SUSE-SU-2026:1081-1

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

• CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpicmpui() (bsc#1254992).
• CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
• CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
• CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfsdcompare (bsc#1249998).
• CVE-2025-39964: crypto: afalg - Disallow concurrent writes in afalg_sendmsg (bsc#1251966).
• CVE-2025-40099: cifs: parsedfsreferrals: prevent oob on malformed input (bsc#1252911).
• CVE-2025-40103: smb: client: Fix refcount leak for cifssbtlink (bsc#1252924).
• CVE-2025-40201: kernel/sys.c: fix the racy usage of tasklock(tsk->groupleader) in sys_prlimit64() paths (bsc#1253455).
• CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
• CVE-2025-68283: libceph: replace BUGON with bounds check for map->maxosd (bsc#1255379).
• CVE-2025-68295: smb: client: fix memory leak in cifsconstructtcon() (bsc#1255129).
• CVE-2025-68374: md: fix rcu protection in mdwakeupthread (bsc#1255530).
• CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
• CVE-2025-68736: landlock: Fix handling of disconnected directories (bsc#1255698).
• CVE-2025-68778: btrfs: don't log conflicting inode if it's a dir moved in the current transaction (bsc#1256683).
• CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
• CVE-2025-68810: KVM: Disallow toggling KVMMEMGUEST_MEMFD on an existing memslot (bsc#1256679).
• CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange (bsc#1256645).
• CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
• CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
• CVE-2025-71113: crypto: afalg - zero initialize memory allocated via sockkmalloc (bsc#1256716).
• CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
• CVE-2025-71126: mptcp: reset fallback status gracefully at disconnect() time (bsc#1256755).
• CVE-2025-71148: net/handshake: restore destructor on submit failure (bsc#1257159).
• CVE-2025-71184: btrfs: fix NULL dereference on root when tracing inode eviction (bsc#1257635).
• CVE-2025-71194: btrfs: fix deadlock in waitcurrenttrans() due to ignored transaction type (bsc#1257687).
• CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
• CVE-2026-22979: net: fix memory leak in skbsegmentlist for GRO packets (bsc#1257228).
• CVE-2026-22982: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179).
• CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmettcpbuildpduiovec (bsc#1257209).
• CVE-2026-23003: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246).
• CVE-2026-23004: dst: fix races in rt6uncachedlistdel() and rtdeluncachedlist() (bsc#1257231).
• CVE-2026-23010: ipv6: Fix use-after-free in inet6addrdel() (bsc#1257332).
• CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
• CVE-2026-23023: idpf: fix memory leak in idpfvportrel() (bsc#1257556).
• CVE-2026-23035: net/mlx5e: Pass netdev to mlx5edestroynetdev instead of priv (bsc#1257559).
• CVE-2026-23053: NFS: Fix a deadlock involving nfsreleasefolio() (bsc#1257718).
• CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
• CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
• CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
• CVE-2026-23069: vsock/virtio: fix potential underflow in virtiotransportget_credit() (bsc#1257755).
• CVE-2026-23070: Octeontx2-af: Add proper checks for fwdata (bsc#1257709).
• CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
• CVE-2026-23083: fou: Don't allow 0 for FOUATTRIPPROTO (bsc#1257745).
• CVE-2026-23084: be2net: Fix NULL pointer dereference in becmdgetmacfrom_list (bsc#1257830).
• CVE-2026-23085: irqchip/gic-v3-its: Avoid truncating memory addresses (bsc#1257758).
• CVE-2026-23086: vsock/virtio: cap TX credit to local buffer size (bsc#1257757).
• CVE-2026-23088: tracing: Fix crash on synthetic stacktrace field usage (bsc#1257814).
• CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in sndusbmixer_free() (bsc#1257790).
• CVE-2026-23095: gue: Fix skb memleak with inner IP protocol 0 (bsc#1257808).
• CVE-2026-23099: bonding: limit BONDMODE8023AD to Ethernet devices (bsc#1257816).
