xx: fix NULL-deref on driver unbind
  - spi: zynqmp-gqspi: fix controller deregistration
  - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
  - Bluetooth: virtio_bt: validate rx pkt_type header length
  - Bluetooth: virtio_bt: clamp rx length before skb_put
  - selinux: prune /sys/fs/selinux/disable
  - selinux: shrink critical section in sel_write_load()
  - selinux: don't reserve xattr slot when we won't fill it
  - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
  - xfrm: provide message size for XFRM_MSG_MAPPING
  - powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o
  - ALSA: firewire-tascam: Do not drop unread control events
  - USB: serial: option: add Telit Cinterion LE910Cx compositions
  - USB: omap_udc: DMA: Don't enable burst 4 mode
  - ALSA: usb-audio: Fix UAC3 cluster descriptor size check
  - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
  - ALSA: usb-audio: midi2: Restart output URBs on resume
  - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task
  - wifi: b43: enforce bounds check on firmware key index in b43_rx()
  - wifi: mac80211: remove station if connection prep fails
  - wifi: ath5k: do not access array OOB
  - wifi: mac80211: drop stray 'static' from fast-RX rx_result
  - wifi: b43legacy: enforce bounds check on firmware key index in RX path
  - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work
  - wifi: mt76: mt7921: fix a potential clc buffer length underflow
  - exit: prevent preemption of oopsing TASK_DEAD task
  - selftests/bpf: validate fake register spill/fill precision backtracking logic
  - selftests/bpf: validate precision logic in partial_stack_load_preserves_zeros
  - selftests/bpf: validate zero preservation for sub-slot loads
  - selftests/bpf: validate STACK_ZERO is preserved on subreg spill
  - net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked
  - KVM: SVM: check validity of VMCB controls when returning from SMM
  - flow_dissector: do not dissect PPPoE PFC frames
  - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
  - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets
  - rxrpc: Fix potential UAF after skb_unshare() failure
  - spi: meson-spicc: Fix double-put in remove path
  - drm/amd/display: Do not skip unrelated mode changes in DSC validation
  - spi: rockchip: fix controller deregistration
  - ASoC: SOF: Don't allow pointer operations on unconfigured streams
  - iommufd: Fix a race with concurrent allocation and unmap
  - ACPI: video: force native backlight on HP OMEN 16 (8A44)
  - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug
  - ACPI: scan: Use acpi_dev_put() in object add error paths
  - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free
  - ipmi:si: Return state to normal if message allocation fails
  - ipmi: Check event message buffer response for bad data
  - ipmi: Add limits to event and receive message requests
  - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
  - netfilter: reject zero shift in nft_bitwise
  - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
  - drm/amdgpu: fix zero-size GDS range init on RDNA4
  - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
  - seg6: fix seg6 lwtunnel output redirect for L2 reduced encap mode
  - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails
  - rtmutex: Use waiter::task instead of current in remove_waiter()
  - ntfs3: fix integer overflow in run_unpack() volume boundary check
  - ntfs3: add buffer boundary checks to run_unpack()
  - ktest: Fix the month in the name of the failure directory
  - IB/core: Fix zero dmac race in neighbor resolution
  - dm mirror: fix integer overflow in create_dirty_log()
  - crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path
  - crypto: atmel-tdes - fix DMA sync direction
  - crypto: ccree - fix a memory leak in cc_mac_digest()
  - crypto: hisilicon - Fix dma_unmap_single() direction
  - crypto: atmel-ecc - Release client on allocation failure
  - crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup
  - crypto: arm64/aes - Fix 32-bit aes_mac_update() arg treated as 64-bit
  - can: ucan: fix devres lifetime
  - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
  - taskstats: set version in TGID exit notifications
  - tcp: call sk_data_ready() after listener migration
  - inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails
  - md/raid5: validate payload size before accessing journal metadata
  - ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()
  - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access
  - mtd: docg3: fix use-after-free in docg3_release()
  - mtd: docg3: Convert to platform remove callback returning void
  - KVM: nSVM: Add missing consistency check for nCR3 validity
  - KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS
  - KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT
  - KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT
  - KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID)
  - KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN
  - KVM: nSVM: Use vcpu->arch.cr2 when updating vmcb12 on nested #VMEXIT
  - KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode
  - KVM: SVM: Explicitly mark vmcb01 dirty after modifying VMCB intercepts
  - KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2
  - KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state
  - KVM: x86: Defer non-architectural deliver of exception payload to userspace read
  - userfaultfd: allow registration of ranges below mmap_min_addr
  - mm/damon/core: use time_in_range_open() for damos quota window start
  - rtc: ntxec: fix OF node reference imbalance
  - tpm: tpm_tis: stop transmit if retries are exhausted
  - tpm: tpm_tis: add error logging for data transfer
  - crypto: talitos - rename first/last to first_desc/last_desc
  - crypto: talitos - fix SEC1 32k ahash request limitation
  - arm64: dts: ti: am62-verdin: Enable pullup for eMMC data pins
  - mmc: sdhci-of-dwcmshc: Disable clock before DLL configuration
  - mmc: block: use single block write in retry
  - power: supply: axp288_charger: Do not cancel work before initializing it
  - LoongArch: Show CPU vulnerabilites correctly
  - tpm: avoid -Wunused-but-set-variable
  - extract-cert: Wrap key_pass with '#ifdef USE_PKCS11_ENGINE'
  - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()
  - ipv4: icmp: validate reply type before using icmp_pointers
  - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
  - drm/arcpgu: fix device node leak
  - net: ks8851: Avoid excess softirq scheduling
  - net: ks8851: Reinstate disabling of BHs around IRQ handler
  - net/smc: avoid early lgr access in smc_clc_wait_msg
  - net: rds: fix MR cleanup on copy error
  - net: qrtr: ns: Free the node during ctrl_cmd_bye()
  - tools/accounting: handle truncated taskstats netlink messages
  - rxrpc: Fix re-decryption of RESPONSE packets
  - rxrpc: Fix rxkad crypto unalignment handling
  - rxrpc: Fix memory leaks in rxkad_verify_response()
  - iio: adc: ad7768-1: fix one-shot mode data acquisition
  - io_uring/poll: ensure EPOLL_ONESHOT is propagated for EPOLL_URING_WAKE
  - io_uring/poll: fix signed comparison in io_poll_get_ownership()
  - iio: adc: ti-ads7950: use iio_push_to_buffers_with_ts_unaligned()
  - io_uring/timeout: check unused sqe fields
  - rbd: fix null-ptr-deref when device_add_disk() fails
  - selftests/mqueue: Fix incorrectly named file
  - remoteproc: xlnx: Only access buffer information if IPI is buffered
  - parisc: _llseek syscall is only available for 32-bit userspace
  - nvme: respect NVME_QUIRK_DISABLE_WRITE_ZEROES when wzsl is set
  - nvme-pci: add NVME_QUIRK_DISABLE_WRITE_ZEROES for Kingston OM3SGP4
  - mfd: stpmic1: Attempt system shutdown twice in case PMIC is confused
  - md/raid10: fix deadlock with check operation and nowait requests
  - ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes
  - ALSA: ctxfi: Add fallback to default RSR for S/PDIF
  - ALSA: aoa: i2sbus: fix OF node lifetime handling
  - ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()
  - media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe()
  - lib/ts_kmp: fix integer overflow in pattern length calculation
  - PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown
  - media: mtk-jpeg: fix use-after-free in release path due to uncancelled work
  - net: strparser: fix skb_head leak in strp_abort_strp()
  - ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()
  - media: amphion: Fix race between m2m job_abort and device_run
  - of: unittest: fix use-after-free in testdrv_probe()
  - spi: imx: fix use-after-free on unbind
  - um: drivers: call kernel_strrchr() explicitly in cow_user.c
  - wifi: rtw88: check for PCI upstream bridge existence
  - zram: do not forget to endio for partial discard requests
  - LoongArch: Add spectre boundry for syscall dispatch table
  - ocfs2: split transactions in dio completion to avoid credit exhaustion
  - regset: use kvzalloc() for regset_get_alloc()
  - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion
  - drm/amdgpu: Use vmemdup_array_user in amdgpu_bo_create_list_entry_array
  - padata: Remove comment for reorder_work
  - firmware: google: framebuffer: Do not mark framebuffer as busy
  - ibmasm: fix heap over-read in ibmasm_send_i2o_message()
  - ibmasm: fix OOB reads in command_file_write due to missing size checks
  - misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()
  - leds: qcom-lpg: Check for array overflow when selecting the high resolution
  - ALSA: usb-audio: Evaluate packsize caps at the right place
  - usb: chipidea: core: allow ci_irq_handler() handle both ID and VBUS change
  - usb: chipidea: otg: not wait vbus drop if use role_switch
  - usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable()
  - ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch
  - ALSA: usb-audio: Avoid false E-MU sample-rate notifications
  - ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES
  - Buffer overflow in drivers/xen/sys-hypervisor.c
  - md/raid1: fix data lost for writemostly rdev
  - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
  - crypto: testmgr - Hide ENOENT errors better
  - crypto: testmgr - Hide ENOENT errors
  - net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()
  - f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()
  - fuse: quiet down complaints in fuse_conn_limit_write
  - fuse: Check for large folio with SPLICE_F_MOVE
  - fuse: reject oversized dirents in page cache
  - f2fs: fix to avoid memory leak in f2fs_rename()
  - fs/ntfs3: validate rec->used in journal-replay file record check
  - rxrpc: only handle RESPONSE during service challenge
  - rxrpc: Fix anonymous key handling
  - scripts/dtc: Remove unused dts_version in dtc-lexer.l
  - Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave"
  - ocfs2: fix out-of-bounds write in ocfs2_write_end_inline
  - ocfs2: validate inline data i_size during inode read
  - ocfs2: add inline inode consistency check to ocfs2_validate_inode_block()
  - rxrpc: Fix key quota calculation for multitoken keys
  - scripts: generate_rust_analyzer.py: define scripts
  - net: ethernet: mtk_eth_soc: initialize PPE per-tag-layer MTU registers
  - PCI: endpoint: pci-epf-vntb: Remove duplicate resource teardown
  - Revert "perf unwind-libdw: Fix invalid reference counts"
  - media: hackrf: fix to not free memory after the device is registered in hackrf_probe()
  - media: vidtv: fix pass-by-value structs causing MSAN warnings
  - nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
  - media: as102: fix to not free memory after the device is registered in as102_usb_probe()
  - ALSA: 6fire: fix use-after-free on disconnect
  - media: em28xx: fix use-after-free in em28xx_v4l2_open()
  - media: mediatek: vcodec: fix use-after-free in encoder release path
  - media: vidtv: fix nfeeds state corruption on start_streaming failure
  - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
  - mm/kasan: fix double free for kasan pXds
  - ASoC: qcom: q6apm: move component registration to unmanaged version
  - checkpatch: add support for Assisted-by tag
  - nfc: nci: complete pending data exchange on device close
  - net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr()
  - KVM: nVMX: Fold requested virtual interrupt check into has_nested_events()
  - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
  - ocfs2: handle invalid dinode in ocfs2_group_extend
  - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY
  - ocfs2: fix possible deadlock between unlink and dio_end_io_write
  - media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections
  - Docs/admin-guide/mm/damon/reclaim: warn commit_inputs vs param updates race
  - USB: serial: option: add Telit Cinterion FN990A MBIM composition
  - staging: sm750fb: fix division by zero in ps_to_hz()
  - wifi: rtw88: fix device leak on probe failure
  - scripts: generate_rust_analyzer.py: avoid FD leak
  - fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  - ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
  - ksmbd: require 3 sub-authorities before reading sub_auth[2]
  - ksmbd: validate EaNameLength in smb2_get_ea()
  - usb: gadget: renesas_usb3: validate endpoint index in standard request handlers
  - usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()
  - usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()
  - fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO
  - ALSA: fireworks: bound device-supplied status before string array lookup
  - drm/vc4: platform_get_irq_byname() returns an int
  - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
  - net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()
  - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()
  - i2c: s3c24xx: check the size of the SMBUS message before using it
  - nfc: llcp: add missing return after LLCP_CLOSED checks
  - drm/i915/psr: Do not use pipe_src as borders for SU area
  - objtool: Remove max symbol name length limitation
  - ALSA: usb-audio: Improve Focusrite sample rate filtering
  - gpio: tegra: fix irq_release_resources calling enable instead of disable
  - l2tp: Drop large packets with UDP encap
  - net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+
  - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator
  - ipvs: fix NULL deref in ip_vs_add_service error path
  - selftests: net: bridge_vlan_mcast: wait for h1 before querier check
  - xsk: validate MTU against usable frame size on bind
  - xsk: fix XDP_UMEM_SG_FLAG issues
  - xsk: respect tailroom for ZC setups
  - xsk: tighten UMEM headroom validation to account for tailroom and min frame
  - e1000: check return value of e1000_read_eeprom
  - dt-bindings: net: Fix Tegra234 MGBE PTP clock
  - net: stmmac: Fix PTP ref clock for Tegra234
  - nfc: s3fwrn5: allocate rx skb before consuming bytes
  - net: lapbether: handle NETDEV_PRE_TYPE_CHANGE
  - eventpoll: defer struct eventpoll free to RCU grace period
  - drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock
  - drm/vc4: Fix a memory leak in hang state error path
  - drm/vc4: Fix memory leak of BO array in hang state
  - drm/vc4: Release runtime PM reference after binding V3D
  - PCI: hv: Set default NUMA node to 0 for devices without affinity info
  - arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency
  - soc: aspeed: socinfo: Mask table entries for accurate SoC ID matching
  - ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J
  - wifi: brcmfmac: validate bsscfg indices in IF events
  - ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585
  - HID: roccat: fix use-after-free in roccat_report_event
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IAH10
  - HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3
  - platform/x86/amd: pmc: Add Thinkpad L14 Gen3 to quirk_s2idle_bug
  - pinctrl: intel: Fix the revision for new features (1kOhm PD, HW debouncer)
  - ASoC: amd: yc: Add DMI entry for HP Laptop 15-fc0xxx
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
  - ALSA: usb-audio: Fix quirk flags for NeuralDSP Quad Cortex
  - ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list
  - wifi: wl1251: validate packet IDs before indexing tx_frames
  - ALSA: hda/realtek: add quirk for Framework F111:000F
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx
  - can: mcp251x: add error handling for power enable in open and resume
  - ASoC: SOF: topology: reject invalid vendor array size in token parser
  - ASoC: amd: yc: Add DMI quirk for Thin A15 B7VF
  - ALSA: asihpi: avoid write overflow check warning
  - media: rkvdec: reduce stack usage in rkvdec_init_v4l2_vp9_count_tbl()
  - ALSA: hda/realtek: Add quirk for ASUS ROG Flow Z13-KJP GZ302EAC
  - ALSA: hda/realtek: Add HP ENVY Laptop 13-ba0xxx quirk
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK BM1403CDA
  - RDMA/irdma: Fix double free related to rereg_user_mr
  - Revert "PCI: Enable ACS after configuring IOMMU for OF platforms"
  - rxrpc: Fix missing error checks for rxkad encryption/decryption failure
  - rxrpc: Fix key/keyring checks in setsockopt(RXRPC_SECURITY_KEY/KEYRING)
  - rxrpc: fix reference count leak in rxrpc_server_keyring()
  - rxrpc: reject undecryptable rxkad response tickets
  - rxrpc: Only put the call ref if one was acquired
  - rxrpc: Fix key reference count leak from call->key
  - rxrpc: Fix call removal to use RCU safe deletion
  - net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()
  - net: stmmac: fix integer underflow in chain mode
  - net: qualcomm: qca_uart: report the consumed byte on RX skb allocation failure
  - pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled
  - net/mlx5: Update the list of the PCI supported devices
  - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
  - batman-adv: hold claim backbone gateways by reference
  - net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
  - batman-adv: reject oversized global TT response buffers
  - nfc: pn533: allocate rx skb before consuming bytes
  - arm64: dts: hisilicon: hi3798cv200: Add missing dma-ranges
  - arm64: dts: hisilicon: poplar: Correct PCIe reset GPIO polarity
  - arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V
  - Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower"
  - wifi: brcmsmac: Fix dma_free_coherent() size
  - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"
  - usb: gadget: f_hid: move list and spinlock inits from bind to alloc
  - virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN
  - MIPS: mm: Rewrite TLB uniquification for the hidden bit feature
  - MIPS: mm: Suppress TLB uniquification on EHINV hardware
  - MIPS: Always record SEGBITS in cpu_data.vmbits
  - Input: uinput - take event lock when submitting FF request "event"
  - mptcp: fix slab-use-after-free in __inet_lookup_established
  - net: rfkill: prevent unlimited numbers of rfkill events from being created
  - wifi: rt2x00usb: fix devres lifetime
  - net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta
  - MPTCP: fix lock class name family in pm_nl_create_listen_socket
  - dmaengine: fsl-edma: fix channel parameter config for fixed channel requests
  - dmaengine: fsl-edma: change to guard(mutex) within fsl_edma3_xlate()
  - x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling()
  - net: mana: fix use-after-free in add_adev() error path
  - net: macb: Move devm_{free,request}_irq() out of spin lock area
  - iio: imu: inv_icm42600: fix odr switch when turning buffer off
  - wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free
  - usb: gadget: f_uac1_legacy: validate control request size
  - usb: gadget: f_rndis: Protect RNDIS options with mutex
  - usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
  - usb: gadget: uvc: fix NULL pointer dereference during unbind race
  - usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop
  - btrfs: do not free data reservation in fallback from inline due to -ENOSPC
  - btrfs: fix the qgroup data free range for inline data extents
  - usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer
  - USB: dummy-hcd: Fix interrupt synchronization error
  - USB: dummy-hcd: Fix locking/synchronization error
  - thunderbolt: Fix property read in nhi_wake_supported()
  - misc: fastrpc: possible double-free of cctx->remote_heap
  - thermal: core: Fix thermal zone device registration error path
  - gpio: mxc: map Both Edge pad wakeup to Rising Edge
  - net: ftgmac100: fix ring allocation unwind on open failure
  - counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member
  - counter: rz-mtu3-cnt: prevent counter from being toggled multiple times
  - nvmem: imx: assign nvmem_cell_info::raw_len
  - dt-bindings: connector: add pd-disable dependency
  - comedi: me4000: Fix potential overrun of firmware buffer
  - comedi: me_daq: Fix potential overrun of firmware buffer
  - comedi: ni_atmio16d: Fix invalid clean-up after failed attach
  - comedi: Reinit dev->spinlock between attachments to low-level drivers
  - comedi: dt2815: add hardware detection to prevent crash
  - cdc-acm: new quirk for EPSON HMD
  - usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()
  - usb: ehci-brcm: fix sleep during atomic
  - usb: usbtmc: Flush anchored URBs in usbtmc_release
  - usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive
  - iio: gyro: mpu3050: Fix out-of-sequence free_irq()
  - iio: gyro: mpu3050: Move iio_device_register() to correct location
  - iio: gyro: mpu3050: Fix irq resource leak
  - iio: gyro: mpu3050: Fix incorrect free_irq() variable
  - iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only
  - iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()
  - iio: light: vcnl4035: fix scan buffer on big-endian
  - iio: dac: ad5770r: fix error return in ad5770r_read_raw()
  - iio: accel: fix ADXL355 temperature signature value
  - Input: xpad - add support for Razer Wolverine V3 Pro
  - Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode
  - Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table
  - Input: synaptics-rmi4 - fix a locking bug in an error path
  - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()
  - drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP
  - drm/ast: dp501: Fix initialization of SCU2C
  - iio: adc: ti-adc161s626: fix buffer read on big-endian
  - mips: mm: Allocate tlb_vpn array atomically
  - hwmon: (occ) Fix division by zero in occ_show_power_1()
  - MIPS: Fix the GCC version check for `__multi3' workaround
  - ALSA: ctxfi: Fix missing SPDIFI1 index handling
  - ALSA: caiaq: fix stack out-of-bounds read in init_card
  - USB: serial: option: add MeiG Smart SRM825WN
  - wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation
  - riscv: kgdb: fix several debug register assignment bugs
  - mips: ralink: update CPU clock index
  - hwmon: (occ) Fix missing newline in occ_show_extended()
  - hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()
  - dt-bindings: gpio: fix microchip #interrupt-cells
  - hwmon: (pxe1610) Check return value of page-select write in probe
  - accel/qaic: Handle DBC deactivation if the owner went away
  - iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
  - net: hsr: fix VLAN add unwind on slave errors
  - net/x25: Fix overflow when accumulating packets
  - net/x25: Fix potential double free of skb
  - net/mlx5: Avoid "No data available" when FW version queries fail
  - net: macb: properly unregister fixed rate clocks
  - net: macb: fix clk handling on PCI glue driver removal
  - bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
  - rds: ib: reject FRMR registration before IB connection is established
  - Bluetooth: SCO: fix race conditions in sco_sock_connect()
  - Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate
  - net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec
  - NFC: pn533: bound the UART receive buffer
  - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak
  - ipv6: prevent possible UaF in addrconf_permanent_addr()
  - ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure
  - tg3: Fix race for querying speed/duplex
  - net/ipv6: ioam6: prevent schema length wraparound in trace fill
  - net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
  - net: fec: fix the PTP periodic output sysfs interface
  - crypto: caam - fix overflow on long hmac keys
  - crypto: caam - fix DMA corruption on long hmac keys
  - wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session
  - wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation
  - wifi: ath11k: skip status ring entry processing
  - dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning
  - spi: geni-qcom: Check DMA interrupts early in ISR
  - btrfs: reject root items with drop_progress and zero drop_level
  - i2c: tegra: Don't mark devices with pins as IRQ safe
  - objtool: Fix Clang jump table detection
  - tg3: replace placeholder MAC address with device property
  - btrfs: don't take device_list_mutex when querying zone info
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq
  - arm64/scs: Fix handling of advance_loc4
  - Revert "rust: pin-init: add references to previously initialized fields"
  - Revert "rust: pin-init: internal: init: document load-bearing fact of field accessors"
  - dmaengine: idxd: Fix freeing the allocated ida too late
  - btrfs: fix lost error when running device stats on multiple devices fs
  - btrfs: fix super block offset in error message in btrfs_validate_super()
  - dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA
  - dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction
  - dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA
  - dmaengine: xilinx: xilinx_dma: Fix dma_device directions
  - dmaengine: xilinx: xdma: Fix regmap init error handling
  - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA.
  - phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types()
  - erofs: fix "BUG: Bad page state in z_erofs_do_read_page"
  - mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0]
  - mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode
  - mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode
  - rust: pin-init: internal: init: document load-bearing fact of field accessors
  - rust: pin-init: add references to previously initialized fields
  - tracing: Fix potential deadlock in cpu hotplug with osnoise
  - tracing: Switch trace_osnoise.c code over to use guard() and __free()
  - ksmbd: fix memory leaks and NULL deref in smb2_lock()
  - ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()
  - powerpc64/bpf: do not increment tailcall count when prog is NULL
  - arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off
  - ext4: always drain queued discard work in ext4_mb_release()
  - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths
  - ext4: fix the might_sleep() warnings in kvfree()
  - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal()
  - ext4: make recently_deleted() properly work with lazy itable initialization
  - ext4: fix fsync(2) for nojournal mode
  - ext4: fix stale xarray tags after writeback
  - ext4: fix journal credit check when setting fscrypt context
  - xfs: fix ri_total validation in xlog_recover_attri_commit_pass2
  - xfs: stop reclaim before pushing AIL during unmount
  - LoongArch: Workaround LS2K/LS7A GPU DMA hang bug
  - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock
  - dmaengine: sh: rz-dmac: Protect the driver specific lists
  - irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment
  - jbd2: gracefully abort on checkpointing state corruptions
  - net: macb: Use dev_consume_skb_any() to free TX SKBs
  - scsi: ses: Handle positive SCSI error from ses_recv_diag()
  - scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()
  - alarmtimer: Fix argument order in alarm_timer_forward()
  - s390/entry: Scrub r12 register on kernel entry
  - hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible()
  - hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature
  - hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes
  - KVM: arm64: Discard PC update state on vcpu reset
  - platform/x86: ISST: Correct locked bit width
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
  - ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload
  - ALSA: firewire-lib: fix uninitialized local variable
  - ksmbd: do not expire session on binding failure
  - ksmbd: fix potencial OOB in get_file_all_info() for compound requests
  - ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()
  - s390/barrier: Make array_index_mask_nospec() __always_inline
  - s390/syscalls: Add spectre boundary for syscall dispatch table
  - spi: spi-fsl-lpspi: fix teardown order issue (UAF)
  - ASoC: adau1372: Fix clock leak on PLL lock failure
  - ASoC: adau1372: Fix unchecked clk_prepare_enable() return value
  - sysctl: fix uninitialized variable in proc_do_large_bitmap
  - hwmon: (adm1177) fix sysfs ABI violation and current unit conversion
  - ASoC: Intel: catpt: Fix the device initialization
  - spi: sn-f-ospi: Fix resource leak in f_ospi_probe()
  - PM: hibernate: Drain trailing zero pages on userspace restore
  - PM: hibernate: Don't ignore return from set_memory_ro()
  - drm/i915/gmbus: fix spurious timeout on 512-byte burst reads
  - scsi: scsi_transport_sas: Fix the maximum channel scanning issue
  - RDMA/irdma: Return EINVAL for invalid arp index error
  - RDMA/irdma: Fix deadlock during netdev reset with active connections
  - RDMA/irdma: Remove reset check from irdma_modify_qp_to_err()
  - RDMA/irdma: Clean up unnecessary dereference of event->cm_node
  - RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce()
  - RDMA/irdma: Update ibqp state to error if QP is already in error state
  - RDMA/irdma: Initialize free_qp completion before using it
  - RDMA/rw: Fall back to direct SGE on MR pool exhaustion
  - regmap: Synchronize cache for the page selector
  - Bluetooth: btusb: clamp SCO altsetting table indices
  - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock
  - Bluetooth: hci_sync: Remove remaining dependencies of hci_request
  - Bluetooth: Remove 3 repeated macro definitions
  - Bluetooth: L2CAP: Fix send LE flow credits in ACL link
  - dma-mapping: add missing `inline` for `dma_free_attrs`
  - net: enetc: fix the output issue of 'ethtool --show-ring'
  - ice: use ice_update_eth_stats() for representor stats
  - platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen
  - rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size
  - net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
  - nfc: nci: fix circular locking dependency in nci_close_device
  - ionic: fix persistent MAC address override on PF
  - pinctrl: mediatek: common: Fix probe failure for devices without EINT
  - Bluetooth: hci_ll: Fix firmware leak on error path
  - can: statistics: add missing atomic access in hot path
  - dma: swiotlb: add KMSAN annotations to swiotlb_bounce()
  - xfrm: call xdo_dev_state_delete during state update
  - spi: intel-pci: Add support for Nova Lake mobile SPI flash
  - usb: core: new quirk to handle devices with zero configurations
  - objtool: Handle Clang RSP musical chairs
  - ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390
  - ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk
  - btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create
  - dma-buf: Include ioctl.h in UAPI header
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits()
  - ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg()
  - HID: asus: add xg mobile 2023 external hardware support
  - HID: mcp2221: cancel last I2C command on read error
  - net: usb: r8152: add TRENDnet TUC-ET2G
  - HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2
  - platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10
  - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1
  - nvme-fabrics: use kfree_sensitive() for DHCHAP secrets
  - nvme-pci: cap queue creation to used queues
  - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list
  - HID: asus: avoid memory leak in asus_report_fixup()
  - sh: platform_early: remove pdev->driver_override check
  - hwmon: (axi-fan-control) Use device firmware agnostic API
  - cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled
  - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure
  - lib/bootconfig: check xbc_init_node() return in override path
  - ksmbd: fix use-after-free in durable v2 replay of active file handles
  - ksmbd: fix use-after-free of share_conf in compound request
  - drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr()
  - mtd: rawnand: brcmnand: skip DMA during panic write
  - mtd: rawnand: serialize lock/unlock against other NAND operations
  - i2c: cp2615: fix serial string NULL-deref at probe
  - i2c: cp2615: replace deprecated strncpy with strscpy
  - i2c: pxa: defer reset on Armada 3700 when recovery is used
  - i2c: fsi: Fix a potential leak in fsi_i2c_probe()
  - USB: serial: f81232: fix incomplete serial port generation
  - drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug
  - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit()
  - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value
  - net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths
  - net: mvpp2: guard flow control update with global_tx_fc in buffer switching
  - netfilter: bpf: defer hook memory release until rcu readers are done
  - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle
  - net: macb: fix uninitialized rx_fs_lock
  - wifi: mac80211: fix NULL deref in mesh_matches_local()
  - iavf: fix VLAN filter lost on add/delete race
  - igc: fix missing update of skb->tail in igc_xmit_frame()
  - net: usb: aqc111: Do not perform PM inside suspend callback
  - sched: idle: Consolidate the handling of two special cases
  - net: bcmgenet: increase WoL poll timeout
  - netfilter: xt_time: use unsigned int for monthday bit shift
  - netfilter: nft_ct: drop pending enqueued packets on removal
  - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
  - firmware: arm_scpi: Fix device_node reference leak in probe path
  - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
  - soc: fsl: qbman: fix race condition in qman_destroy_fq
  - cache: ax45mp: Fix device node reference leak in ax45mp_cache_init()
  - btrfs: tree-checker: fix misleading root drop_level error message
  - btrfs: log new dentries when logging parent dir of a conflicting inode
  - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END}
  - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants
  - drm/radeon: apply state adjust rules to some additional HAINAN vairants
  - drm/amdgpu/mmhub3.0: add bounds checking for cid
  - drm/amdgpu/mmhub3.0.2: add bounds checking for cid
  - drm/amdgpu/mmhub3.0.1: add bounds checking for cid
  - drm/amdgpu/mmhub2.3: add bounds checking for cid
  - drm/amdgpu/mmhub2.0: add bounds checking for cid
  - drm/amdgpu/gmc9.0: add bounds checking for cid
  - serial: uartlite: fix PM runtime usage count underflow on probe
  - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY
  - serial: 8250_pci: add support for the AX99100
  - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry
  - mtd: Avoid boot crash in RedBoot partition table parser
  - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init()
  - mtd: rawnand: pl353: make sure optimal timings are applied
  - pmdomain: bcm: bcm2835-power: Increase ASB control timeout
  - mmc: sdhci: fix timing selection for 1-bit bus width
  - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption
  - batman-adv: avoid OGM aggregation when skb tailroom is insufficient
  - iio: light: bh1780: fix PM runtime leak on error path
  - btrfs: fix transaction abort on file creation due to name hash collision
  - btrfs: fix transaction abort on set received ioctl due to item overflow
  - btrfs: fix transaction abort when snapshotting received subvolumes
  - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace()
  - kprobes: Remove unneeded goto
  - ksmbd: unset conn->binding on failed binding request
  - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()
  - parisc: Flush correct cache in cacheflush() syscall
  - net: macb: fix use-after-free access to PTP clock
  - NFC: nxp-nci: allow GPIOs to sleep
  - LoongArch: Give more information if kmem access failed
  - s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute
  - s390/stackleak: Fix __stackleak_poison() inline assembly constraint
  - s390/xor: Fix xor_xc_2() inline assembly constraints
  - mptcp: pm: in-kernel: always set ID as avail when rm endp
  - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
  - drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free
  - drm/exynos: vidi: fix to avoid directly dereferencing user pointer
  - drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl()
  - drm/amdgpu: Add basic validation for RAS header
  - l2tp: do not use sock_hold() in pppol2tp_session_get_sock()
  - drm/amd/display: Add pixel_clock to amd_pp_display_configuration
  - btrfs: do not strictly require dirty metadata threshold for metadata writepages
  - rxrpc: Fix data-race warning and potential load/store tearing
  - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler
  - x86/sev: Harden #VC instruction emulation somewhat
  - dm-verity: disable recursive forward error correction
  - rxrpc: Fix recvmsg() unconditional requeue
  - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
  - btrfs: fix NULL dereference on root when tracing inode eviction
  - arm64: mm: Don't remap pgtables for allocate vs populate
  - arm64: mm: Don't remap pgtables per-cont(pte|pmd) block
  - net/tcp-md5: Fix MAC comparison to be constant-time
  - ksmbd: Compare MACs in constant time
  - smb: client: Compare MACs in constant time
  - xfs: ensure dquot item is deleted from AIL only after log shutdown
  - xfs: fix integer overflow in bmap intent sort comparator
  - crypto: atmel-sha204a - Fix OOM ->tfm_count leak
  - drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output
  - drm/msm: Fix dma_free_attrs() buffer size
  - ksmbd: Don't log keys in SMB3 signing and encryption key generation
  - KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids
  - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling
  - can: gs_usb: gs_can_open(): always configure bitrates before starting device
  - kbuild: Leave objtool binary around with 'make clean'
  - mptcp: pm: avoid sending RM_ADDR over same subflow
  - drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink
  - gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL
  - x86/sev: Allow IBPB-on-Entry feature for SNP guests
  - platform/x86: hp-bioscfg: Support allocations of larger data
  - ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths
  - gve: defer interrupt enabling until NAPI registration
  - drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD
  - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor
  - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort
  - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors
  - iio: imu: inv_icm42600: fix odr switch to the same value
  - iio: gyro: mpu3050-i2c: fix pm_runtime error handling
  - iio: gyro: mpu3050-core: fix pm_runtime error handling
  - iio: buffer: Fix wait_queue not being removed
  - iio: chemical: bme680: Fix measurement wait duration calculation
  - iio: potentiometer: mcp4131: fix double application of wiper shift
  - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()
  - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas()
  - iio: frequency: adf4377: Fix duplicated soft reset mask
  - iio: dac: ds4424: reject -128 RAW value
  - btrfs: abort transaction on failure to update root in the received subvol ioctl
  - smb: client: fix iface port assignment in parse_server_interfaces
  - smb: client: fix in-place encryption corruption in SMB2_write()
  - lib/bootconfig: check bounds before writing in __xbc_open_brace()
  - lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after()
  - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error
  - s390/dasd: Copy detected format information to secondary device
  - s390/dasd: Move quiesce state with pprc swap
  - xfs: fix undersized l_iclog_roundoff values
  - cifs: make default value of retrans as zero
  - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G
  - drm/i915: Fix potential overflow of shmem scatterlist length
  - drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding
  - drm/amd: Set num IP blocks to 0 if discovery fails
  - drm/amdgpu: Fix use-after-free race in VM acquire
  - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ
  - net: ncsi: fix skb leak in error paths
  - ksmbd: fix use-after-free by using call_rcu() for oplock_info
  - smb: server: fix use-after-free in smb2_open()
  - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
  - pmdomain: bcm: bcm2835-power: Fix broken reset status read
  - parisc: Check kernel mapping earlier at bootup
  - parisc: Fix initial page table creation for boot
  - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
  - parisc: Increase initial mapping to 64 MB with KALLSYMS
  - batman-adv: Avoid double-rtnl_lock ELP metric worker
  - tracing: Fix syscall events activation by ensuring refcount hits zero
  - ice: fix retry for AQ command 0x06EE
  - net: mana: Ring doorbell at 4 CQ wraparounds
  - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie
  - ixgbevf: fix link setup issue
  - ice: reintroduce retry mechanism for indirect AQ
  - irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports
  - device property: Allow secondary lookup in fwnode_get_next_child_node()
  - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used
  - drm/bridge: samsung-dsim: Fix memory leak in error path
  - Revert "tcpm: allow looking for role_sw device in the main node"
  - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend
  - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach
  - libceph: admit message frames only in CEPH_CON_S_OPEN state
  - libceph: Use u32 for non-negative values in ceph_monmap_decode()
  - libceph: reject preamble if control segment is empty
  - tipc: fix divide-by-zero in tipc_sk_filter_connect()
  - ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start
  - mmc: core: Avoid bitfield RMW for claim/retune flags
  - mm/kfence: disable KFENCE upon KASAN HW tags enablement
  - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index()
  - mm/tracing: rss_stat: ensure curr is false from kthread context
  - usb: image: mdc800: kill download URB on timeout
  - usb: mdc800: handle signal and read racing
  - usb: renesas_usbhs: fix use-after-free in ISR during device removal
  - usb: roles: get usb role switch from parent only for usb-b-connector
  - usb: cdc-acm: Restore CAP_BRK functionnality to CH343
  - usb: core: don't power off roothub PHYs if phy_set_mode() fails
  - usb: misc: uss720: properly clean up reference in uss720_probe()
  - usb: dwc3: pci: add support for the Intel Nova Lake -H
  - usb: yurex: fix race in probe
  - usb: xhci: Fix memory leak in xhci_disable_slot()
  - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed
  - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk
  - USB: add QUIRK_NO_BOS for video capture several devices
  - KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC
  - ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA
  - net: usb: lan78xx: skip LTM configuration for LAN7850
  - net: usb: lan78xx: fix TX byte statistics for small packets
  - net: usb: lan78xx: fix silent drop of packets with checksum errors
  - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces
  - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
  - cgroup: fix race between task migration and iteration
  - Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on"
  - usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks()
  - octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status
  - octeontx2-af: devlink health: use retained error fmsg API
  - octeontx2-af: devlink: fix NIX RAS reporter recovery condition
  - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
  - ASoC: detect empty DMI strings
  - ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition
  - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address()
  - i40e: fix src IP mask checks and memcpy argument names in cloud filter
  - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
  - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path
  - netfilter: x_tables: guard option walkers against 1-byte tail reads
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()
  - amd-xgbe: prevent CRC errors during RX adaptation with AN disabled
  - amd-xgbe: fix link status handling in xgbe_rx_adaptation
  - mctp: route: hold key->lock in mctp_flow_prepare_output()
  - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value
  - mctp: i2c: fix skb memory leak in receive path
  - serial: caif: hold tty->link reference in ldisc_open and ser_release
  - net: sfp: improve Huawei MA5671a fixup
  - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick
  - net: sfp: improve Nokia GPON sfp fixup
  - net: sfp: re-implement ignoring the hardware TX_FAULT signal
  - net/mlx5: IFC updates for disabled host PF
  - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states
  - drm/msm/dsi: fix pclk rate calculation for bonded dsi
  - drm/msm/dsi: Document DSC related pclk_rate and hdisplay calculations
  - net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets
  - xprtrdma: Decrement re_receiving on the early exit paths
  - smb/server: Fix another refcount leak in smb2_open()
  - powerpc: 83xx: km83xx: Fix keymile vendor prefix
  - remoteproc: mediatek: Unprepare SCP clock during system suspend
  - remoteproc: sysmon: Correct subsys_name_len type in QMI request
  - powerpc/uaccess: Fix inline assembly for clang build on PPC32
  - ALSA: usb-audio: Check max frame size for implicit feedback mode, too
  - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0
  - scsi: ufs: core: Fix shift out of bounds when MAXQ=32
  - scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace()
  - ASoC: cs42l43: Report insert for exotic peripherals
  - ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table
  - scsi: ses: Fix devices attaching to different hosts
  - ACPI: OSI: Add DMI quirk for Acer Aspire One D255
  - wifi: mac80211: set default WMM parameters on all links
  - scsi: mpi3mr: Add NULL checks when resetting request and reply queues
  - ACPI: PM: Save NVS memory on Lenovo G70-35
  - net: tcp: accept old ack during closing
  - tracing: Add NULL pointer check to trigger_data_free()
  - selftest/arm64: Fix sve2p1_sigill() to hwcap test
  - i40e: use xdp.frame_sz as XDP RxQ info frag_size
  - i40e: fix registering XDP RxQ info
  - net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
  - net: stmmac: Fix error handling in VLAN add and delete paths
  - nfc: rawsock: cancel tx_work before socket teardown
  - nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback
  - nfc: nci: free skb on nci_transceive early error paths
  - net: nfc: nci: Fix zero-length proprietary notifications
  - drm/sched: Fix kernel-doc warning for drm_sched_job_done()
  - amd-xgbe: fix sleep while atomic on suspend/resume
  - smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info()
  - smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op()
  - xen/acpi-processor: fix _CST detection using undersized evaluation buffer
  - net/rds: Fix circular locking dependency in rds_tcp_tune
  - indirect_call_wrapper: do not reevaluate function pointer
  - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
  - wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()
  - wifi: wlcore: Fix a locking bug
  - octeon_ep: avoid compiler and IQ/OQ reordering
  - octeon_ep: Relocate counter updates before NAPI
  - net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value
  - kunit: tool: copy caller args in run_kernel to prevent mutation
  - rust: kunit: fix warning when !CONFIG_PRINTK
  - can: mcp251x: fix deadlock in error path of mcp251x_open
  - amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds
  - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs
  - net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table
  - e1000e: clear DPG_EN after reset to avoid autonomous power-gating
  - hwmon: (it87) Check the it87_lock() return value
  - platform/x86: thinkpad_acpi: Fix errors reading battery thresholds
  - pinctrl: equilibrium: fix warning trace on load
  - pinctrl: equilibrium: rename irq_chip function callbacks
  - hwmon: (aht10) Fix initialization commands for AHT20
  - hwmon: (aht10) Add support for dht20
  - ARM: clean up the memset64() C wrapper
  - selftests: mptcp: join: check removing signal+subflow endp
  - selftests: mptcp: more stable simult_flows tests
  - smb: client: fix broken multichannel with krb5+signing
  - smb: client: fix cifs_pick_channel when channels are equally loaded
  - drbd: fix null-pointer dereference on local read error
  - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
  - net/sched: ets: fix divide by zero in the offload path
  - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()
  - IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()
  - wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()
  - wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration
  - wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()
  - wifi: radiotap: reject radiotap with unknown bits
  - ALSA: usb-audio: Use correct version for UAC3 header validation
  - platform/x86: dell-wmi: Add audio/mic mute key codes
  - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data
  - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them
  - can: usb: f81604: handle bulk write errors properly
  - can: usb: f81604: handle short interrupt urb messages properly
  - can: usb: f81604: correctly anchor the urb in the read bulk callback
  - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
  - nfc: pn533: properly drop the usb interface reference on disconnect
  - eventpoll: Fix integer overflow in ep_loop_check_proc()
  - drm/amdgpu: keep vga memory on MacBooks with switchable graphics
  - drm/amd: Drop special case for yellow carp without discovery
  - net: arcnet: com20020-pci: fix support for 2.5Mbit cards
  - ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314
  - ALSA: hda/conexant: Add quirk for HP ZBook Studio G4
  - usb: cdns3: remove redundant if branch
  - clk: tegra: tegra124-emc: fix device leak on set_rate()
  - arm64: dts: rockchip: Fix rk356x PCIe range mappings
  - mfd: omap-usb-host: Fix OF populate on driver rebind
  - mfd: omap-usb-host: Convert to platform remove callback returning void
  - mfd: qcom-pm8xxx: Fix OF populate on driver rebind
  - mfd: qcom-pm8xxx: Convert to platform remove callback returning void
  - ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock()
  - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()
  - mailbox: Allow controller specific mapping using fwnode
  - mailbox: Use guard/scoped_guard for con_mutex
  - mailbox: Use dev_err when there is error
  - mailbox: remove unused header files
  - mailbox: sort headers alphabetically
  - mailbox: don't protect of_parse_phandle_with_args with con_mutex
  - mailbox: Use of_property_match_string() instead of open-coding
  - ext4: get rid of ppath in ext4_ext_create_new_leaf()
  - ext4: get rid of ppath in ext4_find_extent()
  - bus: omap-ocp2scp: fix OF populate on driver rebind
  - bus: omap-ocp2scp: Convert to platform remove callback returning void
  - drm/tegra: dsi: fix device leak on probe
  - media: tegra-video: Fix memory leak in __tegra_channel_try_format()
  - media: tegra-video: Use accessors for pad config 'try_*' fields
  - KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR
  - KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED
  - PCI: Use resource_set_range() that correctly sets ->end
  - resource: Add resource set range and size helpers
  - PCI: Use resource names in PCI log messages
  - PCI: Update BAR # and window messages
  - memory: mtk-smi: fix device leak on larb probe
  - memory: mtk-smi: fix device leaks on common probe
  - memory: mtk-smi: Convert to platform remove callback returning void
  - PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value
  - btrfs: fix compat mask in error messages in btrfs_check_features()
  - btrfs: fix warning in scrub_verify_one_metadata()
  - btrfs: fix objectid value in error message in check_extent_data_ref()
  - btrfs: fix incorrect key offset in error message in check_dev_extent_item()
  - btrfs: add support for inserting raid stripe extents
  - btrfs: read raid stripe tree from disk
  - btrfs: add raid stripe tree definitions
  - btrfs: move btrfs_extref_hash into inode-item.h
  - btrfs: remove btrfs_crc32c wrapper
  - btrfs: move btrfs_crc32c_final into free-space-cache.c
  - ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put()
  - ALSA: pci: hda: use snd_kcontrol_chip()
  - ALSA: usb-audio: Use inclusive terms
  - ALSA: usb-audio: Cap the packet size pre-calculations
  - scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume
  - rseq: Clarify rseq registration rseq_size bound check comment
  - ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices
  - scsi: pm8001: Fix use-after-free in pm8001_queue_command()
  - scsi: lpfc: Properly set WC for DPP mapping
  - irqchip/sifive-plic: Fix frozen interrupt due to affinity setting
  - Revert "x86/kexec: add a sanity check on previous kernel's ima kexec buffer"
  - arm64: Fix sampling the "stable" virtual counter in preemptible section
  - drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros
  - NTB: ntb_transport: Fix too small buffer for debugfs_name
  - net: nfc: nci: Fix parameter validation for packet data
  - arm64: Force the use of CNTVCT_EL0 in __delay()
  - x86/kexec: Copy ACPI root pointer address from config table
  - net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()
  - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle
  - ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR
  - fbcon: Remove struct fbcon_display.inverse
  - fbdev: ffb: fix corrupted video output on Sun FFB1
  - fbdev: of: display_timing: fix refcount leak in of_get_display_timings()
  - fbdev: vt8500lcdfb: fix missing dma_free_coherent()
  - atm: fore200e: fix use-after-free in tasklets during device removal
  - net: intel: fix PCI device ID conflict between i40e and ipw2200
  - io_uring/filetable: clamp alloc_hint to the configured alloc range
  - tracing: Fix to set write permission to per-cpu buffer_size_kb
  - octeontx2-af: CGX: fix bitmap leaks
  - net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()
  - net: ethernet: marvell: skge: remove incorrect conflicting PCI ID
  - LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT
  - LoongArch: Prefer top-down allocation after arch_mem_init()
  - MIPS: rb532: Fix MMIO UART resource registration
  - staging: rtl8723bs: fix null dereference in find_network
  - parisc: kernel: replace kfree() with put_device() in create_tree_node()
  - PCI: Fix pci_slot_trylock() error handling
  - net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path
  - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()
  - tipc: fix RCU dereference race in tipc_aead_users_dec()
  - mtd: rawnand: pl353: Fix software ECC support
  - usb: dwc2: fix resume failure if dr_mode is host
  - scsi: ufs: core: Flush exception handling work when RPM level is zero
  - perf/arm-cmn: Reject unsupported hardware configurations
  - remoteproc: imx_rproc: Fix invalid loaded resource table detection
  - btrfs: continue trimming remaining devices on failure
  - arm64: Fix non-atomic __READ_ONCE() with CONFIG_LTO=y
  - ocfs2: fix reflink preserve cleanup issue
  - rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()
  - mm/highmem: fix __kmap_to_page() build error
  - iio: gyro: itg3200: Fix unchecked return value in read_raw
  - dm mpath: make pg_init_delay_msecs settable
  - bus: fsl-mc: fix an error handling in fsl_mc_device_add()
  - usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN
  - nvmem: Drop OF node reference on nvmem_add_one_cell() failure
  - nfsd: fix return error code for nfsd_map_name_to_[ug]id
  - PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions
  - xfs: fix remote xattr valuelblk check
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks
  - xfs: delete attr leaf freemap entries when empty
  - mfd: core: Add locking around 'mfd_of_node_list'
  - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode
  - media: verisilicon: AV1: Fix tile info buffer size
  - xfs: mark data structures corrupt on EIO and ENODATA
  - selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs
  - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations
  - drm: of: drm_of_panel_bridge_remove(): fix device_node leak
  - media: venus: vdec: restrict EOS addr quirk to IRIS2 only
  - media: venus: vdec: fix error state assignment for zero bytesused
  - arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro
  - dm-unstripe: fix mapping bug when there are multiple targets in a table
  - dm-integrity: fix recalculation in bitmap mode
  - s390/pci: Handle futile config accesses of disabled devices directly
  - clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc()
  - media: i2c: ov01a10: Fix digital gain range
  - clk: clk-apple-nco: Add "apple,t8103-nco" compatible
  - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
  - soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
  - soc: ti: k3-socinfo: Fix regmap leak on probe failure
  - dm-integrity: fix a typo in the code for write/discard race
  - media: i2c: ov5647: use our own mutex for the ctrl lock
  - media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode
  - media: i2c: ov5647: Sensor should report RAW color space
  - media: i2c: ov5647: Correct minimum VBLANK value
  - media: i2c: ov5647: Correct pixel array offset
  - media: i2c: ov5647: Initialize subdev before controls
  - media: ccs: Avoid possible division by zero
  - media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()
  - media: i2c: ov01a10: Fix test-pattern disabling
  - media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls
  - media: i2c: ov01a10: Fix analogue gain range
  - media: i2c: ov01a10: Fix reported pixel-rate value
  - media: i2c: ov01a10: Fix the horizontal flip control
  - media: i2c/tw9906: Fix potential memory leak in tw9906_probe()
  - media: i2c/tw9903: Fix potential memory leak in tw9903_probe()
  - media: cx25821: Add missing unmap in snd_cx25821_hw_params()
  - media: cx23885: Add missing unmap in snd_cx23885_hw_params()
  - media: cx88: Add missing unmap in snd_cx88_hw_params()
  - media: radio-keene: fix memory leak in error path
  - media: verisilicon: AV1: Set IDR flag for intra_only frame type
  - arm64: dts: apple: t8112-j473: Keep the HDMI port powered on
  - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()
  - HID: prodikeys: Check presence of pm->input_ep82
  - HID: magicmouse: Do not crash on missing msc->input
  - HID: hid-pl: handle probe errors
  - arm64: Disable branch profiling for all arm64 code
  - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding
  - ARM: omap2: Fix reference count leaks in omap_control_init()
  - media: verisilicon: AV1: Fix tx mode bit setting
  - media: verisilicon: AV1: Fix enable cdef computation
  - media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()
  - media: mtk-mdp: Fix error handling in probe function
  - media: mediatek: encoder: Fix uninitialized scalar variable issue
  - dm-verity: correctly handle dm_bufio_client_create() failure
  - fpga: dfl: use subsys_initcall to allow built-in drivers to be added
  - ASoC: SOF: ipc4-control: Keep the payload size up to date
  - ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipc_control_data
  - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls
  - ASoC: SOF: ipc4-control: If there is no data do not send bytes update
  - clk: renesas: rzg2l: Select correct div round macro
  - clk: renesas: rzg2l: Fix intin variable size
  - rpmsg: core: fix race in driver_override_show() and use core helper
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice()
  - dpaa2-switch: validate num_ifs to prevent out-of-bounds write
  - net/mlx5: Fix missing devlink lock in SRIOV enable error path
  - net/mlx5: DR, Fix circular locking dependency in dump
  - RDMA/umem: Fix double dma_buf_unpin in failure path
  - RDMA/efa: Fix typo in efa_alloc_mr()
  - net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets
  - RDMA/core: Fix stale RoCE GIDs during netdev events at registration
  - tipc: fix duplicate publication key in tipc_service_insert_publ()
  - Remove WARN_ALL_UNSEEDED_RANDOM kernel config option
  - wifi: cfg80211: wext: fix IGTK key ID off-by-one
  - net: ethernet: xscale: Check for PTP support properly
  - net: ixp4xx_eth: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set()
  - net: usb: lan78xx: scan all MDIO addresses on LAN7801
  - xfrm: always flush state and policy upon NETDEV_UNREGISTER event
  - ipmi: ipmb: initialise event handler read bytes
  - xfrm: skip templates check for packet offload tunnel mode
  - xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
  - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut
  - ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access
  - rtc: zynqmp: correct frequency value
  - drm/amd/display: Remove conditional for shaper 3DLUT power-on
  - btrfs: replace BUG() with error handling in __btrfs_balance()
  - ALSA: usb-audio: Add sanity check for OOB writes at silencing
  - drm/radeon: Add HAINAN clock adjustment
  - drm/amdgpu: Add HAINAN clock adjustment
  - ALSA: usb-audio: Update the number of packets properly at receiving
  - drm/amdgpu: Adjust usleep_range in fence wait
  - drm/amd/display: Avoid updating surface with the same surface under MPO
  - ARM: 9467/1: mm: Don't use %pK through printk
  - include: uapi: netfilter_bridge.h: Cover for musl libc
  - thermal: int340x: Fix sysfs group leak on DLVR registration failure
  - ceph: supply snapshot context in ceph_uninline_data()
  - fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra()
  - fs/ntfs3: drop preallocated clusters for sparse and compressed files
  - fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST
  - fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata
  - fs: ntfs3: check return value of indx_find to avoid infinite loop
  - MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE
  - iio: magnetometer: Remove IRQF_ONESHOT
  - iio: Use IRQF_NO_THREAD
  - Revert "mfd: da9052-spi: Change read-mask to write-mask"
  - phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature
  - phy: mvebu-cp110-utmi: fix dr_mode property read from dts
  - watchdog: imx7ulp_wdt: handle the nowayout option
  - binder: don't use %pK through printk
  - fix it87_wdt early reboot by reporting running timer
  - serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done
  - staging: rtl8723bs: fix memory leak on failure path
  - misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66
  - misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read()
  - dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings
  - dmaengine: sun6i: Choose appropriate burst length under maxburst
  - fpga: of-fpga-region: Fail if any bridge is missing
  - usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs
  - serial: 8250_dw: handle clock enable errors in runtime_resume
  - staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure
  - soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15)
  - m68k: nommu: fix memmove() with differently aligned src and dest for 68000
  - clk: microchip: core: correct return value on *_get_parent()
  - mailbox: sprd: clear delivery flag before handling TX done
  - remoteproc: mediatek: Break lock dependency to `prepare_lock`
  - mailbox: sprd: mask interrupts that are not handled
  - mailbox: imx: Skip the suspend flag for i.MX7ULP
  - mailbox: pcc: Remove spurious IRQF_ONESHOT usage
  - remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized
  - tracing: Fix false sharing in hwlat get_sample()
  - vhost: fix caching attributes of MMIO regions by setting them explicitly
  - scsi: buslogic: Reduce stack usage
  - ata: libata: avoid long timeouts on hot-unplugged SATA DAS
  - RDMA/rtrs-clt: For conn rejection use actual err number
  - myri10ge: avoid uninitialized variable use
  - PCI: Mark Nvidia GB10 to avoid bus reset
  - PCI: Add ACS quirk for Qualcomm Hamoa & Glymur
  - PCI: Enable ACS after configuring IOMMU for OF platforms
  - PCI: Fix pci_slot_lock () device locking
  - net/rds: Clear reconnect pending bit
  - vmw_vsock: bypass false-positive Wnonnull warning with gcc-16
  - net: usb: sr9700: remove code to drive nonexistent multicast filter
  - wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg()
  - wifi: rtw89: pci: restore LDO setting after device resume
  - octeontx2-af: Workaround SQM/PSE stalls by disabling sticky
  - Bluetooth: btusb: Add device ID for Realtek RTL8761BU
  - Bluetooth: btusb: Add new VID/PID for RTL8852CE
  - Bluetooth: hci_conn: use mod_delayed_work for active mode timeout
  - Bluetooth: hci_conn: Set link_policy on incoming ACL connections
  - ipv4: fib: Annotate access to struct fib_alias.fa_state.
  - wifi: iwlegacy: add missing mutex protection in il3945_store_measurement()
  - wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power()
  - gro: change the BUG_ON() in gro_pull_from_frag0()
  - net/rds: No shortcut out of RDS_CONN_ERROR
  - wifi: iwlwifi: mvm: check the validity of noa_len
  - net: usb: r8152: fix transmit queue timeout
  - openrisc: define arch-specific version of nop()
  - netfilter: xt_tcpmss: check remaining length before reading optlen
  - netfilter: nf_conntrack: Add allow_clash to generic protocol handler
  - ext4: mark group extend fast-commit ineligible
  - ext4: mark group add fast-commit ineligible
  - ipv6: exthdrs: annotate data-race over multiple sysctl
  - ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}()
  - wifi: ath12k: fix preferred hardware mode calculation
  - wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1
  - PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port
  - wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode
  - iommu/amd: move wait_on_sem() out of spinlock
  - iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency
  - dm: remove fake timeout to avoid leak request
  - dm: replace -EEXIST with -EBUSY
  - wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H
  - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()
  - wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero
  - jfs: nlink overflow in jfs_rename
  - jfs: Add missing set_freezable() for freezable kthread
  - ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio
  - modpost: Amend ppc64 save/restfpr symnames for -Os build
  - ASoC: es8328: Add error unwind in resume
  - hwmon: (f71882fg) Add F81968 support
  - hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE
  - ASoC: codecs: max98390: Check return value of devm_gpiod_get_optional() in max98390_i2c_probe()
  - spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end
  - ASoC: sunxi: sun50i-dmic: Add missing check for devm_regmap_init_mmio
  - gpio: aspeed-sgpio: Change the macro to support deferred probe
  - ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro
  - HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK
  - HID: multitouch: add eGalaxTouch EXC3188 support
  - media: rkisp1: Fix filter mode register configuration
  - drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release
  - drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts
  - drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback
  - virt: vbox: uapi: Mark inner unions in packed structs as packed
  - hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed
  - drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map()
  - media: v4l2-async: Fix error handling on steps after finding a match
  - media: cx25821: Fix a resource leak in cx25821_dev_setup()
  - media: solo6x10: Check for out of bounds chip_id
  - media: adv7180: fix frame interval in progressive mode
  - media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START
  - spi: spi-mem: Limit octal DTR constraints to octal DTR situations
  - ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug
  - ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask
  - HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards
  - drm/amdgpu: avoid a warning in timedout job handler
  - drm/amdgpu: add support for HDP IP version 6.1.1
  - media: mediatek: vcodec: Don't try to decode 422/444 VP9
  - media: omap3isp: set initial format
  - media: omap3isp: isppreview: always clamp in preview_try_format()
  - media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes
  - drm/v3d: Set DMA segment size to avoid debug warnings
  - spi: stm32: fix Overrun issue at < 8bpw
  - media: dvb-core: dmxdevfilter must always flush bufs
  - spi-geni-qcom: use xfer->bits_per_word for can_dma()
  - spi-geni-qcom: initialize mode related registers to 0
  - drm/display/dp_mst: Add protection against 0 vcpi
  - parisc: Prevent interrupts during reboot
  - arm64: tegra: smaug: Add usb-role-switch support
  - char: tpm: cr50: Remove IRQF_ONESHOT
  - mailbox: bcm-ferxrm-mailbox: Use default primary handler
  - PCI/MSI: Unmap MSI-X region on error
  - clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF
  - clocksource/drivers/sh_tmu: Always leave device running after probe
  - bpf: verifier improvement in 32bit shift sign extension pattern
  - sparc: don't reference obsolete termio struct for TC* constants
  - sparc: Synchronize user stack on fork and clone
  - blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs()
  - xenbus: Use .freeze/.thaw to handle xenbus devices
  - perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD
  - s390/perf: Disable register readout on sampling events
  - cpufreq: dt-platdev: Block the driver from probing on more QC platforms
  - md-cluster: fix NULL pointer dereference in process_metadata_update
  - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP
  - EFI/CPER: don't go past the ARM processor CPER record buffer
  - x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set
  - rnbd-srv: Zero the rsp buffer before using it
  - perf/arm-cmn: Support CMN-600AE
  - s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS
  - tools/power cpupower: Reset errno before strtoull()
  - smb: client: add proper locking around ses->iface_last_update
  - btrfs: handle user interrupt properly in btrfs_trim_fs()
  - minix: Add required sanity checking to minix_check_superblock()
  - i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr()
  - hfsplus: pretend special inodes as regular files
  - audit: add missing syscalls to read class
  - fs/buffer: add alert in try_to_free_buffers() for folios without buffers
  - hfsplus: fix volume corruption issue for generic/498
  - libperf build: Always place libperf includes first
  - libperf: Don't remove -g when EXTRA_CFLAGS are used
  - libsubcmd: Fix null intersection case in exclude_cmds()
  - perf callchain: Fix srcline printing with inlines
  - perf unwind-libdw: Fix invalid reference counts
  - ASoC: dt-bindings: asahi-kasei,ak5558: Fix the supply names
  - ASoC: dt-bindings: asahi-kasei,ak4458: Fix the supply names
  - ASoC: dt-bindings: asahi-kasei,ak4458: set unevaluatedProperties:false
  - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path
  - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths
  - ata: libata-scsi: refactor ata_scsi_translate()
  - ata: pata_ftide010: Fix some DMA timings
  - ext4: use optimized mballoc scanning regardless of inode format
  - ext4: don't cache extent during splitting extent
  - MIPS: Work around LLVM bug when gp is used as global register variable
  - drm/amd/display: Use same max plane scaling limits for all 64 bpp formats
  - ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk
  - x86/hyperv: Fix error pointer dereference
  - btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found
  - efi: Fix reservation of unaccepted memory table
  - s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n
  - spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe()
  - spi: wpcm-fiu: Simplify with dev_err_probe()
  - spi: wpcm-fiu: Fix uninitialized res
  - spi: wpcm-fiu: Use devm_platform_ioremap_resource_byname()
  - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2
  - drm/amdkfd: fix debug watchpoints for logical devices
  - ASoC: codecs: aw88261: Fix erroneous bitmask logic in Awinic init
  - drm/i915/acpi: free _DSM package when no connectors
  - drm/amdgpu: Fix memory leak in amdgpu_ras_init()
  - apparmor: fix invalid deref of rawdata when export_binary is unset
  - apparmor: provide separate audit messages for file and policy checks
  - apparmor: use passed in gfp flags in aa_alloc_null()
  - apparmor: fix rlimit for posix cpu timers
  - apparmor: return -ENOMEM in unpack_perms_table upon alloc failure
  - apparmor: fix NULL sock in aa_sock_file_perm
  - net/mlx5: Fix multiport device check over light SFs
  - bonding: alb: fix UAF in rlb_arp_recv during bond up/down
  - octeontx2-af: Fix default entries mcam entry action
  - cache: add __cacheline_group_{begin, end}_aligned() (+ couple more)
  - cache: enforce cache groups
  - ping: annotate data-races in ping_lookup()
  - bpftool: Fix truncated netlink dumps
  - ipv6: fix a race in ip6_sock_set_v6only()
  - net: remove WARN_ON_ONCE when accessing forward path array
  - netfilter: nf_conntrack_h323: don't pass uninitialised l3num value
  - selftests: forwarding: vxlan_bridge_1d_ipv6: fix test failure with br_netfilter enabled
  - selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled
  - net: bridge: mcast: always update mdb_n_entries for vlan contexts
  - net/rds: rds_sendmsg should not discard payload_len
  - net: usb: catc: enable basic endpoint checking
  - net: sparx5/lan969x: fix PTP clock max_adj value
  - net: mscc: ocelot: add missing lock protection in ocelot_port_xmit_inj()
  - net: mscc: ocelot: split xmit into FDMA and register injection paths
  - net: mscc: ocelot: extract ocelot_xmit_timestamp() helper
  - net: sparx5/lan969x: fix DWRR cost max to match hardware register width
  - selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2
  - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO
  - selftests/memfd: use IPC semaphore instead of SIGSTOP/SIGCONT
  - selftests/memfd: delete unused declarations
  - kbuild: Add objtool to top-level clean target
  - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check
  - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs
  - fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
  - fs/ntfs3: prevent infinite loops caused by the next valid being the same
  - io_uring/cancel: de-unionize file and user_data in struct io_cancel_data
  - dmaengine: fsl-edma: don't explicitly disable clocks in .remove()
  - dmaengine: fsl-edma-main: Convert to platform remove callback returning void
  - backlight: qcom-wled: Change PM8950 WLED configurations
  - backlight: qcom-wled: Support ovp values for PMI8994
  - leds: qcom-lpg: Check the return value of regmap_bulk_write()
  - pinctrl: single: fix refcount leak in pcs_add_gpio_func()
  - pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2_data_groups definition
  - iio: sca3000: Fix a resource leak in sca3000_probe()
  - ovl: Fix uninit-value in ovl_fill_real
  - pinctrl: equilibrium: Fix device node reference leak in pinbank_init()
  - usb: bdc: fix sleep during atomic
  - drivers: iio: mpu3050: use dev_err_probe for regulator request
  - mfd: simple-mfd-i2c: Add Delta TN48M CPLD support
  - mfd: simple-mfd-i2c: Keep compatible strings in alphabetical order
  - mfd: simple-mfd-i2c: Add SpacemiT P1 support
  - mfd: simple-mfd-i2c: Add compatible strings for Layerscape QIXIS FPGA
  - mfd: simple-mfd-i2c: Add MAX77705 support
  - mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure
  - Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms"
  - coresight: etm3x: Fix cpulocked warning on cpuhp
  - watchdog: starfive-wdt: Fix PM reference leak in probe error path
  - iio: pressure: mprls0025pa: fix scan_type struct
  - mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms
  - serial: SH_SCI: improve "DMA support" prompt
  - serial: imx: change SERIAL_IMX_CONSOLE to bool
  - staging: greybus: lights: avoid NULL deref
  - dma: dma-axi-dmac: fix SW cyclic transfers
  - dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX
  - clk: mediatek: Fix error handling in runtime PM setup
  - clk: qcom: gfx3d: add parent to parent request map
  - clk: qcom: dispcc-sdm845: Enable parents for pixel clocks
  - clk: Move clk_{save,restore}_context() to COMMON_CLK section
  - clk: qcom: gcc-ipq5018: flag sleep clock as critical
  - clk: qcom: gcc-msm8917: Remove ALWAYS_ON flag from cpp_gdsc
  - clk: qcom: gcc-msm8953: Remove ALWAYS_ON flag from cpp_gdsc
  - clk: qcom: gcc-qdu1000: Update the SDCC RCGs to use shared_floor_ops
  - clk: qcom: gcc-sdx75: Update the SDCC RCGs to use shared_floor_ops
  - clk: qcom: gcc-sm8450: Update the SDCC RCGs to use shared_floor_ops
  - clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs
  - clk: qcom: rcg2: compute 2d using duty fraction directly
  - clk: qcom: gcc-sm8550: Use floor ops for SDCC RCGs
  - fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe()
  - fbdev: of_display_timing: Fix device node reference leak in of_get_display_timings()
  - tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros
  - tracing: Properly process error handling in event_hist_trigger_parse()
  - fs/nfs: Fix readdir slow-start regression
  - nvdimm: virtio_pmem: serialize flush requests
  - scsi: csiostor: Fix dereference of null pointer rn
  - scsi: smartpqi: Fix memory leak in pqi_report_phys_luns()
  - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN
  - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc
  - power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer
  - mtd: spinand: Fix kernel doc
  - mtd: parsers: ofpart: fix OF node refcount leak in parse_fixed_partitions()
  - cxl: Fix premature commit_end increment on decoder commit failure
  - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing
  - svcrdma: Reduce the number of rdma_rw contexts per-QP
  - svcrdma: Increase the per-transport rw_ctx count
  - svcrdma: Clean up comment in svc_rdma_accept()
  - svcrdma: Remove queue-shortening warnings
  - RDMA/core: Fix a couple of obvious typos in comments
  - RDMA/rxe: Fix race condition in QP timer handlers
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send
  - mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse()
  - crypto: ccp - Add an S4 restore flow
  - mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper
  - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus()
  - RDMA/rxe: Fix double free in rxe_srq_from_init
  - RDMA/rtrs-srv: fix SG mapping
  - power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed()
  - power: supply: bq27xxx: fix wrong errno when bus ops are unsupported
  - power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write
  - power: supply: sbs-battery: Fix use-after-free in power_supply_changed()
  - power: supply: rt9455: Fix use-after-free in power_supply_changed()
  - power: supply: goldfish: Fix use-after-free in power_supply_changed()
  - power: supply: cpcap-battery: Fix use-after-free in power_supply_changed()
  - power: supply: bq25980: Fix use-after-free in power_supply_changed()
  - power: supply: bq256xx: Fix use-after-free in power_supply_changed()
  - power: supply: act8945a: Fix use-after-free in power_supply_changed()
  - power: supply: ab8500: Fix use-after-free in power_supply_changed()
  - IB/cache: update gid cache on client reregister event
  - RDMA/rtrs: server: remove dead code
  - octeontx2-pf: Unregister devlink on probe failure
  - ionic: Rate limit unknown xcvr type messages
  - serial: caif: fix use-after-free in caif_serial ldisc_close()
  - net: Add skb_dstref_steal and skb_dstref_restore
  - net: sunhme: Fix sbus regression
  - net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
  - smb: client: correct value for smbd_max_fragmented_recv_size
  - PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404]
  - netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets
  - netfilter: nft_counter: fix reset of counters on 32bit archs
  - netfilter: nft_set_hash: fix get operation on big endian
  - nfc: hci: shdlc: Stop timers and work before freeing context
  - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP
  - bonding: only set speed/duplex to unknown, if getting speed failed
  - octeontx2-af: Fix PF driver crash with kexec kernel booting
  - mptcp: fix receive space timestamp initialization
  - of: unittest: fix possible null-pointer dereferences in of_unittest_property_copy()
  - ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()
  - ipc: don't audit capability check in ipc_permissions()
  - PCI/ACPI: Restrict program_hpx_type2() to AER bits
  - PCI: Add defines for bridge window indexing
  - PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros
  - PCI: Log bridge info when first enumerating bridge
  - PCI: Log bridge windows conditionally
  - PCI: Supply bridge device, not secondary bus, to read window details
  - PCI: Move pci_read_bridge_windows() below individual window accessors
  - PCI: Initialize RCB from pci_configure_device()
  - wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump()
  - tcp: tcp_tx_timestamp() must look at the rtx queue
  - nfsd: never defer requests during idmap lookup
  - iommu/vt-d: Flush cache for PASID table before using it
  - PCI: Mark 3ware-9650SA Root Port Extended Tags as broken
  - kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup()
  - module: add helper function for reading module_buildid()
  - netfilter: nft_compat: add more restrictions on netlink attributes
  - netfilter: nf_conncount: increase the connection clean up limit to 64
  - netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH
  - netfilter: nf_tables: reset table validation state on abort
  - wifi: cfg80211: stop NAN and P2P in cfg80211_leave
  - mctp i2c: initialise event handler read bytes
  - net: mctp-i2c: fix duplicate reception of old data
  - PCI/portdrv: Fix potential resource leak
  - PCI: Do not attempt to set ExtTag for VFs
  - Documentation: tracing: Add PCI tracepoint documentation
  - Documentation: trace: Refactor toctree
  - docs: fix WARNING document not included in any toctree
  - Documentation: tracing: Add ring-buffer mapping
  - PCI/P2PDMA: Release per-CPU pgmap ref when vm_insert_page() fails
  - PCI/PM: Avoid redundant delays on D3hot->D3cold
  - Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors
  - PCI: mediatek: Fix IRQ domain leak when MSI allocation fails
  - spi: tools: Add include folder to .gitignore
  - platform/chrome: cros_ec_lightbar: Fix response size initialization
  - media: uvcvideo: Fix allocation for small frame sizes
  - platform/chrome: cros_typec_switch: Don't touch struct fwnode_handle::dev
  - drm/msm/a2xx: fix pixel shader start on A225
  - media: ccs: Accommodate C-PHY into the calculation
  - drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x
  - HID: playstation: Add missing check for input_ff_create_memless
  - regulator: core: move supply check earlier in set_machine_constraints()
  - drm/msm/disp/dpu: add merge3d support for sc7280
  - drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init
  - smack: /smack/doi: accept previously used values
  - smack: /smack/doi must be > 0
  - workqueue: Process rescuer work items one-by-one using a cursor
  - workqueue: Only assign rescuer work when really needed
  - workqueue: Factor out assign_rescuer_work()
  - arm64: dts: qcom: sm6115: Add CX_MEM/DBGC GPU regions
  - arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1
  - arm64: dts: qcom: sdm845-db845c: drop CS from SPIO0
  - arm64: dts: amlogic: g12: assign the MMC A signal clock
  - arm64: dts: amlogic: g12: assign the MMC B and C signal clocks
  - arm64: dts: amlogic: gx: assign the MMC signal clocks
  - arm64: dts: amlogic: axg: assign the MMC signal clocks
  - arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node
  - ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells
  - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling
  - soc: mediatek: svs: Fix memory leak in svs_enable_debug_write()
  - soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe
  - powerpc/uaccess: Move barrier_nospec() out of allow_read_{from/write}_user()
  - ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property
  - arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on
  - arm64: dts: qcom: sdm845-oneplus: Don't mark ts supply boot-on
  - arm64: dts: qcom: sdm630: fix gpu_speed_bin size
  - clk: qcom: Return correct error code in qcom_cc_probe_by_index()
  - arm64: dts: tqma8mpql-mba8mpxl: Fix HDMI CEC pad control settings
  - EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size()
  - EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size()
  - soc: qcom: smem: handle ENOMEM error during probe
  - mfd: wm8350-core: Use IRQF_ONESHOT
  - EDAC/altera: Remove IRQF_ONESHOT
  - scsi: efct: Use IRQF_ONESHOT and default primary handler
  - hrtimer: Fix trace oddity
  - crypto: octeontx - fix dma_free_coherent() size
  - crypto: cavium - fix dma_free_coherent() size
  - ARM: VDSO: Patch out __vdso_clock_getres() if unavailable
  - libbpf: Fix OOB read in btf_dump_get_bitfield_value
  - selftests/bpf: veristat: fix printing order in output_stats()
  - crypto: qat - fix warning on adf_pfvf_pf_proto.c
  - s390/cio: Fix device lifecycle handling in css_alloc_subchannel()
  - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races
  - perf: arm_spe: Properly set hw.state on failures
  - PM: wakeup: Handle empty list in wakeup_sources_walk_start()
  - Partial revert "x86/xen: fix balloon target initialization for PVH dom0"
  - x86/xen: make some functions static
  - ublk: Validate SQE128 flag before accessing the cmd
  - iomap: fix submission side handling of completion side errors
  - md/raid10: fix any_working flag handling in raid10_sync_request
  - cpuidle: governors: menu: Always check timers with tick stopped
  - cpuidle: menu: Cleanup after loadavg removal
  - io_uring/sync: validate passed in offset
  - xen/virtio: Don't use grant-dma-ops when running as Dom0
  - btrfs: fix block_group_tree dirty_list corruption
  - btrfs: qgroup: return correct error when deleting qgroup relation item
  - tpm: st33zp24: Fix missing cleanup on get_burstcount() error
  - tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure
  - i3c: dw: Initialize spinlock to avoid upsetting lockdep
  - gfs2: Retries missing in gfs2_{rename,exchange}
  - i3c: master: Update hot-join flag only on success
  - fs: add <linux/init_task.h> for 'init_fs'
  - audit: move the compat_xxx_class[] extern declarations to audit_arch.h
  - rcu: Fix rcu_read_unlock() deadloop due to softirq
  - rcu: Remove local_irq_save/restore() in rcu_preempt_deferred_qs_handler()
  - rcu: Refactor expedited handling check in rcu_read_unlock_special()
  - rcu/exp: Move expedited kthread worker creation functions above rcutree_prepare_cpu()
  - rcu: s/boost_kthread_mutex/kthread_mutex
  - hfsplus: return error when node already exists in hfs_bnode_create
  - auxdisplay: arm-charlcd: fix release_mem_region() size
  - RDMA/siw: Fix potential NULL pointer dereference in header processing
  - !23322 iommu/ummu: Fix potential soft lockup in ummu_core_alloc_separate_tdev
  - bpf: Avoid soft lockup in bpf_uprobe_unregister
  - !23394 Fix CVE-2026-45911
  - !23321 iommu/ummu: Fix reading command value in check_pa_continuity_nop_exec
  - !23388 Fix CVE-2026-45982
  - usb: cdns3: fix role switching during resume
  - urma: add v2p function in kernel for dfx such as urma_admin
  - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch()
  - !23392 Fix CVE-2026-46171
  - !23176 Fix CVE-2026-46082
  - !23277  KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1
  - !23376 ub: ub_fwctl: lift the restriction on querying the historical status of ports.
  - !22637 v3  io_uring: validate user-controlled cq.head in io_cqe_cache_refill()
  - !22644 Fix CVE-2026-43366
  - !23349  drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()
  - !22645 Fix CVE-2026-43288
  - !23348  drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
  - !22714 Fix CVE-2026-43163
  - !22610 Fix CVE-2026-43061
  - !23361  CVE-2026-46181
  - !23177 ub:hisi-ubus: modify return value of hi_feature_get() in abnormal branch
  - !23317  add min_slice and sched_runtime
  - !23373 drivers/ub/sentry: enhance sentry module error handling and logging observability
  - !23309 ub: ubase: Correct the statistics on ELR reset failures
  - urma: increase topo max node limit to 1024
  - ub: ub_fwctl: the function of querying the historical status of ports has been unrestricted.
  - drivers/ub/sentry: enhance sentry module error handling and logging observability
  - riscv: kvm: fix vector context allocation leak
  - !23094 urma: fix jetty_grp count boundary check and pass opt_mask to urma_check_opt_valid
  - !23288 Fix CVE-2026-46093
  - !23294 Fix CVE-2026-43406
  - ub:hisi-ubus: modify return value of hi_feature_get() in abnormal branch
  - urma: fix jetty_grp count boundary check and pass opt_mask to check_jetty_check_dev_cap
  - APEI/GHES: ARM processor Error: don't go past allocated memory
  - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
  - refcount: provide ops for cases when object's memory can be reused
  - !23316  sched/cputime: Fix time overflow in cputime_adjust()
  - !23346 ub: udma: change default value of set dev name
  - !23341 soc: hisilicon: kunpeng_hccs: Remove unused input parameter
  - !23330 Fix CVE-2026-46165
  - !23326 Fix CVE-2026-43466
  - !23328 Fix CVE-2026-46033
  - !23325 Fix CVE-2026-43468
  - mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node
  - iommu/ummu: Fix reading command value in check_pa_continuity_nop_exec
  - !23125 Fix CVE-2026-46051
  - drm/amdgpu: Fix memory leak in amdgpu_acpi_enumerate_xcc()
  - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check
  - !23188  CVE-2026-46044
  - ub: udma: change default value of set dev name
  - soc: hisilicon: kunpeng_hccs: Remove unused input parameter
  - soc: hisilicon: kunpeng_hccs: Fix discard 'const' qualifier
  - !23028 bugfixs for sched_ext
  - !22886  net: yt6801: fix link info for yt6801
  - !23290  iommu/amd: serialize sequence allocation under concurrent TLB invalidations
  - openvswitch: vport: fix self-deadlock on release of tunnel ports
  - crypto: authencesn - reject short ahash digests during instance creation
  - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
  - net/mlx5: Fix deadlock between devlink lock and esw->wq
  - iommu/ummu: Fix potential soft lockup in ummu_core_alloc_separate_tdev
  - iommu/ummu: Fix incorrect xarray index in map_pages error path
  - sched/eevdf: Force propagating min_slice of cfs_rq when {en,de}queue tasks
  - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash
  - sched: Fix kabi breakage in struct sched_entity
  - sched/eevdf: Propagate min_slice up the cgroup hierarchy
  - sched/fair: Re-organize dequeue_task_fair()
  - sched/eevdf: Use sched_attr::sched_runtime to set request/slice suggestion
  - sched/cputime: Fix time overflow in cputime_adjust()
  - libceph: prevent potential out-of-bounds reads in process_message_header()
  - iommu/amd: serialize sequence allocation under concurrent TLB invalidations
  - mm/vmalloc: take vmap_purge_lock in shrinker
  - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1
  - obmm: validate VMA identity via vm_ops before accessing vm_file
  - obmm: add PMD huge entry support for ptrace/GDB vma access
  - obmm: fix VMA access for ptrace/GDB on export regions
  - obmm: fix page table walk for ownership permission updates
  - obmm: reject MAP_PRIVATE
  - md/raid5: fix soft lockup in retry_aligned_read()
  - ipmi:ssif: NULL thread on error
  - ipmi:ssif: Clean up kthread on errors
  - ﻿ub: ubase: Correct the statistics on ELR reset failures
  - ﻿ub: ubase&unic: Improve driver code readability
  - ﻿ub: ubase: Discard ctrlq request with non-zero ret value
  - ﻿ub: ubase: Add abort handling for non-timeout ELR failures
  - ﻿net: unic: Log rectification for the wildfire project
  - ﻿ub: ubase/unic/cdma: Clear adev_status when probe succeeds
  - ﻿net: unic: Filter out IPv6 link-local address in bond IP notification
  - KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0
  - sched/ext: Avoid null ptr traversal when ->put_prev_task() is called with NULL next
  - sched_ext: fix flag check for deferred callbacks
  - sched_ext: defer queue_balance_callback() until after ops.dispatch
  - sched_ext: Keep bypass on between enable failure and scx_disable_workfn()
  - urma: fix RNR ERR under CTP mode in IPoURMA
  - net: yt6801: fix link info for yt6801
  - md/bitmap: fix GPF in write_page caused by resize race
  - ext4: move ext4_percpu_param_init() before ext4_mb_init()
  - io_uring/kbuf: check if target buffer list is still legacy on recycle
  - io_uring: validate user-controlled cq.head in io_cqe_cache_refill()
  - serial: 8250: Fix TX deadlock when using DMA


