SUSE-SU-2025:02969-1

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-36028: mm/hugetlb: fix DEBUGLOCKSWARNON(1) when dissolvefreehugetlbfolio() (bsc#1225707).
• CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
• CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
• CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
• CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vfaddmigration_pages() (bsc#1235613).
• CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
• CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
• CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
• CVE-2025-22090: mm: (un)trackpfncopy() fix + doc improvements (bsc#1241537).
• CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
• CVE-2025-37856: btrfs: harden blockgroup::bglist against list_del() races (bsc#1243068).
• CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
• CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
• CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
• CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIVROUNDUP() (bsc#1243669).
• CVE-2025-38034: btrfs: correct the order of prelimref arguments in btrfsprelimref (bsc#1244792).
• CVE-2025-38035: nvmet-tcp: do not restore null skstatechange (bsc#1244801).
• CVE-2025-38051: smb: client: Fix use-after-free in cifsfilldirent (bsc#1244750).
• CVE-2025-38058: _legitimizemnt(): check for MNTSYNCUMOUNT should be under mount_lock (bsc#1245151).
• CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgenthreadwrite() (bsc#1245440).
• CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
• CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
• CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
• CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
• CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macbhalttx (bsc#1245649).
• CVE-2025-38097: kabi: restore encapsk in struct xfrmstate (bsc#1245660).
• CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
• CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
• CVE-2025-38100: x86/iopl: Cure TIFIOBITMAP inconsistencies (bsc#1245650).
• CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
• CVE-2025-38115: netsched: schsfq: fix a potential crash on gso_skb handling (bsc#1245689).
• CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
• CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
• CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
• CVE-2025-38132: coresight: holding cscfgcsdevlock while removing cscfg from csdev (bsc#1245679).
• CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
• CVE-2025-38158: hisiaccvfio_pci: fix XQE dma address error (bsc#1245750).
• CVE-2025-38162: netfilter: nftsetpipapo: prevent overflow in lookup table allocation (bsc#1245752).
• CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
• CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
• CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
• CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743xptpioeventclock_get() (bsc#1246006).
• CVE-2025-38187: drm/nouveau: fix a use-after-free in r535gsprpc_push() (bsc#1245951).
• CVE-2025-38188: drm/msm/a7xx: Call CPRESETCONTEXT_STATE (bsc#1246098).
• CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40eclearhw (bsc#1246045).
• CVE-2025-38202: bpf: Check rcureadlocktraceheld() in bpfmaplookuppercpuelem() (bsc#1245980).
• CVE-2025-38203: jfs: Fix null-ptr-deref in jfsioctrim (bsc#1246044).
• CVE-2025-38204: jfs: fix array-index-out-of-bounds read in addmissingindices (bsc#1245983).
• CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
• CVE-2025-38210: configfs-tsm-report: Fix NULL dereference of tsm_ops (bsc#1246020).
• CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
• CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
• CVE-2025-38222: ext4: inline: fix len overflow in ext4prepareinline_data (bsc#1245976).
• CVE-2025-38236: afunix: Disable MSGOOB for unprivileged users (bsc#1246093).
• CVE-2025-38239: scsi: megaraid_sas: Fix invalid node index (bsc#1246178).
• CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
• CVE-2025-38248: bridge: mcast: Fix use-after-free during router port configuration (bsc#1246173).
• CVE-2025-38250: kABI workaround for bluetooth hci_dev changes (bsc#1246182).
• CVE-2025-38264: llist: add interface to check if a node is on a list (bsc#1246387).
• CVE-2025-38272: net: dsa: b53: do not enable EEE on bcm63xx (bsc#1246268).
• CVE-2025-38279: selftests/bpf: Add tests with stack ptr register in conditional jmp (bsc#1246264).
• CVE-2025-38283: hisiaccvfio_pci: bugfix live migration function without VF device driver (bsc#1246273).
• CVE-2025-38303: Bluetooth: eir: Fix possible crashes on eircreateadv_data (bsc#1246354).
• CVE-2025-38310: seg6: Fix validation of nexthop addresses (bsc#1246361).
• CVE-2025-38323: net: atm: add lec_mutex (bsc#1246473).
• CVE-2025-38334: x86/sgx: Prevent attempts to reclaim poisoned pages (bsc#1246384).
• CVE-2025-38335: Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT (bsc#1246250).
• CVE-2025-38337: jbd2: fix data-race and null-ptr-deref in jbd2journaldirty_metadata() (bsc#1246253).
• CVE-2025-38349: eventpoll: do not decrement ep refcount while still holding the ep mutex (bsc#1246777).
• CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
• CVE-2025-38352: posix-cpu-timers: fix race between handleposixcputimers() and posixcputimerdel() (bsc#1246911).
• CVE-2025-38364: mapletree: fix MASTATEPREALLOC flag in maspreallocate() (bsc#1247091).
• CVE-2025-38365: btrfs: fix a race between renames and directory logging (bsc#1247023).
• CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
• CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
• CVE-2025-38382: btrfs: fix iteration of extrefs during log replay (bsc#1247031).
• CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
• CVE-2025-38396: fs: export anoninodemakesecureinode() and fix secretmem LSM bypass (bsc#1247156).
• CVE-2025-38399: scsi: target: Fix NULL pointer dereference in corescsi3decodespeci_port() (bsc#1247097).
• CVE-2025-38403: vsock/vmci: Clear the vmci transport packet properly when initializing it (bsc#1247141).
• CVE-2025-38414: wifi: ath12k: fix GCCGCCPCIEHOTRST definition for WCN7850 (bsc#1247145).
• CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
• CVE-2025-38429: bus: mhi: ep: Update read pointer only after buffer is written (bsc#1247253).
• CVE-2025-38455: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (bsc#1247101).
• CVE-2025-38457: net/sched: Abort _tcmodify_qdisc if parent class does not exist (bsc#1247098).
• CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
• CVE-2025-38461: vsock: Fix transport_* TOCTOU (bsc#1247103).
• CVE-2025-38462: vsock: Fix transport_{g2h,h2g} TOCTOU (bsc#1247104).
• CVE-2025-38463: tcp: Correct signedness in skb remaining space calculation (bsc#1247113).
• CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
• CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
• CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
• CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
• CVE-2025-38498: dochangetype(): refuse to operate on unmounted/not ours mounts (bsc#1247374).

The following non-security bugs were fixed:

• Documentation: ACPI: Fix parent device references (git-fixes).
• Documentation: usb: gadget: Wrap remaining usage snippets in literal code block (git-fixes).
• Fix dmaunmapsg() nents value (git-fixes)
• Reapply 'wifi: mac80211: Update skb's control block key in ieee80211txdequeue()' (git-fixes).
• Revert 'ACPI: battery: negate current when discharging' (stable-fixes).
• Revert 'cgroupfreezer: cgroupfreezing: Check if not frozen' (bsc#1219338).
• Revert 'drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1' (stable-fixes).
• Revert 'mmc: sdhci: Disable SD card clock before changing parameters' (git-fixes).
• Revert 'usb: xhci: Implement xhcihandshakecheck_state() helper' (git-fixes).
• Revert 'vgacon: Add check for vcorigin address range in vgaconscroll()' (stable-fixes).