• CVE-2026-23102: arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state (bsc#1257772).
• CVE-2026-23104: ice: fix devlink reload call trace (bsc#1257763).
• CVE-2026-23105: net/sched: qfq: Use clisactive to determine whether class is active in qfqrmfrom_ag (bsc#1257775).
• CVE-2026-23107: arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (bsc#1257762).
• CVE-2026-23110: scsi: core: Wake up the error handler when final completions race against each other (bsc#1257761).
• CVE-2026-23111: netfilter: nftables: fix inverted genmask check in nftmapcatchallactivate() (bsc#1258181).
• CVE-2026-23112: nvmet-tcp: add bounds checks in nvmettcpbuildpduiovec (bsc#1258184).
• CVE-2026-23113: iouring/io-wq: check IOWQBITEXIT inside work run loop (bsc#1258278).
• CVE-2026-23116: pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu (bsc#1258277).
• CVE-2026-23119: bonding: provide a net pointer to __skbflowdissect() (bsc#1258273).
• CVE-2026-23125: sctp: move SCTPCMDASSOCSHKEY right after SCTPCMDPEERINIT (bsc#1258293).
• CVE-2026-23139: netfilter: nfconncount: update lastgc only when GC has been performed (bsc#1258304).
• CVE-2026-23141: btrfs: send: check for inline extents in rangeisholeinparent() (bsc#1258377).
• CVE-2026-23154: net: fix segmentation of forwarding fraglist GRO (bsc#1258286).
• CVE-2026-23166: ice: Fix NULL pointer dereference in icevsisetnapiqueues (bsc#1258272).
• CVE-2026-23169: mptcp: fix race in mptcppmnlflushaddrs_doit() (bsc#1258389).
• CVE-2026-23171: net: bonding: update the slave array for broadcast mode (bsc#1258349).
• CVE-2026-23173: net/mlx5e: TC, delete flows only for existing peers (bsc#1258520).
• CVE-2026-23179: nvmet-tcp: fixup hang in nvmettcplistendataready() (bsc#1258394).
• CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
• CVE-2026-23198: KVM: Don't clobber irqfd routing type when deassigning irqfd (bsc#1258321).
• CVE-2026-23204: net/sched: clsu32: use skbheaderpointercareful() (bsc#1258340).
• CVE-2026-23208: ALSA: usb-audio: Prevent excessive number of frames (bsc#1258468).
• CVE-2026-23209: macvlan: fix error recovery in macvlancommonnewlink() (bsc#1258518).
• CVE-2026-23210: ice: Fix PTP NULL pointer dereference during VSI rebuild (bsc#1258517).
• CVE-2026-23213: drm/amd/pm: Disable MMIO access during SMU Mode 1 reset (bsc#1258465).
• CVE-2026-23214: btrfs: reject new transactions if the fs is fully read-only (bsc#1258464).
• CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1258850).
• CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1259857).

The following non security issues were fixed:

• ACPI: CPPC: Fix remaining foreachpossible_cpu() to use online CPUs (git-fixes).
• ACPI: OSL: fix __iomem type on return from acpiosmapgenericaddress() (git-fixes).
• ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO (git-fixes).
• ACPI: processor: Fix NULL-pointer dereference in acpiprocessorerrata_piix4() (stable-fixes).
• ACPICA: Abort AML bytecode execution when executing AMLFATALOP (stable-fixes).
• ACPICA: Fix NULL pointer dereference in acpievaddressspacedispatch() (git-fixes).
• ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro (stable-fixes).
• ALSA: hda/realtek - fixed speaker no sound (stable-fixes).
• ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk (stable-fixes).
• ALSA: hda/realtek: Add quirk for Inspur S14-G1 (stable-fixes).
• ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU (stable-fixes).
• ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine (stable-fixes).
• ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU (git-fixes).
• ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (stable-fixes).
• ALSA: usb-audio: Add sanity check for OOB writes at silencing (stable-fixes).
• ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 (stable-fixes).