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-ksmtp-23.08.4-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-libgravatar-23.08.4-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-libkleo-23.08.4-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 23.08.4-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-messagelib-23.08.4-3.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-modemmanager-qt-5.113.0-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-plasma-5.113.0-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-prison-5.113.0-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-purpose-5.113.0-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-sonnet-5.113.0-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose


author: ChenYanpan <chenyanpan@xfusion.com> - 5.113.0-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/kf5-syntax-highlighting-5.113.0-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: yangfeng <yangfeng@kylinsec.com.cn> - 2.6.0-2
changelog:
  - KYOS-B: Fix touch screen taskbar button click judged as drag.(#23600)
  - KYOS-F: Other workspace Windows are not displayed by default.
  - KYOS-B: Fixed an issue where recent documents were not sorted.(#24803)
  - KYOS-B: Fixed an issue where the x11 tray icon did not match the size of the icon container, causing the tray icon to display abnormally.(#22117)
  - KYOS-B: Fix Pinyin search failed when /etc/locale.conf is not LANG="zh_CN.UTF-8".(#21369)
  - KYOS-F: Replace "mate-panel --run-dialog" with "kiran-panel --run-dialog".(#24810)


author: luoqing <luoqing@kylinsec.com.cn> - 2.6.0-3
changelog:
  - KYOS-B: Fixed the issue where the taskbar close window used the wrong timestamp.(#26368)
  - KYOS-B: Fix win key popup Start menu does not get focus, can not directly keyboard operation (#21246)
  - KYOS-B: :when resize icon window, it is necessary to consider the impact of the scale factor.The correct resize height is the height of the container multiplied by the scale factor of the container (#30889)