• acpi: LPSS: Remove AudioDSP related ID (git-fixes).
• acpi: PRM: Reduce unnecessary printing to avoid user confusion (bsc#1246122).
• acpi: processor: perflib: Fix initial _PPC limit application (git-fixes).
• acpica: Refuse to evaluate a method if arguments are missing (stable-fixes).
• afpacket: fix the SOSNDTIMEO constraint not effective on tpacked_snd() (git-fixes).
• afunix: Add a prompt to CONFIGAFUNIXOOB (bsc#1246093).
• alsa: hda/ca0132: Fix missing error handling in ca0132altselect_out() (git-fixes).
• alsa: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx (stable-fixes).
• alsa: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100 (stable-fixes).
• alsa: hda/realtek: Add quirk for ASUS ROG Strix G712LWS (stable-fixes).
• alsa: hda/tegra: Add Tegra264 support (stable-fixes).
• alsa: hda: Add missing NVIDIA HDA codec IDs (stable-fixes).
• alsa: hda: Add new pci id for AMD GPU display HD audio controller (stable-fixes).
• alsa: hda: Ignore unsol events for cards being shut down (stable-fixes).
• alsa: intelhdmi: Fix off-by-one error in _hdmilpeaudio_probe() (git-fixes).
• alsa: sb: Do not allow changing the DMA mode during operations (stable-fixes).
• alsa: sb: Force to disable DMAs once when DMA mode is changed (stable-fixes).
• amd/amdkfd: fix a kfd_process ref leak (stable-fixes).
• aoe: clean device rqlist in aoedevdowndev() (git-fixes).
• apple-mfi-fastcharge: protect first device name (git-fixes).
• asoc: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15 (stable-fixes).
• asoc: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic (stable-fixes).
• asoc: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic (stable-fixes).
• asoc: amd: yc: update quirk data for HP Victus (stable-fixes).
• asoc: codec: wcd9335: Convert to GPIO descriptors (stable-fixes).
• asoc: codecs: wcd9335: Fix missing free of regulator supplies (git-fixes).
• asoc: codecs: wcd9335: Handle nicer probe deferral and simplify with deverrprobe() (stable-fixes).
• asoc: cs35l56: probe() should fail if the device ID is not recognized (git-fixes).
• asoc: fsl_asrc: use internal measured ratio for non-ideal ratio mode (git-fixes).
• asoc: fsl_xcvr: get channel status data when PHY is not exists (git-fixes).
• asoc: ops: dynamically allocate struct sndctlelem_value (git-fixes).
• asoc: soc-dai: tidyup return value of sndsocxlatetdmslot_mask() (git-fixes).
• ata: pata_cs5536: fix build on 32-bit UML (stable-fixes).
• audit,module: restore audit logging in load failure case (git-fixes).
• bluetooth: Fix null-ptr-deref in l2capsockresume_cb() (git-fixes).
• bluetooth: L2CAP: Fix L2CAP MTU negotiation (stable-fixes).
• bluetooth: L2CAP: Fix attempting to adjust outgoing MTU (git-fixes).
• bluetooth: MGMT: Fix not generating command complete for MGMTOPDISCONNECT (git-fixes).
• bluetooth: MGMT: mesh_send: check instances prior disabling advertising (git-fixes).
• bluetooth: MGMT: set_mesh: update LE scan interval and window (git-fixes).
• bluetooth: Prevent unintended pause by checking if advertising is active (git-fixes).
• bluetooth: SMP: Fix using HCIERRORREMOTEUSERTERM on timeout (git-fixes).
• bluetooth: SMP: If an unallowed command is received consider it a failure (git-fixes).
• bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID (git-fixes).
• bluetooth: hciconn: Fix sending BTHCICMDLECREATECONN_CANCEL (git-fixes).
• bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected (git-fixes).
• bluetooth: hci_event: Mask data status from LE ext adv reports (git-fixes).
• bluetooth: hci_sync: Attempt to dequeue connection attempt (git-fixes).
• bluetooth: hcisync: Fix UAF on createleconncomplete (git-fixes).
• bluetooth: hcisync: Fix handling of HCIOPCREATECONN_CANCEL (git-fixes).
• bluetooth: hci_sync: Fix not disabling advertising instance (git-fixes).
• bluetooth: hci_sync: fix connectable extended advertising when using static random address (git-fixes).
• bluetooth: hci_sync: revert some mesh modifications (git-fixes).
• bpf, sockmap: Fix skmsgreset_curr (git-fixes).
• bpf/lpmtrie: Inline longestprefix_match for fastpath (git-fixes).
• bpf/selftests: Check errno when percpu map value size exceeds (git-fixes).
• bpf: Add a possibly-zero-sized read test (git-fixes).
• bpf: Avoid hidden attribute in static object (git-fixes).
• bpf: Check percpu map value size first (git-fixes).
• bpf: Disable some `attribute ignored' warnings in GCC (git-fixes).
• bpf: Fix memory leak in bpfcoreapply (git-fixes).
• bpf: Fix potential integer overflow in resolve_btfids (git-fixes).
• bpf: Harden _bpfkfunc tag against linker kfunc removal (git-fixes).
• bpf: Make the pointer returned by iter next method valid (git-fixes).
• bpf: Simplify checking size of helper accesses (git-fixes).
• bpf: fix order of args in call to bpfmapkvcalloc (git-fixes).
• bpf: sockmap, updating the sg structure should also update curr (git-fixes).
• bpftool: Fix missing pids during link show (git-fixes).
• bpftool: Fix undefined behavior caused by shifting into the sign bit (git-fixes).
• bpftool: Mount bpffs on provided dir instead of parent dir (git-fixes).
• bpftool: Remove unnecessary source files from bootstrap version (git-fixes).
• bpftool: Un-const bpffuncinfo to fix it for llvm 17 and newer (git-fixes).
• btrfs: do not ignore inode missing when replaying log tree (git-fixes).
• btrfs: do not silently ignore unexpected extent type when replaying log (git-fixes).
• btrfs: do not skip remaining extrefs if dir not found during log replay (git-fixes).
• btrfs: explicitly ref count blockgroup on newbgs list (bsc#1243068)
• btrfs: fix assertion when building free space tree (git-fixes).
• btrfs: fix inode lookup error handling during log replay (git-fixes).
• btrfs: fix invalid inode pointer dereferences during log replay (git-fixes).
• btrfs: fix log tree replay failure due to file with 0 links and extents (git-fixes).
• btrfs: fix missing error handling when searching for inode refs during log replay (git-fixes).
• btrfs: fix non-empty delayed iputs list on unmount due to async workers (git-fixes).
• btrfs: fix ssd_spread overallocation (git-fixes).
• btrfs: make btrfsdiscardworkfn() block_group ref explicit (bsc#1243068)
• btrfs: propagate lastunlinktrans earlier when doing a rmdir (git-fixes).
• btrfs: rename err to ret in btrfs_rmdir() (git-fixes).
• btrfs: return a btrfsinode from btrfsiget_logging() (git-fixes).
• btrfs: return a btrfsinode from readone_inode() (git-fixes).
• btrfs: tests: fix chunk map leak after failure to add it to the tree (git-fixes).