• ALSA: usb-audio: Cap the packet size pre-calculations (git-fixes).
• ALSA: usb-audio: Check max frame size for implicit feedback mode, too (stable-fixes).
• ALSA: usb-audio: fix broken logic in sndaudigy2nxled_update() (git-fixes).
• ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices (git-fixes).
• ALSA: usb-audio: Update the number of packets properly at receiving (stable-fixes).
• ALSA: usb-audio: Use correct version for UAC3 header validation (git-fixes).
• ALSA: usb-audio: Use inclusive terms (git-fixes).
• ALSA: vmaster: Relax __free() variable declarations (git-fixes).
• APEI/GHES: ensure that won't go past CPER allocated record (stable-fixes).
• apparmor: fix differential encoding verification (bsc#1258849).
• apparmor: Fix double free of nsname in aareplace_profiles() (bsc#1258849).
• apparmor: fix memory leak in verify_header (bsc#1258849).
• apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1258849).
• apparmor: fix race between freeing data and fs accessing it (bsc#1258849).
• apparmor: fix race on rawdata dereference (bsc#1258849).
• apparmor: fix side-effect bug in match_char() macro usage (bsc#1258849).
• apparmor: fix unprivileged local user can do privileged policy management (bsc#1258849).
• apparmor: fix: limit the number of levels of policy namespaces (bsc#1258849).
• apparmor: replace recursive profile removal with iterative approach (bsc#1258849).
• apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1258849).
• arm64: Add support for TSV110 Spectre-BHB mitigation (git-fixes).
• arm64: Disable branch profiling for all arm64 code (git-fixes).
• arm64: Set __nocfi on swsusparchresume() (git-fixes).
• ASoC: amd: drop unused Kconfig symbols (git-fixes).
• ASoC: amd: fix memory leak in acp3x pdm dma ops (git-fixes).
• ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list (stable-fixes).
• ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO (stable-fixes).
• ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR (stable-fixes).
• ASoC: amd: yc: Add quirk for HP 200 G2a 16 (stable-fixes).
• ASoC: amd: yc: Fix microphone on ASUS M6500RE (stable-fixes).
• ASoC: codecs: max98390: Check return value of devmgpiodgetoptional() in max98390i2c_probe() (stable-fixes).
• ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel (stable-fixes).
• ASoC: cs42l43: Correct handling of 3-pole jack load detection (stable-fixes).
• ASoC: davinci-evm: Fix reference leak in davincievmprobe (stable-fixes).
• ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9 (stable-fixes).
• ASoC: nau8821: Avoid unnecessary blocking in IRQ handler (stable-fixes).
• ASoC: nau8821: Cancel delayed work on component remove (git-fixes).
• ASoC: nau8821: Cancel pending work before suspend (git-fixes).
• ASoC: nau8821: Consistently clear interrupts before unmasking (git-fixes).
• ASoC: nau8821: Fixup nau8821enablejack_detect() (git-fixes).
• ASoC: pxa: drop unused Kconfig symbol (git-fixes).
• ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk (git-fixes).
• ASoC: SOF: ipc4-control: If there is no data do not send bytes update (git-fixes).
• ASoC: SOF: ipc4-control: Keep the payload size up to date (git-fixes).
• ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipccontroldata (git-fixes).
• ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls (git-fixes).
• ASoC: sunxi: sun50i-dmic: Add missing check for devmregmapinit_mmio (stable-fixes).
• ASoC: tlv320adcx140: Propagate error codes during probe (stable-fixes).
• ASoC: wm8962: Add WM8962ADCMONOMIX to '3D Coefficients' mask (stable-fixes).
• ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug (stable-fixes).
• ata: libata: avoid long timeouts on hot-unplugged SATA DAS (stable-fixes).
• ata: pata_ftide010: Fix some DMA timings (git-fixes).
• atm: fore200e: fix use-after-free in tasklets during device removal (git-fixes).
• auxdisplay: arm-charlcd: fix releasememregion() size (git-fixes).