author: yangfeng <yangfeng@kylinsec.com.cn> - 2.6.0-4
changelog:
  - KYOS-B: Fixed an issue where taskbar page-turning ICONS cover each other(#19588)
  - KYOS-B: Fixed the taskbar page-turning ICONS hiding each other when zoom rate was 200
  - KYOS-F: The plugin button loads the icon from the system theme
  - KYOS-B: Fixed xnest connection crash
  - KYOS-B: Fixed an issue where the taskbar does not drag smoothly
  - KYOS-B: Fixed start Menu without icon application drag and drop causes the bottom panel to crash(#34719)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-8
changelog:
  - KYOS-B: Fix window thumbnails not being fetched by window manager takeover(#56152)
  - KYOS-B: fix some memory leak(#54376)
  - KYOS-B: Fix some related issues in recent documents(#55119)
  - KYOS-F: adding apps to the desktop, copy them to a temporary file and change the permissions.(#37790)
  - KYOS-F: Added configuration items: Fixed application to the taskbar(#37152)
  - KYOS-B: change 'Recently files' to 'Recent files'(#38303)
  - kYOS-B: fix interference caused by tooltip and popup type windows
  - KYOS-F: taskbar add "simply window previewer" mode(only show window title)(#45321) 
  - KYOS-B: Fixed an issue where taskbar page-turning ICONS cover each other(#19588)
  - KYOS-B: Fixed the taskbar page-turning ICONS hiding each other when zoom rate was 200
  - KYOS-F: The plugin button loads the icon from the system theme
  - KYOS-B: Fixed xnest connection crash
  - KYOS-B: Fixed an issue where the taskbar does not drag smoothly
  - KYOS-B: Fixed start Menu without icon application drag and drop causes the bottom panel to crash(#34719)
  - KYOS-B: Fixed the issue where the taskbar close window used the wrong timestamp.(#26368)
  - KYOS-B: Fix win key popup Start menu does not get focus, can not directly keyboard operation (#21246)
  - KYOS-B: :when resize icon window, it is necessary to consider the impact of the scale factor.The correct resize height is the height of the container multiplied by the scale factor of the container (#30889)