• btrfs: update superblock's device bytes_used when dropping chunk (git-fixes).
• btrfs: use NOFS context when getting inodes during logging and log replay (git-fixes).
• btrfs: use btrfsrecordsnapshot_destroy() during rmdir (git-fixes).
• bus: fsl-mc: Fix potential double device reference in fslmcget_endpoint() (git-fixes).
• bus: mhi: host: Detect events pointing to unexpected TREs (git-fixes).
• can: dev: can_restart(): move debug message and stats after successful restart (stable-fixes).
• can: dev: can_restart(): reverse logic to remove need for goto (stable-fixes).
• can: kvaser_pciefd: Store device channel index (git-fixes).
• can: kvaserusb: Assign netdev.devport based on device channel index (git-fixes).
• can: mcan: mcanhandlelost_msg(): downgrade msg lost in rx message to debug level (git-fixes).
• can: netlink: canchangelink(): fix NULL pointer deref of struct canpriv::dosetmode (git-fixes).
• can: peak_usb: fix USB FD devices potential malfunction (git-fixes).
• cdc-acm: fix race between initial clearing halt and open (git-fixes).
• cgroup,freezer: fix incomplete freezing when attaching tasks (bsc#1245789).
• cgroup/cpuset: Extend kthreadispercpu() check to all PFNO_SETAFFINITY tasks (bsc#1241166).
• cifs: reconnect helper should set reconnect for the right channel (git-fixes).
• clk: clk-axi-clkgen: fix fpfd_max frequency for zynq (git-fixes).
• clk: davinci: Add NULL check in davincilpscclk_register() (git-fixes).
• clk: sunxi-ng: v3s: Fix de clock definition (git-fixes).
• clk: xilinx: vcu: unregister pll_post only if registered correctly (git-fixes).
• clocksource: Scale the watchdog read retries automatically (bsc#1241345 bsc#1244457).
• clocksource: Set cswatchdogread() checks based on .uncertainty_margin (bsc#1241345 bsc#1244457).
• comedi: Fail COMEDIINSNLIST ioctl if ninsns is too large (git-fixes).
• comedi: Fix initialization of data for instructions that write to subdevice (git-fixes).
• comedi: Fix some signed shift left operations (git-fixes).
• comedi: Fix use of uninitialized data in insnrwemulate_bits() (git-fixes).
• comedi: aioiiro16: Fix bit shift out of bounds (git-fixes).
• comedi: das16m1: Fix bit shift out of bounds (git-fixes).
• comedi: das6402: Fix bit shift out of bounds (git-fixes).
• comedi: pcl812: Fix bit shift out of bounds (git-fixes).
• compilertypes.h: Define retain for _attribute((retain)) (git-fixes).
• crypto: arm/aes-neonbs - work around gcc-15 warning (git-fixes).
• crypto: ccp - Fix crash when rebind ccp device for ccp.ko (git-fixes).
• crypto: ccp - Fix locking on alloc failure handling (git-fixes).
• crypto: img-hash - Fix dmaunmapsg() nents value (git-fixes).
• crypto: inside-secure - Fix dma_unmap_sg() nents value (git-fixes).
• crypto: keembay - Fix dmaunmapsg() nents value (git-fixes).
• crypto: marvell/cesa - Fix engine load inaccuracy (git-fixes).
• crypto: qat - allow enabling VFs in the absence of IOMMU (git-fixes).
• crypto: qat - disable ZUC-256 capability for QAT GEN5 (git-fixes).
• crypto: qat - fix DMA direction for compression on GEN2 devices (git-fixes).
• crypto: qat - fix seqfile position update in adfring_next() (git-fixes).
• crypto: qat - fix state restore for banks with exceptions (git-fixes).
• crypto: qat - flush misc workqueue during device shutdown (git-fixes).
• crypto: qat - use unmanaged allocation for dc_data (git-fixes).
• crypto: sun8i-ce - fix nents passed to dmaunmapsg() (git-fixes).
• dm-bufio: fix sched in atomic context (git-fixes).
• dm-flakey: error all IOs when num_features is absent (git-fixes).
• dm-flakey: make corrupting read bios work (git-fixes).
• dm-mirror: fix a tiny race condition (git-fixes).
• dm-raid: fix variable in journal device check (git-fixes).
• dm-verity: fix a memory leak if some arguments are specified multiple times (git-fixes).
• dm: do not change md if dmtableset_restrictions() fails (git-fixes).
• dm: free table mempools if not used in __bind (git-fixes).
• dm: restrict dm device size to 2^63-512 bytes (git-fixes).
• dma-buf: fix timeout handling in dmaresvwait_timeout v2 (stable-fixes).
• dmaengine: dw-edma: Drop unused dchan2dev() and chan2dev() (git-fixes).
• dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (stable-fixes).
• dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (git-fixes).
• dmaengine: nbpfaxi: Add missing check after DMA map (git-fixes).
• dmaengine: nbpfaxi: Fix memory corruption in probe() (git-fixes).
• dmaengine: qcom: gpi: Drop unused gpiwritereg_field() (git-fixes).
• dmaengine: xilinxdma: Set dmadevice directions (stable-fixes).
• docs/ABI: Fix sysfs-kernel-address_bits path (git-fixes).
• drm/amd/display: Do not overwrite dce60clkmgr (git-fixes).
• drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (git-fixes).
• drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume (git-fixes).
• drm/amdgpu: amdgpuvrammgr_new(): Clamp lpfn to total vram (stable-fixes).
• drm/amdkfd: Fix race in GWS queue scheduling (stable-fixes).
• drm/bridge: panel: move prepareprevfirst handling to drmpanelbridgeaddtyped (git-fixes).
• drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type (git-fixes).
• drm/bridge: ti-sn65dsi86: Remove extra semicolon in tisnbridge_probe() (git-fixes).
• drm/bridge: ti-sn65dsi86: make use of debugfs_init callback (stable-fixes).
• drm/exynos: exynos7drmdecon: add vblank check in IRQ handling (git-fixes).
• drm/exynos: fimd: Guard display clock control with runtime PM calls (git-fixes).
• drm/framebuffer: Acquire internal references on GEM handles (git-fixes).
• drm/gem: Acquire references on GEM handles for framebuffers (stable-fixes).
• drm/gem: Fix race in drmgemhandlecreatetail() (stable-fixes).
• drm/i915/gsc: mei interrupt top half should be in irq disabled context (git-fixes).
• drm/i915/gt: Fix timeline left held on VMA alloc error (git-fixes).
• drm/i915/selftests: Change mock_request() to return error pointers (git-fixes).
• drm/msm/dpu: Fill in minprefilllines for SC8180X (git-fixes).
• drm/msm: Fix a fence leak in submit error path (stable-fixes).
• drm/msm: Fix another leak in the submit error path (stable-fixes).
• drm/panfrost: Fix panfrost device variable name in devfreq (git-fixes).
• drm/rockchip: cleanup fb when drmgemfbafbcinit failed (git-fixes).
• drm/sched: Increment job count before swapping tail spsc queue (git-fixes).
• drm/sched: Remove optimization that causes hang when killing dependent jobs (git-fixes).