• backlight: qcom-wled: Change PM8950 WLED configurations (git-fixes).
• backlight: qcom-wled: Support ovp values for PMI8994 (git-fixes).
• batman-adv: Avoid double-rtnl_lock ELP metric worker (git-fixes).
• block,bfq: fix aux stat accumulation destination (git-fixes).
• Bluetooth: btintelpcie: Use IRQFONESHOT and default primary handler (git-fixes).
• Bluetooth: btusb: Add device ID for Realtek RTL8761BU (stable-fixes).
• Bluetooth: btusb: Add new VID/PID for RTL8852CE (stable-fixes).
• Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB (stable-fixes).
• Bluetooth: hciconn: Set linkpolicy on incoming ACL connections (stable-fixes).
• Bluetooth: hciconn: use moddelayed_work for active mode timeout (stable-fixes).
• Bluetooth: hci_qca: Cleanup on all setup failures (git-fixes).
• Bluetooth: L2CAP: Fix invalid response to L2CAPECREDRECONF_REQ (git-fixes).
• Bluetooth: L2CAP: Fix missing key size check for L2CAPLECONN_REQ (git-fixes).
• Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAPECREDCONN_REQ (git-fixes).
• Bluetooth: L2CAP: Fix response to L2CAPECREDCONN_REQ (git-fixes).
• Bluetooth: L2CAP: Fix result of L2CAPECREDCONN_RSP when MTU is too short (git-fixes).
• bonding: only set speed/duplex to unknown, if getting speed failed (bsc#1253691).
• bpf: selftests: Move xfrm tunnel test to test_progs (bsc#1258860).
• bpf: selftests: test_tunnel: Setup fresh topology for each subtest (bsc#1258860).
• bpf: selftests: test_tunnel: Use vmlinux.h declarations (bsc#1258860).
• bpf: verifier improvement in 32bit shift sign extension pattern (git-fixes).
• bpf: xfrm: Add bpfxdpgetxfrmstate() kfunc (bsc#1258860).
• bpf: xfrm: Add selftest for bpfxdpgetxfrmstate() (bsc#1258860).
• btrfs: scrub: always update btrfsscrubprogress::last_physical (git-fixes).
• bus: fsl-mc: fix an error handling in fslmcdevice_add() (git-fixes).
• bus: fsl-mc: fix use-after-free in driveroverrideshow() (git-fixes).
• bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions (stable-fixes).
• can: bcm: fix locking for bcm_op runtime updates (git-fixes).
• can: emsusb: emsusbreadbulk_callback(): check the proper length of a message (git-fixes).
• can: hi311x: hi3110open(): add check for hi3110power_enable() return value (git-fixes).
• can: mcp251x: fix deadlock in error path of mcp251x_open (git-fixes).
• can: ucan: Fix infinite loop from zero-length messages (git-fixes).
• can: usb: etas_es58x: correctly anchor the urb in the read bulk callback (git-fixes).
• cgroup: Fix incorrect WARNONONCE() in cssreleasework_fn() (bsc#1256564 bsc#1259130).
• cgroup: Show # of subsystem CSSes in cgroup.stat (bsc#1256564 bsc#1259130).
• char: tpm: cr50: Remove IRQF_ONESHOT (git-fixes).
• char: tpm: cr50: Remove IRQF_ONESHOT (stable-fixes).
• cifs: add xid to query server interface call (git-fixes).
• clk: clk-apple-nco: Add 'apple,t8103-nco' compatible (git-fixes).
• clk: mediatek: Fix error handling in runtime PM setup (git-fixes).
• clk: meson: g12a: Limit the HDMI PLL OD to /4 (git-fixes).
• clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs (git-fixes).
• clk: mvebu: cp110 add CLKIGNOREUNUSED to pciex10, pciex11 & (git-fixes).
• clk: qcom: dispcc-sdm845: Enable parents for pixel clocks (git-fixes).
• clk: qcom: gcc-msm8917: Remove ALWAYSON flag from cppgdsc (git-fixes).