author: luoqing <luoqing@kylinsec.com.cn> - 2.5.2-3
changelog:
  - KYOS-B: Fixed a crash caused by repeatedly calling disConnectDev in resetUkey and destructor to release the same device handle
  - KYOS-R: Modify the code according to the https://gitee.com/openeuler/kiran-authentication-devices/pulls/17 review opinions
  - KYOS-B: when the iris face integrated device is removed, the memory cannot be released and the process is blocked.When the face iris device object is removed, restart the service to release resources (#25243)
  - KYOS-B: When the driver is enabled, the device is scanned and the corresponding device object is created.When the driver is disabled,the corresponding device object is released. (#25387)
  - KYOS-B: fix file install path error


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.2-5
changelog:
  - KYOS-B: delete blank cmake_target_link_directories
  - KYOS-B: remove rpath (#37243)
  - KYOS-F: suitable for zhi ang fingerprint device (#24532)


author: longcheng <longcheng@kylinos.com.cn> - 0.0.2-2.kb3
changelog:
  - KYOS-B: remove BuildRequires: fingerprint-sdk-devel in openeuler 
  - KYOS-F：Add the enable zlog ex macro for zlog.
  - KYOS-B: Add BuildRequires: gcc-c++ in openeuler


author: meizhigang <meizhigang@kylinsec.com.cn> - 2.6.1-10
changelog:
  - KYOS-B: Change the light theme name to Kiran-white (#24747)
  - KYOS-B: Fix coredump while log print in power (#31141)
  - KYOS-B: ref new CI entry point
  - KYOS-B: Fix audio stream volume retain while set mute (#33694)


author: meizhigang <meizhigang@kylinsec.com.cn> - 2.6.1-11
changelog:
  - KYOS-B: Add battery charging and discharging time (#28618)
  - KYOS-B: Fix sys backlight set only in notebook with battery (#31917)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.1-24
changelog:
  - KYOS-F: Decrease the priority of override file configurations(#52881)
  - KYOS-F: Marking the configuration as not to be replaced
  - KYOS-B: Enrichment of error messages in pw_history module when changing passwords(#52096)
  - KYOS-B: Fix crash caused by the previous commit due to the existence of a schema but the absence of a color-schema (#35120)
  - KYOS-B: Fix the issue where switching between light and dark themes does not work in Gnome 41 and later versions.(#35120)
  - KYSO-B: Fix the ntp service load order logic error
  - KYSO-B: Fix std::regex can not run in gcc version < 4.9(#48386)
  - KYSO-F: Use glibmm's regex to replace glib's regex
  - KYSO-B: Fix failure to get disk information in virtual machine(#46645)
  - KYOS-B: Fixed the issue where Unglab was not executed in a timely manner, causing subsequent Xclient connections to XServer to fail
  - KYOS-B: fix the graphical and network hardware info no display problem.(#37289)
  - KYOS-B: Remove the duplicate graphical and network hardware info.
  - KYOS-B: The shutdown shortcut cannot be found.(#44337)
  - KYOS-F: add shutdown keybinding
  - KYOS-B: perform adaptive settings when connection status or monitor uid is changed.(#37289)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.1-25
changelog:
  - KYOS-B: fix the passwd command compatible problem for KY3.3-9-Server(#46550)
  - KYOS-F: Add icon and cursor theme changing when enable auto switch theme.(#73665)
  - KYOS-F: Modify gtk and icon theme to light theme defaultly.


author: luoqing <luoqing@kylinsec.com.cn> - 2.6.0-6.kb1
changelog:
  - KYOS-B: Fix the issue of setting default selection sidebar errors (#24761)
  - KYOS-B: Fix the issue of ineffective font changes (#25084)
  - KYOS-B: change the light and dark theme name (#24747)
  - KYOS-B: add custom app icon,Error prompt for modifying input shortcut keys (#25199,#25198)
  - KYOS-B: profile mode using kiran-cc-daemon power interface (#25242)
  - KYOS-B: Fix the space before the parameter causing a jump event when the launcher jumps (#24794)
  - KYOS-B: fixed volume tray icon level display not meeting requirements (#25235)


author: luoqing <luoqing@kylinsec.com.cn> - 2.6.1-1.kb1
changelog:
  - KYOS-B: The network connection icon is displayed only in the fully Connected state.The connection icon is not displayed in the ConnectedLinkLocal state (#27750)
  - KYOS-B: fixed an issue where tray page expansion size changed incorrectly when multiple network cards were used (#25239)
  - KYOS-B: fixed incorrect connectivity results when frequent network connectivity checks are triggered (#29475)
  - KYOS-F: Filter conditions are added to the tray status display,and activation icons are displayed only when there are supported activation devices;The tray icon update is triggered when the device status changes to active or disconnected (#29441)
  - KYOS-B: Fix translation of shortcut key types Accessibility
  - KYOS-B: change ci config
  - KYOS-F: New feature to restore font default settings (#20203)


author: luoqing <luoqing@kylinsec.com.cn> - 2.6.1-2.kb1
changelog:
  - KYOS-B: when the tray is initialized, determine whether there is asound card,if not, the volume icon is disabled (#22865)
  - KYOS-B: fix(keybinding):don't convert normal key if use shift modifier in keybinding (#30978)


author: meizhigang <meizhigang@kylinsec.com.cn> - 2.6.1-3
changelog:
  - KYOS-B: Compatible for versions below 5.15
  - KYOS-B: Fix has really battery while it is present (#31917)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.1-7
changelog:
  - KYOS-B: Fix Crash caused by mismatch between registered search terms and actual content(#35252)
  - KYOS-B: Adjusting the display style of manually registered search keywords and subfunctional keywords(#35340,#35278)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.4-2
changelog:
  - KYOS-B: Fix crash when ipv6 address can't be retrieved(#75993)
  - KYOS-F: Supports dimming the monitor during idle time(#76040)
  - KYOS-F: Supports Meta and Window theme settings(#73665)
  - KYOS-F: Support for sound testing(#73668)
  - KYOS-B: compatible with different versions of open-source cursor to prevent program crashes(#IBV1XG)
  - KYOS-F: Split Screensaver and locking concepts, add support for embedded xscreensaver(#73664)
  - KYOS-F:Fix the problem of web details supporting large layouts.(#72894)
  - KYOS-F:improve code in group plugin.(#73623)
  - KYOS-F: Fix the problem of getting the return value of a device via NetworkManager DBus interface under stress test(#70121)
  - KYOS-B: Fix password input limit of 20（#57392）
  - KYOS-B: power management front-end server version determination to runtime configuration(#52885)
  - KYOS-B: Fixes an issue with determining connection and NIC Mac configuration matches when a connection configuration change is active(#51089)
  - KYOS-B: Fix the message that the tray service is not registered when the tray is registered.(#50967)
  - KYOS-B: shared Networks Add Configuration Invisible (#51089)
  - KYOS-B: shared Networks Add Configuration Invisible(#51089)
  - KYOS-B: Fix the message that the tray service is not registered when the tray is registered.(#50967)
  - KYOS-F: hide privacy_policy(#35818)
  - KYOS-F: adjusting the default configuration of the PG version to the server configuration(#51253)
  - KYOS-B: Fix Control Center NIC duplication when restarting NetworkManager(#50967)
  - KYOS-B: Add DISPLAY as one of the conditions for determining a user process singleton.(#48260)
  - KYOS-B: remove NetworkManager-l2tp Requires
  - KYOS-F: network details page supports multiple IP masks(#46740)
  - KYOS-B: Fix DBusServiceWatcher lifecycle not bound to slot object(#46755)
  - KYOS-B: Fix that the maximum height of KiranCollapse will not be adjusted under the list of available connections in the network plugin(#47197)
  - KYOS-F: network plugin support wired carrier check(#36646)
  - KYOS-F: netowrk plugin support single configuration multiple IP addresses(#46740)
  - KYOS-B:  add Obsoletes kiran-timedate-manager  
  - KYOS-F: fix build in 339
  - KYOS-B: Adapt to Qt5.9.7 NativeScanCode to QtKey
  - KYOS-F: new network card Carrier status check as tray connection condition judgment(#36646)
  - KYOS-F: Reserved idle lock screen related configurations for server versions(#31787)
  - KYOS-B: fix gateway display not configured tray icon show disconnection(#36646)
  - KYOS-B: Fix the issue where the initial letters of certain categories are not capitalized.(#36266)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-9
changelog:
  - KYOS-B: Update kiran-mimeapps.list to adapt to the new default opening method for blank files (#35528)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-22
changelog:
  - KYOS-F: Setting the default white theme for the desktop version
  - KYOS-F: Override configuration, split screen saver as well as lock screen(#73664)
  - KYOS-B: adjusting gvfs dependency judgments for v6 releases
  - KYOS-B: Increase Server Version Disable DPMS Configuration Priority(#53822)
  - Change configuration only at installation time
  - Fix the issue that executing the post script twice causes the touchpad backend plugin to be disabled
  - Specify configuration file %config(noreplace)
  - KYOS-B: Fix post stage change unlock box power configuration error report
  - KYOS-F: Adjust the default configuration of window screenshot shortcuts to kiran-flameshot
  - KYOS-B: Decrease override file priority(#52881)
  - KYOS-F: adjusting the default configuration of the PG version to the server configuration(#51253)
  - KYOS-F: server versions enable locking on idle by default
  - KYOS-B: fix install error in KY3.3-9
  - KYOS-F: Reserved idle lock screen related configurations for server versions(#31787)
  - KYOS-F: remove kiran-authentication-devices-sdk dependency (#35156)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0.23
changelog:
  - KYOS-F: Add 51_kiran-desktop.gschema.override to distinguish desktop and server.
  - KYOS-B: Add package dependencies xscreensaver for V6(#73664)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.6.0-24
changelog:
  - KYOS-B: Enable split screen saver and lock screen only for V6 version
  - KYOS-B: remove dep initial-setup-gui