• drm/scheduler: signal scheduled fence when kill job (stable-fixes).
• drm/tegra: nvdec: Fix dmaalloccoherent error check (git-fixes).
• drm/ttm: fix error handling in ttmbufferobject_transfer (git-fixes).
• drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel (git-fixes).
• exfat: fdatasync flag should be same like genericwritesync() (git-fixes).
• fbcon: Fix outdated registered_fb reference in comment (git-fixes).
• fbdev: imxfb: Check fbaddvideomode to prevent null-ptr-deref (git-fixes).
• firewire: ohci: correct code comments about bus_reset tasklet (git-fixes).
• fs/jfs: consolidate sanity checking in dbMount (git-fixes).
• fs/orangefs: Allow 2 more characters in docstring() (git-fixes).
• gpio: mlxbf2: use platformgetirq_optional() (git-fixes).
• gpio: pca953x: log an error when failing to get the reset GPIO (git-fixes).
• gpio: sim: include a missing header (git-fixes).
• gpio: vf610: add locking to gpio direction functions (git-fixes).
• gpio: virtio: Fix config space reading (git-fixes).
• gpiolib: Fix debug messaging in gpiodfindand_request() (git-fixes).
• gpiolib: Handle no pinranges in gpiochipgeneric_config() (git-fixes).
• gpiolib: acpi: Do not use GPIO chip fwnode in acpigpiochipfind() (bsc#1233300).
• gpiolib: acpi: Fix failed in acpigpiochipfind() by adding parent node match (bsc#1233300).
• gpiolib: cdev: Ignore reconfiguration without direction (git-fixes).
• gpiolib: of: Add polarity quirk for s5m8767 (stable-fixes).
• hfs: make splice write available again (git-fixes).
• hfsplus: make splice write available again (git-fixes).
• hfsplus: remove mutexlock check in hfsplusfree_extents (git-fixes).
• hid: Add IGNORE quirk for SMARTLINKTECHNOLOGY (stable-fixes).
• hid: core: do not bypass hidhwraw_request (stable-fixes).
• hid: core: ensure _hidrequest reserves the report ID as the first byte (git-fixes).
• hid: core: ensure the allocated report buffer can contain the reserved report ID (stable-fixes).
• hid: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2 (stable-fixes).
• hid: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (stable-fixes).
• hvnetvsc: Use VF's tsomax_size value when data path is VF (bsc#1246203).
• hwmon: (corsair-cpro) Validate the size of the received input buffer (git-fixes).
• hwmon: (gsc-hwmon) fix fan pwm setpoint show functions (git-fixes).
• hwmon: (pmbus/max34440) Fix support for max34451 (stable-fixes).
• hwrng: mtk - handle devmpmruntime_enable errors (git-fixes).
• i2c/designware: Fix an initialization issue (git-fixes).
• i2c: qup: jump out of the loop in case of timeout (git-fixes).
• i2c: stm32: fix the device used for the DMA map (git-fixes).
• i2c: tegra: Fix reset error handling with ACPI (git-fixes).
• i2c: virtio: Avoid hang by using interruptible completion wait (git-fixes).
• i3c: fix modulei3ci2c_driver() with I3C=n (git-fixes).
• ib/mlx5: Fix potential deadlock in MR deregistration (git-fixes)
• iio: accel: fxls8962af: Fix use after free in fxls8962affifoflush (git-fixes).
• iio: adc: ad7949: use spiisbpw_supported() (git-fixes).
• iio: adc: adsigmadelta: Fix use of uninitialized status_pos (stable-fixes).
• iio: adc: adsigmadelta: change to buffer predisable (git-fixes).
• iio: adc: max1363: Fix MAX13634XCHANS/MAX13638XCHANS[] (stable-fixes).
• iio: adc: max1363: Reorder mode_list[] entries (stable-fixes).
• iio: adc: stm32-adc: Fix race in installing chained IRQ handler (git-fixes).
• iio: imu: bno055: fix OOB access of hw_xlate array (git-fixes).
• iio: pressure: zpa2326: Use aligned_s64 for the timestamp (stable-fixes).
• input: iqs7222 - explicitly define number of external channels (git-fixes).
• input: xpad - adjust error handling for disconnect (git-fixes).
• input: xpad - set correct controller type for Acer NGR200 (git-fixes).
• input: xpad - support Acer NGR 200 Controller (stable-fixes).
• iommu/amd: Fix geometry.aperture_end for V2 tables (git-fixes).
• iommu/amd: Set the pgsize_bitmap correctly (git-fixes).
• iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (git-fixes).
• iommu/vt-d: Fix possible circular locking dependency (git-fixes).
• iommu/vt-d: Fix system hang on reboot -f (git-fixes).
• ipv6: fix possible infinite loop in fib6infouses_dev() (git-fixes).
• ipv6: mcast: Delay put pmc->idev in mlddeldelrec() (git-fixes).
• ipv6: prevent infinite loop in rt6nlmsgsize() (git-fixes).
• ipv6: reject malicious packets in ipv6gsosegment() (git-fixes).
• iwlwifi: Add missing check for allocorderedworkqueue (git-fixes).
• jfs: fix metapage reference count leak in dbAllocCtl (git-fixes).
• kABI workaround for struct drm_framebuffer changes (git-fixes).
• kABI: Fix the module::name type in audit_context (git-fixes).
• kasan: remove kasanfindvm_area() to prevent possible deadlock (git-fixes).
• kernel-obs-qa: Do not depend on srchash when qemu emulation is used In this case the dependency is never fulfilled Fixes: 485ae1da2b88 ('kernel-obs-qa: Use srchash for dependency as well')
• kernel-syms.spec: Drop old rpm release number hack (bsc#1247172).
• leds: multicolor: Fix intensity setting while SW blinking (stable-fixes).
• lib/groupcpus.c: avoid acquiring cpu hotplug lock in groupcpus_evenly (bsc#1236897).
• lib/groupcpus: fix NULL pointer dereference from groupcpus_evenly() (bsc#1236897).
• logitech C-270 even more broken (stable-fixes).
• mapletree: fix mtdestroy_walk() on root leaf node (git-fixes).
• md/md-bitmap: fix dm-raid maxwritebehind setting (git-fixes).
• media: gspca: Add bounds checking to firmware parser (git-fixes).
• media: hi556: correct the test pattern configuration (git-fixes).
• media: imx: fix a potential memory leak in imxmediacscscalerdevice_init() (git-fixes).
• media: ov2659: Fix memory leaks in ov2659_probe() (git-fixes).
• media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (git-fixes).
• media: usbtv: Lock resolution while streaming (git-fixes).
• media: uvcvideo: Do not mark valid metadata as invalid (git-fixes).
• media: uvcvideo: Fix 1-byte out-of-bounds read in uvcparseformat() (git-fixes).
• media: v4l2-ctrls: Do not reset handler's error in v4l2ctrlhandler_free() (git-fixes).
• media: v4l2-ctrls: Fix H264 SEPARATECOLOURPLANE check (git-fixes).
• media: venus: Add a check for packet size after reading from shared memory (git-fixes).
• media: venus: hfi: explicitly release IRQ during teardown (git-fixes).
• media: venus: protect against spurious interrupts during probe (git-fixes).
• media: venus: vdec: Clamp param smaller than 1fps and bigger than 240 (git-fixes).
• media: venus: venc: Clamp param smaller than 1fps and bigger than 240 (git-fixes).
• media: vivid: fix wrong pixel_array control size (git-fixes).
• memstick: core: Zero initialize idreg in hmemstickreaddev_id() (git-fixes).
• mfd: max14577: Fix wakeup source leaks on device unbind (stable-fixes).
• misc: rtsx: usb: Ensure mmc child device is active when card is present (git-fixes).
• mmc: bcm2835: Fix dmaunmapsg() nents value (git-fixes).
• mmc: core: sd: Apply BROKENSDDISCARD quirk earlier (git-fixes).
• mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models (git-fixes).
• mmc: sdhci: Add a helper function for dump register in dynamic debug mode (stable-fixes).
• mmc: sdhci_am654: Workaround for Errata i2312 (git-fixes).
• module: Fix memory deallocation on error path in move_module() (git-fixes).
• module: Remove unnecessary +1 from lastunloadedmodule::name size (git-fixes).
• module: Restore the moduleparam prefix length check (git-fixes).
• mtd: fix possible integer overflow in erase_xfer() (git-fixes).
• mtd: rawnand: atmel: Fix dmamappingerror() address (git-fixes).
• mtd: rawnand: atmel: set pmecc data setup time (git-fixes).
• mtd: rawnand: fsmc: Add missing check after DMA map (git-fixes).
• mtd: rawnand: renesas: Add missing check after DMA map (git-fixes).
• mtd: rawnand: rockchip: Add missing check after DMA map (git-fixes).
• mtd: spi-nor: Fix spinortryunlockall() (git-fixes).
• mtd: spinand: fix memory leak of ECC engine conf (stable-fixes).
• mtd: spinand: propagate spinandwait() errors from spinandwrite_page() (git-fixes).
• mtk-sd: Fix a pagefault in dmaunmapsg() for not prepared data (git-fixes).
• mtk-sd: Prevent memory corruption from DMA map failure (git-fixes).
• mtk-sd: reset host->mrq on prepare_data() error (git-fixes).
• mwl8k: Add missing check after DMA map (git-fixes).
• nbd: fix uaf in nbdgenlconnect() error path (git-fixes).
• net/packet: fix a race in packetsetring() and packet_notifier() (git-fixes).
• net/sched: Restrict conditions for adding duplicating netems to qdisc tree (git-fixes).
• net/sched: Return NULL when htblookupleaf encounters an empty rbtree (git-fixes).
• net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (git-fixes).
• net/sched: schqfq: Avoid triggering mightsleep in atomic context in qfqdeleteclass (git-fixes).
• net/sched: schqfq: Fix race condition on qfqaggregate (git-fixes).
• net/sched: taprio: enforce minimum value for picosperbyte (git-fixes).
• net: mana: Add debug logs in MANA network driver (bsc#1246212).
• net: mana: Add handler for hardware servicing events (bsc#1245730).
• net: mana: Allocate MSI-X vectors dynamically (bsc#1245457).
• net: mana: Allow irq_setup() to skip cpus for affinity (bsc#1245457).
• net: mana: Allow tsomaxsize to go up-to GSOMAXSIZE (bsc#1246203).
• net: mana: Expose additional hardware counters for drop and TC via ethtool (bsc#1245729).
• net: mana: Set tx_packets to post gso processing packet count (bsc#1245731).
• net: mana: explain irq_setup() algorithm (bsc#1245457).
• net: phy: Do not register LEDs for genphy (git-fixes).
• net: phy: micrel: fix KSZ8081/KSZ8091 cable test (git-fixes).
• net: phy: microchip: limit 100M workaround to link-down events on LAN88xx (git-fixes).
• net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap (git-fixes).
• net: phy: smsc: Fix link failure in forced mode with Auto-MDIX (git-fixes).
• net: usb: lan78xx: fix WARN in _netifnapidellocked on disconnect (git-fixes).
• net: usb: qmi_wwan: add SIMCom 8230C composition (stable-fixes).
• net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (git-fixes).
• net: usbnet: Fix the wrong netifcarrieron() call (git-fixes).
• netpoll: prevent hanging NAPI when netcons gets enabled (git-fixes).
• nfs: Clean up /proc/net/rpc/nfs when nfsfsprocnetinit() fails (git-fixes).
• nfs: Fix filehandle bounds checking in nfsfhto_dentry() (git-fixes).
• nfs: Fix the setting of capabilities when automounting a new filesystem (git-fixes).
• nfs: Fix wakeup of _nfslookuprevalidate() in unblockrevalidate() (git-fixes).
• nfs: Fixup allocation flags for nfsiod's _GFPNORETRY (git-fixes).
• nfsd: detect mismatch of file handle and delegation stateid in OPEN op (git-fixes).
• nfsd: handle getclientlocked() failure in nfsd4setclientidconfirm() (git-fixes).
• nfsv4.2: another fix for listxattr (git-fixes).
• nfsv4.2: fix listxattr to return selinux security label (git-fixes).
• nfsv4/pNFS: Fix a race to wake on NFSLAYOUTDRAIN (git-fixes).
• nfsv4: Always set NLINK even if the server does not support it (git-fixes).
• nfsv4: xattr handlers should check for absent nfs filehandles (git-fixes).
• nilfs2: reject invalid file types when reading inodes (git-fixes).
• nvme-pci: refresh visible attrs after being checked (git-fixes).
• nvme: Fix incorrect cdw15 value in passthru error logging (git-fixes).
• nvme: fix endianness of command word prints in nvmelogerr_passthru() (git-fixes).
• nvme: fix inconsistent RCU list manipulation in nvmensaddtoctrl_list() (git-fixes).
• nvme: fix misaccounting of nvme-mpath inflight I/O (git-fixes).
• nvmet-tcp: fix callback lock for TLS handshake (git-fixes).
• objtool: Fix INSNCONTEXTSWITCH handling in validate_unret() (git-fixes).
• objtool: Fix UNWINDHINT{SAVE,RESTORE} across basic blocks (git-fixes).
• objtool: Fix THISIP_ detection for cold functions (git-fixes).
• objtool: Fix error handling inconsistencies in check() (git-fixes).
• objtool: Ignore dangling jump table entries (git-fixes).
• objtool: Ignore end-of-section jumps for KCOV/GCOV (git-fixes).
• objtool: Properly disable uaccess validation (git-fixes).
• objtool: Silence more KCOV warnings (git-fixes).
• objtool: Silence more KCOV warnings, part 2 (git-fixes).
• objtool: Stop UNRET validation on UD2 (git-fixes).
• pNFS/flexfiles: do not attempt pnfs on fatal DS errors (git-fixes).
• pchuart: Fix dmasyncsgfor_device() nents value (git-fixes).
• pci/MSI: Export pcimsixprepare_desc() for dynamic MSI-X allocations (bsc#1245457).
• pci: dwc: Make link training more robust by setting PORTLOGICLINK_WIDTH to one lane (stable-fixes).
• pci: endpoint: Fix configfs group list head handling (git-fixes).