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.6.0-2
changelog:
  - KYOS-B: add icon of gnome software with correct icon name in Kiran.(#28021)
  - KYOS-B: update icons to smaller size to fix the slowly problem when open caja.(#33978)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.4.0-4
changelog:
  - fix zlog use program log rotation lock rules to avoid log file is locked by other process(b: 113752)
  - change cmake minimum version to range


author: yuanxing <yuanxing@kylinsec.com.cn> - 2.6.1-1.kb2
changelog:
  - KYOS-F: Fix error caused by missing overload implementation on lower version C++standard library.
  - KYOS-F: Adapt to lower version STDC++.
  - KYOS-F: Fix the sonarqube bugs.(#76290)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-8.kb1
changelog:
  - KYOS-B: fix the issue of manual scaling not taking effect(#25011)
  - KYOS-B: fix issues caused by automatic login timeout(#25015)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-11
changelog:
  - KYOS-B: Fix ci issues
  - KYOS-B: Add virtual keyboard detection(#29712)
  - KYOS-B: incorrect scaling cursor size(#29286)
  - KYOS-B: fix untranslated text from polkit-agent(#29452)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-13
changelog:
  - KYOS-B: Adjusting the Greeter Control Center plugin to use a new version of the interface for keyword search(#35280)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.2-4
changelog:
  - KYOS-F: Fix destructor crash when VirtualKeyboard is not initialized.(#71359)
  - KYOS-F: greeter and unlock dialog support fullname(#40540)
  - KYOS-F: Add detection for whether to install a virtual keyboard
  - KYOS-F: Hide triple-authorized users by default(#53743)
  - KYOS-B: processing screen from scratch, configuration screen(#51999)
  - Fix the power menu showing on the top left when disabling all power options
  - KYOS-B: Fix the crash caused by receiving two signals from Polkit completion(#49904)
  - KYOS-B: When disabling all power settings, the power button should not be displayed(#49764)
  - KYOS-B: Add DISPLAY as one of the conditions for determining a user process singleton.(#48260)
  - KYOS-F: Support default preferred login user configurable(#47534)
  - KYOS-B: fix crash in xserver without randr (#41284)
  - KYOS-B: Fix the issue of lowercase first letters in sub-feature items(#36266)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.4.0-20
changelog:
  - KYOS-B: replace ParentStyle with QProxyStyle and adapt to QT5.9.7 version
  - KYOS-B: theme support custom library name
  - KYOS-B: Adapting to lower version Qt, autorcc not correctly associating dependencies
  - KYOS-B: Fix theme error when session dbus service is not registered(#35760)
  - kYOS-B: fix build in Qt5.9.2(#45382)
  - KYOS-B: adjust the height of the QCompleter Popup pop-up(#42329)
  - KYOS-B: fix the failure of dynamic theme switching in low version of Qt.(#51353)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.3-12
changelog:
  - KYOS-B: Fix the problem of closing the screensaver window in idle shutdown/logout process after locking the screen


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.4-1
changelog:
  - KYOS-B: fix sonarqube scanning problem.
  - KYOS-B: Fix conflict with Display dims when idle
  - KYOS-F: Support XEmbed Screensaver theme(#78377,#73664)


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.2.4-2
changelog:
  - rebuild for KiranUI-2.6-next
  - KYOS-B: Fix AutoRestart not working due to disabling session management


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.0-14
changelog:
  - KYOS-B: Session management pulled up child process forwards standard errors to the master process(#50844)
  - KYOS-B: Repair the situation that Key cannot be matched when receiving QGSettings changed signals(#51570)
  - KYOS-F: Add kiran-session-quit to support shutdown shortcut (#44337)
  - KYOS-B: fix build error
  - KYOS-B: extend the dbus call timeout to 10s to fix the restart failure caused by the CanReboot call timeout
  - KYOS-B: fix the problem that inhibitor window is show when the number of inhibitor is zero.(#24564)
  - KYOS-B: repair defects about theme not right when into livecd mode (#8146)
  - KYOS-B: change QCoreApplication to QGui/QApplication to fix the issue of SM not auto exit when XDMCP connection is disconnected.(#31631,#31796)


author: ChenYanpan <chenyanpan@xfusion.com> - 1.5.2-2
changelog:
  - use 
    /usr/bin/cmake --build "aarch64-openEuler-linux-gnu" -j${RPM_BUILD_NCPUS} --verbose and 
    DESTDIR="/home/lkp/rpmbuild/BUILDROOT/ktextaddons-1.5.2-2.oe2403next.aarch64" /usr/bin/cmake --install "aarch64-openEuler-linux-gnu" to fix build failure


author: shenzhongwei <shenzhongwei@kylinos.cn> - 1.29.1-10
changelog:
  - TypeLbugfix
  - CVE:NA
  - SUG:NA
  - DECS:remove the architecture judgment in the patches section;
         include all patches in the source package.


author: jade_t <yzd50036@gmail.com> - 1.29.1-17
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix the installation conflict between kubernetes-kubelet and kubernetes-node


author: lvfei <lvfei@kylinos.cn> - 1.0.34-4
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC: add patch:0001-update-desktop-file-and-add-sdk-translate.patch


author: lvfei <lvfei@kylinos.cn> - 1.0.4-6
changelog:
  - add patch:0001-kylin-user-guide-add-bo-desktop-translate.patch
  - kylin user guide add desktop zangwen support


author: weijin deng <weijin.deng@turbolinux.com.cn> - 0.18.1-1
changelog:
  - Upgrade to 0.18.1
  - Update Version, Release, Source0, stage 'files'
  - Stage 'build' use meson build


author: Yafen Fang<yafen@iscas.ac.cn> - 20230318-1
changelog:
  - update upstream to last commit (54fd97ae4066a10b6b02089bc769ceed328737e0): mmal: Add mapping for IL OMX_IndexParamBrcmEnableIJGTableScaling param


author: Yafen Fang<yafen@iscas.ac.cn> - 20240422-1
changelog:
  - update upstream to last commit (96a7334ae9d5fc9db7ac92e59852377df63f1848): README: Update to make it clear that most code in this repo is deprecated


author: peijiankang <peijiankang@kylinos.cn> - 3.1.2-31
changelog:
  - Type:bugfix
  - ID  :NA
  - SUG :NA
  - DESC:add ukui-control-center-3.1.2-repair-freelogin-autologin-not-available.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-33
changelog:
  - Type:bugfix
  - ID  :NA
  - SUG :NA
  - DESC:Patch203:fix-the-display-resolution-does-not-match-the-actual-resolution.patch


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: change workspace titlebar and font and composite
  - KYOS-B: fix disabled Alt+F1 to popop mate menu
  - KYOS-F: feature [menu] : pop up start menu when press super key


author: longcheng <longcheng@kylinos.com.cn> - 1.24.0-2
changelog:
  - KYOS-F: draw mask for whole screen except the selection area
  - KYOS-F: add X-System-Server category for mate-system-log
  - KYOS-F: add X-KIRAN-NoDisplay=true in mate-system-log.desktop.in.in
  - KYOS-T: change chinese translation.(#28543)
  - KYOS-F: fix mate system log is not displayed in the control panel (#48482)


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - Properly update the set of monitors when it changes
  - KYOS-F: add kiran theme
  - KYOS-F: set default position to right-bottom


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.1-1
changelog:
  - Initial build
  - KYOS-F: modify desktop and modify mate system monitor
  - KYOS-B: fix resource abnormal caused by excessive CPUs and solve crash when switch CPU display color in CPU > 31
  - KYOS-B: fix get pcpu with double to solve the cpu% don't changed
  - KYOS-B: fix could not get name information of Loongson processor
  - KYOS-B: fix cpuinfo mate-system-monitor hardware-cpuinfo display


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.1-1
changelog:
  - initial build
  - KYOS-B: add kylin mask and part of translations
  - KYOS-B: set text preview content
  - KYOS-B: add a action in mate-terminal.desktop.in.in
  - KYOS-B: change default color and system color to Dracula Dark(#30872)
  - KYOS-B: select the default charset by locale


author: yaoxin <yao_xin001@hoperun.com> - 2.0.20-1
changelog:
  - Update to 2.0.20
    * Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers". Closes #3128.
    * Open files with appropriate access on Windows. Closes #3119.
    * Don't allow invalid response topic values.
    * Fix some strict protocol compliance issues. Closes #3052.
    * Fix cmake build on OS X. Closes #3125.
    * Fix build on NetBSD
    * Fix mismatched subscribe/unsubscribe with normal/shared topics.
    * Fix crash on bridge using remapped topic being sent a crafted packet.
    * Don't allow SUBACK with missing reason codes in client library.
    * Fix crash on subscribe under certain unlikely conditions. Closes #2885. Closes #2881.
    * Fix mosquitto_rr not honouring -R. Closes #2893.
    * Fix max_queued_messages 0 stopping clients from receiving messages. Closes #2879.
    * Fix max_inflight_messages not being set correctly. Closes #2876.
    * Fix mosquitto_passwd -U backup file creation. Closes #2873.


author: jchzhou <zhoujiacheng@iscas.ac.cn> - 0.35.1-1
changelog:
  - Update to 0.35.1
  - Enabled VA-API support
  - Enabled Wayland backend & native PipeWire output support


author: liweiganga <liweiganga@uniontech.com> - 1.2.0-1
changelog:
  - upstream release 1.2.0
  - fix: fix CVE-2016-10141、CVE-2016-7504、CVE-2016-9136、CVE-2017-5628、CVE-2016-9017、\
         CVE-2016-7506、CVE-2017-5627、CVE-2016-9108、CVE-2016-9294


author: zhangxingrong <zhangxingrong@uniontech.cn> - 44.6-4
changelog:
  - delete: Don't wrongly set window as not alive when pings are disabled
  - window: Add IS_ALIVE to get_property
  - core/window: Propagate focus appearance to all ancestors
  - clutter/actor: Don't write uninitialized out values on failed transform
  - clutter/pick-stack: Add an allocation check to calculate_clear_area ()


author: zhangbowei <zhangbowei@kylinos.cn> - 0.3.0-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: implement a pure Go solution to eliminate iproute dependencies


author: will_niutao <niutao2@huawei.com> - 1.5.1-1
changelog:
  - Change upstream to https://github.com/orocos/orocos_kinematics_dynamics, and rename the package to orocos-kdl


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.4.4.1-2
changelog:
  - Change requires from postgresql-13-contrib and postgresql-13-server to postgresql-contrib and postgresql-server


author: tangjie02 <tangjie02@kylinsec.com.cn> - 5.27.11-2
changelog:
  - adapt to the new CMake macros to fix build failure
  - disable snap plugin because of snapd-glib required qt6, but plasma-discover required qt5


author: yuanxing <yuanxing@kylinsec.com.cn> - 1.28.0-1
changelog:
  - Initial build
  - KYOS-F: add chinese translation
  - KYOS-B: Fixed garbled toolTips path in tab page with GB18030 encoding(#7248)


author: jiangxinyu <jiangxinyu@kylinos.cn> - 2.53.3-1
changelog:
  - Update package to version 2.53.3
    * Fix metric name include histogram error
    * TSDB: Let queries with heavy regex matches be cancelled and not use up the CPU
    * Scraping: allow multiple samples on same series, with explicit timestamps


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.15.0-2
changelog:
  - Type: CVE
  - CVE: CVE-2023-39326 CVE-2024-24789 CVE-2024-24791
  - SUG: NA
  - DESC: Rebuild to fix CVE-2023-39326 CVE-2024-24789 CVE-2024-24791


author: gongzhengtang<gong_zhengtang@163.com> - 1.3.2-1
changelog:
  - update to v1.3.2
  - Prevent ever-growing session size for OAuth clients.
  - Revert quote client id and secret.
  - unquote basic auth header for authorization server.
  - fix a bug in module 'importlib' has no attribute 'metadata'


author: yaoxin <yao_xin001@hoperun.com> - 5.0.0-1
changelog:
  - Update to 5.0.0:
    * Breaking: Change default to disable private network access
      This effectively resolves GHSA-hxwh-jpp2-84pm https://osv.dev/vulnerability/PYSEC-2024-71


author: guochao <guochao@kylinos.cn> - 24.1.0-1
changelog:
  - Update package to version 24.1.0
  - Import os.link conditionally to fix importing on android
  - Add aiofiles.os.path.abspath and aiofiles.os.getcwd.


author: GuoCe <guoce@kylinso.cn> - 3.8.1-1
changelog:
  - Update package to version 3.8.1
  - Corrects WSGI adapter handling of root path.
  - Handles case where `"client"` is ``None`` in WsgiToAsgi adapter.


author: jiangxinyu <jiangxinyu@kylinos.cn> - 4.2.1-1
changelog:
  - Update package to version 4.2.1
  - Adapt for logging lock internal changes in Python3.13
    Remove SIGUSR2 from TERMSIGS_DEAULT


author: chenyanpanHW <chenyanpan@huawei.com> - 0.30.1-2
changelog:
  - DESC: delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0001-fix-build-erro.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/0002-delete-import-m2r.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: songliyang <songliyang@kylinos.cn> - 5.3.4-1
changelog:
  - update to 5.3.4
  - Use string value for CELERY_SKIP_CHECKS envvar
  - Document need for CELERY_ prefix on CLI env vars
  - Fixed AttributeError: 'str' object has no attribute


author: lilu <lilu@kylinos.cn> - 0.3.1-1
changelog:
  - Update package to version 0.3.1
  - Update pyproject.toml, remove upper bound from Python version specifier and so on


author: Hann <hannannan@kylinos.cn> - 30.8.0-1
changelog:
  - Update package to version 30.8.0
  - Update city names for uk_UA
  - Fix issue where Faker does not properly convert min/max float values to Decimal


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 33.0.0-1
changelog:
  - Update package with version 33.0.0
    Revert "Make pytest fixture session-scoped".
    Add jobs for locale de_AT; added methods job_female and job_male
    Added Providers for uz_UZ language


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 37.3.0-1
changelog:
  - Update package with version 37.3.0
    Fix remove duplicate cities in de_DE address provider
    Add support for unique complex value types Fixes
    Add hash functions overloads with no params
    Overload hash generation functions to make return types more specific
    Add stub support for overloaded methods
    Add phone numbers for de_CH and it_CH
    Fix date_time provider with end_datetime in the past
    Add support for Zulu (zu_ZA) address provider and corresponding tests
    Declare support for Python 3.13


author: sqfu <dev01203@linx-info.com> - 0.7.0-1
changelog:
  - update to 0.7.0
  - adding GH dependabot
  - Bump the pip group with 2 updates
  - Update hypothesis requirement from <6.62.0 to <6.100.0 in /.github/scripts


author: xu_ping <707078654@qq.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Add support for pyhon3.11 and python3.12
  - Added a new valid PGP key to sign the package
  - python3.7 is not supported and Remove support for python3.6


author: jiangxinyu <jiangxinyu@kylinos.cn> - 5.3.5-1
changelog:
  - Update package to version 5.3.5
    Fix crash when using global_keyprefix with a sentinel connection


author: zhaoshuang <zhaoshuang@uniontech.com> - 2.5.0-1
changelog:
  - Update package to version 2.5.0
    Add support for custom extras
    Drop Python 3.5\3.6\3.7 support
    Add prepend arg to toc extra
    Process HTML comments as markdown in 'escape' safe mode
    Fix syntax warnings in test suite
    Process inline tags as HTML blocks when they span multiple lines
    Add new LaTeX Extra
    Fix html, head and body tags being wrapped in <p> tags
    Graceful handling of broken lists when cuddled-lists extra is enabled
    Add type hints
    Drop Python 3.6 and 3.7 support
    Fix fenced code blocks breaking lists
    Fix #583 by tweaking incomplete tag regex
    Fix AssertionError on malformed HTML


author: songliyang <songliyang@kylinos.cn> - 2.5.1-1
changelog:
  - Update package to version 2.5.1
  - Add option to output to file in CLI
  - Add support for Python 3.13
  - Remove redundant version checks
  - Fix tox: 'failed with make is not allowed, use allowlist_externals to allow it'


author: xu_ping <707078654@qq.com> - 9.0.1-1
changelog:
  - Upgrade version to 9.0.1
  - add Raw UDP and DTLS support.
  - Deprecate add_log event hook and mitmproxy.ctx.log.


author: xieyanlong <xieyanlong@kylinos.cn> - 3.1.5-1
changelog:
  - bugfix: Workbook files not properly closed on Python ≥ 3.11.8 and Windows
  - bugfix: Column name caches are slow and use a lot of memory
  - bugfix: Rich-text can be saved if lxml is not installed


author: tanyulong <tanyulong@kylinos.cn> - 2.4.0-2
changelog:
  - delete -S git from 
  %setup       -q



  /usr/lib/rpm/rpmuncompress /home/lkp/rpmbuild/SOURCES/opentracing.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: lvfei <lvfei@kylinos.cn> - 3.9.15-1
changelog:
  - upgrade to 3.9.15 fix CVE-2024-27454
  - Fix crash serializing str introduced
  - Fix Serialization str escape uses only 128-bit SIMD 
  - Minimal musllinux_1_1 build due to sporadic CI failure
  - Improve performance of serializing. str is significantly faster. Documents
     using dict, list, and tuple are somewhat faster.
  - orjson module metadata explicitly marks subinterpreters as not supported


author: liutao1 <liutao1@kylinos.cn> - 3.10.0-1
changelog:
  - Update package to version 3.10.0
    Support serializing numpy.float16 (numpy.half).
    sdist uses metadata 2.3 instead of 2.1.
    Improve Windows PyPI builds.