• pci: endpoint: Fix configfs group removal on driver teardown (git-fixes).
• pci: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute (git-fixes).
• pci: endpoint: pci-epf-vntb: Return -ENOENT if pciepcgetnextfree_bar() fails (git-fixes).
• pci: hv: Allow dynamic MSI-X vector allocation (bsc#1245457).
• pci: rockchip-host: Fix 'Unexpected Completion' log message (git-fixes).
• perf: Fix sample vs do_exit() (bsc#1246547).
• phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode (git-fixes).
• pinctrl: amd: Clear GPIO debounce for suspend (git-fixes).
• pinctrl: qcom: msm: mark certain pins as invalid for interrupts (git-fixes).
• pinctrl: sunxi: Fix memory leak on krealloc failure (git-fixes).
• pinmux: fix race causing muxowner NULL with active muxusecount (git-fixes).
• platform/chrome: crosec: Unregister notifier in crosec_unregister() (git-fixes).
• platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (git-fixes).
• platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment (git-fixes).
• platform/mellanox: mlxreg-lc: Fix logic error in power state check (git-fixes).
• platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message (git-fixes).
• platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list (stable-fixes).
• platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (git-fixes).
• platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots (git-fixes).
• platform/x86: think-lmi: Create ksets consecutively (stable-fixes).
• platform/x86: think-lmi: Fix kobject cleanup (git-fixes).
• platform/x86: think-lmi: Fix sysfs group cleanup (git-fixes).
• pm / devfreq: Check governor before using governor->name (git-fixes).
• power: supply: cpcap-charger: Fix null check for powersupplygetbyname (git-fixes).
• power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (git-fixes).
• powercap: call putdevice() on an error path in powercapregistercontroltype() (stable-fixes).
• powercap: dtpmcpu: Fix NULL pointer dereference in getpdpoweruw() (git-fixes).
• powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed (git-fixes).
• powerpc/bpf: enforce full ordering for ATOMIC operations with BPF_FETCH (git-fixes).
• ptp: fix breakage after ptpvclockin_use() rework (bsc#1246506).
• pwm: imx-tpm: Reset counter if CMOD is 0 (git-fixes).
• pwm: mediatek: Ensure to disable clocks in error path (git-fixes).
• rdma/core: Rate limit GID cache warning messages (git-fixes)
• rdma/counter: Check CAPNETRAW check in user namespace for RDMA counters (git-fixes)
• rdma/hns: Drop GFP_NOWARN (git-fixes)
• rdma/hns: Fix -Wframe-larger-than issue (git-fixes)
• rdma/hns: Fix HW configurations not cleared in error flow (git-fixes)
• rdma/hns: Fix accessing uninitialized resources (git-fixes)
• rdma/hns: Fix double destruction of rsv_qp (git-fixes)
• rdma/hns: Get message length of ack_req from FW (git-fixes)
• rdma/mlx5: Check CAPNETRAW in user namespace for anchor create (git-fixes)
• rdma/mlx5: Check CAPNETRAW in user namespace for devx create (git-fixes)
• rdma/mlx5: Check CAPNETRAW in user namespace for flow create (git-fixes)
• rdma/mlx5: Fix CC counters query for MPV (git-fixes)
• rdma/mlx5: Fix HW counters query for non-representor devices (git-fixes)
• rdma/mlx5: Fix compilation warning when USER_ACCESS isn't set (git-fixes)
• rdma/mlx5: Fix vport loopback for MPV device (git-fixes)
• rdma/mlx5: Initialize objevent->objsublist before xainsert (git-fixes)
• rdma/nldev: Check CAPNETRAW in user namespace for QP modify (git-fixes)
• rdma/siw: Fix the sendmsg byte count in siwtcpsendpages (git-fixes)
• rdma/uverbs: Add empty rdmauattrshasrawcap() declaration (git-fixes)
• rdma/uverbs: Check CAPNETRAW in user namespace for QP create (git-fixes)
• rdma/uverbs: Check CAPNETRAW in user namespace for RAW QP create (git-fixes)
• rdma/uverbs: Check CAPNETRAW in user namespace for flow create (git-fixes)
• regmap: fix potential memory leak of regmap_bus (git-fixes).
• regulator: fan53555: add enable_time support and soft-start times (stable-fixes).
• regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods (git-fixes).
• regulator: pwm-regulator: Calculate the output voltage for disabled PWMs (stable-fixes).
• resource: fix false warning in _requestregion() (git-fixes).
• restore UCSICONNECTORRESET_HARD definition (git-fixes).
• ring-buffer: Do not allow events in NMI with generic atomic64 cmpxchg() (git-fixes).
• rose: fix dangling neighbour pointers in rosertdevice_down() (git-fixes).
• rpl: Fix use-after-free in rpldosrh_inline() (git-fixes).
• rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879) Put the same workaround to avoid file truncation of vmlinux and co in kernel-default-base package, too.
• rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337)
• rtc: ds1307: fix incorrect maximum clock rate handling (git-fixes).
• rtc: hym8563: fix incorrect maximum clock rate handling (git-fixes).
• rtc: nct3018y: fix incorrect maximum clock rate handling (git-fixes).
• rtc: pcf85063: fix incorrect maximum clock rate handling (git-fixes).
• rtc: pcf8563: fix incorrect maximum clock rate handling (git-fixes).
• rtc: rv3028: fix incorrect maximum clock rate handling (git-fixes).
• s390/bpf: Fix bpfarchtextpoke() with newaddr == NULL again (git-fixes bsc#1246870).
• s390/entry: Fix last breaking event handling in case of stack corruption (git-fixes bsc#1243806).
• s390/pci: Do not try re-enabling load/store if device is disabled (git-fixes bsc#1245646).
• s390/pci: Fix stale function handles in error handling (git-fixes bsc#1245647).
• s390/pkey: Prevent overflow in size calculation for memdup_user() (git-fixes bsc#1245598).
• s390: Add z17 elf platform (LTC#214086 bsc#1245540).
• samples: mei: Fix building on musl libc (git-fixes).
• sched,freezer: Remove unnecessary warning in _thawtask (bsc#1219338).
• sched: Add testandclearwakeupbit() and atomicdecandwake_up() (git-fixes).
• scsi: core: Enforce unlimited maxsegmentsize when virtboundarymask is set (git-fixes).
• scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (bsc#1245260 bsc#1243100 bsc#1246125).
• scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses (bsc#1245260 bsc#1243100 bsc#1246125).
• scsi: lpfc: Ensure HBASETUP flag is used only for SLI4 in devlosstmocallbk (bsc#1245260 bsc#1243100 bsc#1246125).
• scsi: lpfc: Modify end-of-life adapters' model descriptions (bsc#1245260 bsc#1243100 bsc#1246125 bsc#1204142).
• scsi: lpfc: Move clearing of HBASETUP flag to before lpfcsli4queueunset (bsc#1245260 bsc#1243100 bsc#1246125).
• scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr (bsc#1245260 bsc#1243100 bsc#1246125).
• scsi: lpfc: Revise CQCREATESET mailbox bitfield definitions (bsc#1245260 bsc#1243100 bsc#1246125).
• scsi: lpfc: Revise logging format for failed CT MIB requests (bsc#1245260 bsc#1243100 bsc#1246125).
• scsi: lpfc: Simplify error handling for failed lpfcgetsli4_parameters cmd (bsc#1245260 bsc#1243100 bsc#1246125).
• scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set (bsc#1245260 bsc#1243100 bsc#1246125).
• scsi: lpfc: Update debugfs trace ring initialization messages (bsc#1245260 bsc#1243100 bsc#1246125).
• scsi: lpfc: Update lpfc version to 14.4.0.10 (bsc#1245260 bsc#1243100 bsc#1246125).
• scsi: megaraid_sas: Fix invalid node index (git-fixes).
• scsi: qla2xxx: Fix DMA mapping test in qla24xxgetport_database() (git-fixes).
• scsi: qla4xxx: Fix missing DMA mapping error in qla4xxxallocpdu() (git-fixes).
• scsi: s390: zfcp: Ensure synchronous unit_add (git-fixes bsc#1245599).
• selftests/bpf: Add CFLAGS per source file and runner (git-fixes).
• selftests/bpf: Add tests for iter next method returning valid pointer (git-fixes).
• selftests/bpf: Change functions definitions to support GCC (git-fixes).
• selftests/bpf: Fix a few tests for GCC related warnings (git-fixes).
• selftests/bpf: Fix pointer arithmetic in testxdpdo_redirect (git-fixes).
• selftests/bpf: Fix prog numbers in test_sockmap (git-fixes).
• smb3: move server check earlier when setting channel sequence number (git-fixes).
• smb3: rename macro CIFSSERVERIS_CHAN to avoid confusion (git-fixes).
• smb3: send channel sequence number in SMB3 requests after reconnects (git-fixes).
• smb: client: fix parsing of device numbers (git-fixes).
• soc/tegra: cbb: Clear ERRFORCE register with ERRSTATUS (git-fixes).
• soc: aspeed: lpc-snoop: Cleanup resources in stack-order (git-fixes).
• soc: aspeed: lpc-snoop: Do not disable channels that are not enabled (git-fixes).
• soc: qcom: QMI encoding/decoding for big endian (git-fixes).
• soc: qcom: fix endianness for QMI header (git-fixes).
• soc: qcom: pmic_glink: fix OF node leak (git-fixes).
• soundwire: amd: fix for clearing command status register (git-fixes).
• soundwire: stream: restore params when prepare ports fail (git-fixes).
• spi: spi-fsl-dspi: Clear completion counter before initiating transfer (git-fixes).
• staging: axis-fifo: remove sysfs interface (git-fixes).
• staging: fbtft: fix potential memory leak in fbtftframebufferalloc() (git-fixes).
• staging: nvec: Fix incorrect null termination of battery manufacturer (git-fixes).
• struct cdns: move new member to the end (git-fixes).
• struct ucsi_operations: use padding for new operation (git-fixes).
• sunrpc: do not immediately retransmit on seqno miss (git-fixes).
• sunrpc: fix client side handling of tls alerts (git-fixes).
• sunrpc: fix handling of server side tls alerts (git-fixes).
• supported.conf: add missing entries for armv7hl
• supported.conf: move nvme-apple to optional again
• supported.conf: sort entries again
• tcp: call tcpmeasurercv_mss() for ooo packets (git-fixes).
• thunderbolt: Fix bit masking in tbdpportsethops() (git-fixes).
• thunderbolt: Fix copy+paste error in matchserviceid() (git-fixes).
• thunderbolt: Fix wake on connect at runtime (git-fixes).
• tracing/kprobe: Make tracekprobe's module callback called after jumplabel update (git-fixes).
• tracing/kprobes: Fix to free objects when failed to copy a symbol (git-fixes).
• types: Complement the aligned types with signed 64-bit one (stable-fixes).
• ucount: fix atomiclonginc_below() argument type (git-fixes).
• ucsi-glink: adapt to kABI consistency (git-fixes).
• ucsi_ccg: Refine the UCSI Interrupt handling (git-fixes).
• ucsi_operations: add stubs for all operations (git-fixes).
• ucsiops: adapt updateconnector to kABI consistency (git-fixes).
• usb: Add checks for snprintf() calls in usballocdev() (stable-fixes).
• usb: atm: cxacru: Merge cxacruuploadfirmware() into cxacruheavyinit() (git-fixes).
• usb: cdc-wdm: avoid setting WDM_READ for ZLP-s (stable-fixes).
• usb: cdnsp: Fix issue with CV Bad Descriptor test (git-fixes).
• usb: cdnsp: Fix issue with resuming from L1 (git-fixes).
• usb: cdnsp: Replace snprintf() with the safer scnprintf() variant (stable-fixes).
• usb: cdnsp: do not disable slot for disabled slot (git-fixes).
• usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume (git-fixes).
• usb: common: usb-conn-gpio: use a unique name for usb connector device (stable-fixes).
• usb: dwc2: also exit clock_gating when stopping udc while suspended (stable-fixes).
• usb: dwc3: meson-g12a: fix device leaks at unbind (git-fixes).
• usb: early: xhci-dbc: Fix early_ioremap leak (git-fixes).
• usb: gadget : fix use-after-free in compositedevcleanup() (git-fixes).
• usb: gadget: u_serial: Fix race condition in TTY wakeup (git-fixes).
• usb: gadget: udc: renesas_usb3: fix device leak at unbind (git-fixes).
• usb: host: xhci-plat: fix incorrect type for ofmatch variable in xhciplat_probe() (git-fixes).
• usb: hub: Do not try to recover devices lost during warm reset (git-fixes).
• usb: misc: apple-mfi-fastcharge: Make power supply names unique (git-fixes).
• usb: musb: fix gadget state on disconnect (git-fixes).
• usb: musb: omap2430: fix device leak at unbind (git-fixes).
• usb: net: sierra: check for no status endpoint (git-fixes).
• usb: potential integer overflow in usbgmaketpg() (stable-fixes).
• usb: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI (stable-fixes).
• usb: serial: option: add Foxconn T99W640 (stable-fixes).
• usb: serial: option: add Telit Cinterion FE910C04 (ECM) composition (stable-fixes).
• usb: typec: Update sysfs when setting ops (git-fixes).
• usb: typec: altmodes/displayport: do not index invalid pin_assignments (git-fixes).
• usb: typec: displayport: Fix potential deadlock (git-fixes).
• usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode (stable-fixes).
• usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set (stable-fixes).
• usb: typec: tcpm: allow switching to mode accessory to mux properly (stable-fixes).
• usb: typec: tcpm: allow to use sink in accessory mode (stable-fixes).
• usb: typec: tcpm: apply vbus before data bringup in tcpmsrcattach (git-fixes).
• usb: typec: ucsi: Add DATA_RESET option of Connector Reset command (git-fixes).
• usb: typec: ucsi: Add qcm6490-pmic-glink as needing PDOS quirk (git-fixes).
• usb: typec: ucsi: Delay alternate mode discovery (git-fixes).
• usb: typec: ucsi: Fix busy loop on ASUS VivoBooks (git-fixes).
• usb: typec: ucsi: Fix the partner PD revision (git-fixes).