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.10.11-1
changelog:
  - Update package with version 3.10.11
    Improve performance of UUIDs.
    Publish PyPI wheels with trusted publishing and PEP 740 attestations.
    Compatibility with CPython 3.14 alpha 1.
    Drop support for arm7.
    Serializing numpy.ndarray with non-native endianness raises orjson.JSONEncodeError.


author: zhaojingyu <zhaojingyu@klinos.cn> - 5.4.1-1
changelog:
  - Update package to version 5.4.1
    fixed a regression from version 5.4.0 that incorrectly handled files opened twice via file descripto


author: jiangxinyu <jiangxinyu@kylinos.cn> - 1.1.2-1
changelog:
  - Update package to version 1.1.2
    * fix: accommodate docxtpl use of Part._rels
    * fix: XmlPart._rel_ref_count


author: jiangxinyu <jiangxinyu@kylinos.cn> - 0.15.0-1
changelog:
  - Update package to version 0.15.0
  - FIX Copy JupyterLite contents early so it runs before jupyterlite_sphinx build-finished


author: xiaozai <xiaozai@kylinos.cn> - 1.7.0-1
changelog:
  - Update package to version 1.7.0
    - Remove deprecated plugins
    - Remove python 2 declaration
    - Add static method Tree.from_map


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.21.0-1
changelog:
  - Update package to version 0.21.0
    Add cleanup_socket param on create_unix_server
    Use cythonized SO_REUSEPORT rather than the unwrapped native one
    UDP errors should result in protocol.error_received
    Updates for Cython3
    Test with Python 3.13


author: wangkai <13474090681@163.com> - 1.1.0-3
changelog:
  - Compling package with pyproject
  - Obsoletes subpackage python-blurb-help
  - Add check for blurb command


author: Miro Hrončok <mhroncok@redhat.com> - 3.3.4-5
changelog:
  - Subpackage python2-empy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: zhaosaisai <zhaosaisai@kylinos.cn> - 2.0.0-1
changelog:
  - Upgrade to the latest version 2.0.0
  - Add new writer methods and namespace elements/resolvers
  - Separate new write functionality from elements that have namespaces
  - Split everything except the closing tag into a separate fn
  - Improve performance with inline qname splitting
  - Local refactoring/performance improvements
  - Example Change the default write value of the root only ns keyword
  - Deprecate python 3.6 and 3.7 because nsetree requires the updated XMLParser
  - Disable coveralls unless you know exactly how to get access tokens


author: wangjunqi <wangjunqi@kylinos.cn> - 2.1.0-1
changelog:
  - Update package to version 2.1.0 
  	Add support for sys/policies endpoint (GH-1100)
  	add quota support to system backend (GH-1092)
  	Add support to PKI class to perform CRUD on issuers (GH-1102)


author: wangkai <13474090681@163.com> - 0.4.4-1
changelog:
  - Update package to version 0.4.4
  - Fix CVE-2023-30608
  - Compling package with pyproject
  - Obsoletes subpackage python-sqlparse-help


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.46.1-1
changelog:
  - Update package with version 0.46.1
    Fix: Allow relative directory path when follow_symlinks=True
    Add: GZipMiddleware: Make sure Vary header is always added if a response can be compressed
    Fix: Raise exception from background task on BaseHTTPMiddleware
    Fix: GZipMiddleware: Don't compress on server sent events
    Mod: MultiPartParser: Rename max_file_size to spool_max_size
    Drop Python 3.8 support
    Remove ExceptionMiddleware import proxy from starlette.exceptions module
    Remove deprecated WS_1004_NO_STATUS_RCVD and WS_1005_ABNORMAL_CLOSURE
    Add client parameter to TestClient
    Add max_part_size parameter to Request.form()
    Remove deprecated allow_redirects argument from TestClient
    Make UUID path parameter conversion more flexible
    Raise ClientDisconnect on StreamingResponse


author: liyue01 <liyue01@kylinos.cn> - 0.30.1-1
changelog:
  - Update package to version 0.30.1
  - Fixed ：Allow horizontal tabs in response header values
  - Added New multiprocess manager and Allow ConfigParser or a io.IO[Any] on log_config
  - Fixed：Suppress side-effects of signal propagation ，Send content-length header on 5xx
  - Added Cooperative signal handling
  - Fixed ：Revert raise ClientDisconnected on HTTP
  - Added Raise ClientDisconnected on send() when client disconnected


author: shaoning <shaoning@kylinos.cn> - 0.32.0-1
changelog:
  - Update package to version 0.32.0
      * Add reason support on WebSocketDisconnectEvent
      * Add pragma: full coverage to Process.is_alive
      * Remove signal testing order dependency
      * Improve ProxyHeadersMiddleware
      * Add support for [*] in trusted hosts


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 0.34.0-1
changelog:
  - Update package to version 0.34.0
    Add content-length to 500 response in wsproto implementation
    Drop support for Python 3.8
    Remove WatchGod support for --reload


author: Yafen Fang<yafen@iscas.ac.cn> - 20220318-5
changelog:
  - update pi-bluetooth to commit(23af66cff597c80523bf9581d7f75d387227f183): Add AA:AA:AA:AA:AA:AA as an "unprogrammed" address


author: Yafen Fang <yafen@iscas.ac.cn> - 2024.04.20-1
changelog:
  - update upstream version to 2024.04.20-2712
  - add Raspberry Pi 5 bootloader EEPROMs
  - add rpi-bootloader-key-convert, rpi-otp-private-key, rpi-sign-bootcode
  - remove patch for rpi-eeprom-update: use 'tr' instead of 'strings'


author: Yafen Fang<yafen@iscas.ac.cn> - 20240419-9
changelog:
  - update firmware to version 1.20240306
  - update bluez-firmware to the latest commit (5a204dae9b3dc521842c56d93f6b4ecfbe4ff44d): 1.2-4+rpt11 release


author: Yafen Fang<yafen@iscas.ac.cn> - 20241207-11
changelog:
  - update firmware version to 1.20241126
  - update bluez-firmware to the latest commit (78d6a07730e2d20c035899521ab67726dc028e1c): Update changelog for 1.2-9+rpt3 release
  - update firmware-nonfree to the latest commit (4b356e134e8333d073bd3802d767a825adec3807): Update changelog for 1:20230625-2+rpt3 release


author: Yafen Fang<yafen@iscas.ac.cn> - 20241207-13
changelog:
  - add license: broadcom_bcm43xx
  - preserve the symbolic link format when installing firmwares of brcm


author: Xun Lai<chainsx@isrc.iscas.ac.cn> - 20260330-14
changelog:
  - update firmware version to 1.20250915
  - update bluez-firmware to the latest commit (cdf61dc691a49ff01a124752bd04194907f0f9cd): Update changelog for 1.2-13+rpt2 release
  - update firmware-nonfree to the latest commit (9794282eb9f4a2de1f23b41a738926740e975d83): Update changelog for 1:20250410-2+rpt1 release


author: Yafen Fang<yafen@iscas.ac.cn> - 20241104-2
changelog:
  - update upstream version to the latest commit: "ovmerge: Disable Perl warnings about portability"
  - update patch0002


author: Yafen Fang <yafen@iscas.ac.cn> - 20230320-1
changelog:
  - update to upstream's last commit (408bde537671de6df2d9b91564e67132f98ffa71): do_wifi_ssid_passphrase: set scan_ssid on hidden network in dhcpcd case
  - adjust for openEuler
  - disable A9 Wayland and AA Network Config
  - remove legacy autologin cruft


author: weiyucheng <weiyucheng@kylinos.cn> - 2.0.0-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:restart
  - DESC:sync upstream patches to support isulad container engine and systemd cgroup driver


author: wutao <wutao61@huawei.com> - 0.7.0-2
changelog:
  - Move .so file from /usr/lib64/gems/ruby/http_parser.rb-0.7.0/http_parser.rb/ to
    /usr/lib64/gems/ruby/http_parser.rb-0.7.0/ to solve fluentd loaderror problem


author: wutao <wutao61@huawei.com> - 1.4.1-2
changelog:
  - Move .so file from /usr/lib64/gems/ruby/yajl-ruby-1.4.1/yajl-ruby/
    to /usr/lib64/gems/ruby/yajl-ruby-1.4.1/yajl/ to solve fluentd loaderror problem


author: YuYing Mu <muyuying1@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 JiaQi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - Init and adapt device auth to openEuler


author: Peng He <hepeng68@huawei.com> - 1.0.0-1
changelog:
  * Tue Nov 21 2023 JiaQi Zhao <zhaojiaqi18@huawei.com> - 1.0.0-1
  - adapt compilation, tailor dependencies on hitrace and hisysevent


author: <918688502@qq.com> - 0.2.0-1
changelog:
  - Initial skeleton of the sysHAX heterogeneous collaborative acceleration runtime, including core modules, configuration management, logging system, command-line tool, API routing, application entry point, documentation, and dependency declaration


author: donglihao <donglihao1@huawei.com> - 1.2-1
changelog:
  - Add new detection algorithms for improved AI training monitoring
  - Update collection modules with enhanced performance tracing capabilities


author: donglihao <donglihao1@huawei.com> - 1.2-4
changelog:
  - Integrated previous updates:
  - remove usage of cxxfilt
  - disable HAS_BTF_SUPPORT in build.sh
  - Add new detection algorithms for improved AI training monitoring
  - Update collection modules with enhanced performance tracing capabilities


author: Funda Wang <fundawang@yeah.net> - 140.5.0-1
changelog:
  - update to 140.5.0
  - build with system cbindgen
  - drop useless post scripts, they will be done automaticaly by triggers


author: yaoxin <1024769339@qq.com> - 3.4.1-1
changelog:
  - Update to 3.4.1:
    * Fix manpage path in pyproject.toml
    * Fallback to common if a platform is specified using -p flag,
      but a page doesn't exist for that platform
    * Drop support for EOL Python 3.8 version
    * Fix broken --render option
    * Fix duplicate platform information shown in pages like du, cd, w


author: chukaiping <chukaiping@baidu.com> - 3.4.3-1
changelog:
  - Update to 3.4.3
    * Fixed unpredictable platform selection when displaying pages 
    * fix: unpredictable platform selection introduced
    * Added a warning when a page is not available for the current platform


author: zhang_jian <zhang_jian7@hoperun.com> - 3.4.4-1
changelog:
  - update to 3.4.4
  - Drop support for EOL Python 3.9 version
  - Allow cache updating and command displaying on the same command
  - fix: only raise URLError or HTTPError when there are no results at all


author: weijin deng <weijin.deng@turbolinux.com.cn> - 3.38.0-1
changelog:
  - Upgrade to 3.38.0
  - Sub package totem-nautilus becomes empty
    in version 3.31.91 Move nautilus properties page to nautilus module


author: houhongxun <houhongxun@kylinos.cn> - 3.1.0-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: add 0001-ukui-panel-fix-incorrect-usage-of-deallocation-func.patch


author: douyan<douyan@kylinos.cn> - 3.1.2-6
changelog:
  - Type: bugfix
  - ID  : NA
  - SUG : NA
  - DESC: add patch03: ukui-power-manager-3.1.2-disable-computer-sleep.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch2:ukui-session-manager-3.1.0-kylin-fix-ukui-kwin-x11-coredump.patch


author: peijiankang <peijiankang@kylinos.cn> - 3.1.0-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add patch3:add-switchuser-no-limits-ukui-session.patch
         rm disable-Suspend-and-Sleep-of-ukui-session-manager.patch


author: huayadong <huayadong@kylinos.cn> - 3.1.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:add Patch4:ukui-settings-daemon-3.1.2-kylin-fix-coredump.patch


author: bianguangze <bianguangze@uniontech.com> - 0.0.1.01
changelog:
  - Add Patch: 0001-Add-utpam_client.rs-and-modify-utpam_misc.rs.patch.
  - Add Patch: 0002-Modify-pam_strerror-function.patch.
  - Add Patch: 0003-refactor-add-utpam_get_authtok.rs-file.patch.


author: bianguangze <bianguangze@uniontech.com> - 0.0.1.02
changelog:
  - Add Patch: 0004-refactor-fix-include-flag-error.patch.
  - Add Patch: 0005-add-pam_strerror.rs-and-fix-utpam_rootok-modules.patch.


author: wanglujun <wanglujun@uniontech.com> - 0.0.1.04
changelog:
  - spec: del SOURCE8 and package ./lib/libpam_c/include/utpam.h.
  - Add Patch:0007-change-log-path.patch.


author: wangmeng <wangmengc@uniontech.com> - 0.5.0-3
changelog:
  - feat: add patch 0003-fix-echo-a.z.patch
  - feat: add patch 0004-fix-type-return-error.patch
  - 修复echo {a..z} 执行错误和type命令返回值错误


author: openEuler <contact@openeuler.org> - 2.0.0-3
changelog:
  - feat: Add Witty Assistant welcome screen & LOGO
  - refactor: Improve Markdown rendering performance in TUI


author: openEuler <contact@openeuler.org> - 2.0.1-1
changelog:
  - feat: Set defautl chat model during installation
  - feat: Add shell completion installation command
  - fix: Markdown rendering issue in TUI
  - chore: Remove deprecated scripts in installer


author: openEuler <contact@openeuler.org> - 2.0.2-1
changelog:
  - feat: Add option to launch OpenCode through Witty Assistant
  - installer: Install OpenCode-AI during deployment


author: Weikang Xiang <xiangweikang3@huawei.com> - 0.1.0-2
changelog:
  - reorder cmake clean step after configure
  - fix issues in path/input/encoding verification
  - preserve explicit zero port in run_online


author: gcw_X8YNlwar <wangjintao1@xfusion.com> - 1.20.4-1
changelog:
  - Update to 1.20.4
  - Fix CVE-2026-40354: Prevent trashing of arbitrary host files via symlink attack


author: yaoxin <1024769339@qq.com> - 1.15.3-1
changelog:
  - Update to 1.15.3:
    * Fix build against newer xdg-desktop-portal
    * Fix return value for the access portal


author: liuxinhao <liuxinhao@kylinsec.com.cn> - 1.2.15-7
changelog:
  - Reorganize patch numbers in spec file
  - Add "program" option to rotate lock file configuration for finer-grained rotation locks(b: 113752)


author: gaobo <gaobo@kylinsec.com.cn> - 1.2.15-8
changelog:
  - Modify the Patch1005, change lock file path and correct the error logic for creating the lock path. (b:113752)