• usb: typec: ucsi: Get PD revision for partner (git-fixes).
• usb: typec: ucsi: Set orientation as none when connector is unplugged (git-fixes).
• usb: typec: ucsi: Update power_supply on power role change (git-fixes).
• usb: typec: ucsi: add callback for connector status updates (git-fixes).
• usb: typec: ucsi: add update_connector callback (git-fixes).
• usb: typec: ucsi: do not retrieve PDOs if not supported (git-fixes).
• usb: typec: ucsi: extract code to read PD caps (git-fixes).
• usb: typec: ucsi: fix UCSI on SM8550 & SM8650 Qualcomm devices (git-fixes).
• usb: typec: ucsi: glink: fix off-by-one in connector_status (git-fixes).
• usb: typec: ucsi: glink: increase max ports for x1e80100 (git-fixes).
• usb: typec: ucsi: glink: move GPIO reading into connector_status callback (git-fixes).
• usb: typec: ucsi: glink: use typecsetorientation (git-fixes).
• usb: typec: ucsi: move ucsiacknowledge() from ucsiread_error() (git-fixes).
• usb: typec: ucsi: properly register partner's PD device (git-fixes).
• usb: typec: ucsi: support delaying GET_PDOS for device (git-fixes).
• usb: typec: ucsi_acpi: Add LG Gram quirk (git-fixes).
• usb: typec: ucsiglink: drop NOPARTNER_PDOS quirk for sm8550 / sm8650 (git-fixes).
• usb: typec: ucsiglink: enable the UCSIDELAYDEVICEPDOS quirk (git-fixes).
• usb: typec: ucsiglink: enable the UCSIDELAYDEVICEPDOS quirk on qcm6490 (git-fixes).
• usb: typec: ucsi_glink: rework quirks implementation (git-fixes).
• usb: xhci: Skip xhcireset in xhciresume if xhci is being removed (git-fixes).
• usb: xhci: quirk for data loss in ISOC transfers (stable-fixes).
• usb:cdnsp: remove TRBFLUSHENDPOINT command (stable-fixes).
• virtgpu: do not reset on shutdown (git-fixes).
• vmci: Prevent the dispatching of uninitialized payloads (git-fixes).
• vt: add missing notification when switching back to text mode (stable-fixes).
• vt: defkeymap: Map keycodes above 127 to K_HOLE (git-fixes).
• vt: keyboard: Do not process Unicode characters in K_OFF mode (git-fixes).
• watchdog: ziiravewdt: check record length in ziiravefirm_verify() (git-fixes).
• wifi: ath11k: clear initialized flag for deinit-ed srng lists (git-fixes).
• wifi: ath11k: fix dest ring-buffer corruption (git-fixes).
• wifi: ath11k: fix dest ring-buffer corruption when ring is full (git-fixes).
• wifi: ath11k: fix sleeping-in-atomic in ath11kmacopsetbitrate_mask() (git-fixes).
• wifi: ath11k: fix source ring-buffer corruption (git-fixes).
• wifi: ath11k: fix suspend use-after-free after probe failure (git-fixes).
• wifi: ath12k: fix dest ring-buffer corruption (git-fixes).
• wifi: ath12k: fix dest ring-buffer corruption when ring is full (git-fixes).
• wifi: ath12k: fix endianness handling while accessing wmi service bit (git-fixes).
• wifi: ath12k: fix source ring-buffer corruption (git-fixes).
• wifi: ath6kl: remove WARN on bad firmware input (stable-fixes).
• wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (git-fixes).
• wifi: brcmsmac: Remove const from tblptr parameter in wlclcnphycommonread_table() (git-fixes).
• wifi: iwlwifi: Fix error code in iwlopmodedvmstart() (git-fixes).
• wifi: iwlwifi: Fix memory leak in iwlmvminit() (git-fixes).
• wifi: iwlwifi: return ERR_PTR from opmode start() (stable-fixes).
• wifi: mac80211: Add link iteration macro for link data (stable-fixes).
• wifi: mac80211: Check 802.11 encaps offloading in ieee80211txhselectkey() (git-fixes).
• wifi: mac80211: Do not call fqflowidx() for management frames (git-fixes).
• wifi: mac80211: Do not schedule stopped TXQs (git-fixes).
• wifi: mac80211: chan: chandef is non-NULL for reserved (stable-fixes).
• wifi: mac80211: drop invalid source address OCB frames (stable-fixes).
• wifi: mac80211: reject TDLS operations when station is not associated (git-fixes).
• wifi: mt76: mt7925: Fix null-ptr-deref in mt7925thermalinit() (git-fixes).
• wifi: mt76: mt7925: fix invalid array index in ssid assignment during hw scan (git-fixes).
• wifi: mt76: mt7925: fix the wrong config for tx interrupt (git-fixes).
• wifi: plfxlc: Fix error handling in usb driver probe (git-fixes).
• wifi: prevent A-MSDU attacks in mesh networks (stable-fixes).
• wifi: rtl818x: Kill URBs before clearing tx status queue (git-fixes).
• wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (git-fixes).
• wifi: zd1211rw: Fix potential NULL pointer dereference in zdmactxtodev() (git-fixes).
• x86/cpu/amd: Fix workaround for erratum 1054 (git-fixes).
• x86/mce/amd: Add default names for MCA banks and blocks (git-fixes).
• x86/mce/amd: Fix threshold limit reset (git-fixes).
• x86/mce: Do not remove sysfs if thresholding sysfs init fails (git-fixes).
• x86/mce: Make sure CMCI banks are cleared during shutdown on Intel (git-fixes).
• x86/tdx: Fix _noreturn build warning around _tdxhypercallfailed() (git-fixes).
• x86/traps: Initialize DR6 by writing its architectural reset value (git-fixes).
• x86/virt/tdx: Avoid indirect calls to TDX assembly functions (git-fixes).
• x86: UV RTC: Add parameter to disable RTC clocksource (bsc#1241345).
• xfs: fix off-by-one error in fsmap's end_daddr usage (bsc#1235837).
• xfs: only create event xfsfilecompatioctl when CONFIGCOMPAT is configure (git-fixes).
• xfs: remove unused event xfsallocnear_error (git-fixes).
• xfs: remove unused event xfsallocnear_nominleft (git-fixes).
• xfs: remove unused event xfsattrnode_removename (git-fixes).
• xfs: remove unused event xfsioctlclone (git-fixes).
• xfs: remove unused event xfspagecacheinval (git-fixes).
• xfs: remove unused event xlogiclogwant_sync (git-fixes).
• xfs: remove unused trace event xfsattrremoveiterreturn (git-fixes).
• xfs: remove unused trace event xfsattrrmtval_set (git-fixes).
• xfs: remove unused trace event xfsreflinkcow_enospc (git-fixes).
• xfs: remove unused xfs_attr events (git-fixes).
• xfs: remove unused xfsreflinkcompare_extents events (git-fixes).
• xfs: remove usused xfsendio_direct events (git-fixes).
• xhci: Disable stream for xHC controller with XHCIBROKENSTREAMS (git-fixes).
• xhci: dbc: Flush queued requests before stopping dbc (git-fixes).
• xhci: dbctty: disable ECHO flag by default (git-fixes).