• clk: qcom: gcc-msm8953: Remove ALWAYSON flag from cppgdsc (git-fixes).
• clk: qcom: gfx3d: add parent to parent request map (git-fixes).
• clk: qcom: rcg2: compute 2d using duty fraction directly (git-fixes).
• clk: renesas: rzg2l: Fix intin variable size (git-fixes).
• clk: renesas: rzg2l: Select correct div round macro (git-fixes).
• clk: tegra: tegra124-emc: fix device leak on set_rate() (git-fixes).
• clk: tegra: tegra124-emc: Fix potential memory leak in tegra124clkregister_emc() (git-fixes).
• clocksource: hyper-v: Fix warnings for missing export.h header inclusion (git-fixes).
• clocksource: Print durations for sync check unconditionally (bsc#1241345).
• clocksource: Reduce watchdog readout delay limit to prevent false positives (bsc#1241345).
• config.conf: add kernel-azure as additonal flavor (bsc#1258037).
• config.conf: Drop armv7hl builds (bsc#1255265).
• cpu: export lockdepassertcpus_held() (git-fixes).
• cpufreq/amd-pstate: Add missing NULL ptr check in amdpstateupdate (bsc#1247180).
• cpufreq/amd-pstate: Add the missing cpufreqcpuput() (bsc#1247180).
• cpufreq/amd-pstate: fix setting policy current frequency value (bsc#1247180).
• cpufreq/amd-pstate: Fix the clamping of perf values (bsc#1247180).
• cpufreq/amd-pstate: Modularize perf<->freq conversion (bsc#1247180).
• cpufreq/amd-pstate: Refactor max frequency calculation (bsc#1247180).
• cpufreq/amd-pstate: store all values in cpudata struct in khz (bsc#1247180).
• cpufreq: amd-pstate: Unify computation of {max,min,nominal,lowest_nonlinear}_freq (bsc#1247180).
• crypto: cavium - fix dmafreecoherent() size (git-fixes).
• crypto: ccp - Add an S4 restore flow (git-fixes).
• crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable (git-fixes).
• crypto: hisilicon/trng - support tfms sharing the device (git-fixes).
• crypto: hisilicon/zip - adjust the way to obtain the req in the callback function (git-fixes).
• crypto: iaa - Fix out-of-bounds index in findemptyiaacompressionmode (git-fixes).
• crypto: octeontx - fix dmafreecoherent() size (git-fixes).
• crypto: octeontx - Fix length check to avoid truncation in ucodeloadstore (git-fixes).
• crypto: omap - Allocate OMAPCRYPTOFORCE_COPY scatterlists correctly (git-fixes).
• crypto: qat - fix parameter order used in ICPQATFWCOMNFLAGS_BUILD (git-fixes).
• crypto: qat - fix warning on adfpfvfpf_proto.c (git-fixes).
• crypto: virtio - Add spinlock protection with virtqueue notification (git-fixes).
• crypto: virtio - Remove duplicated virtqueuekick in virtiocryptoskciphercrypt_req (git-fixes).
• device property: Allow secondary lookup in fwnodegetnextchildnode() (git-fixes).
• dm mpath: make pginitdelay_msecs settable (git-fixes).
• dm-bufio: align write boundary on physical block size (git-fixes).
• dm-ebs: Mark full buffer dirty even on partial write (git-fixes).
• dm-snapshot: fix 'scheduling while atomic' on real-time kernels (git-fixes).
• dm: clear cloned request bio pointer when last clone bio completes (git-fixes).
• dm: remove fake timeout to avoid leak request (git-fixes).
• dma: dma-axi-dmac: fix SW cyclic transfers (git-fixes).
• dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX (git-fixes).
• dmaengine: sun6i: Choose appropriate burst length under maxburst (stable-fixes).
• Documentation: mailbox: mboxchanops.flush() is optional (git-fixes).
• Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors (git-fixes).
• drivers/hv: add CPU offlining support (git-fixes).
• drivers/hv: introduce vmbuschannelset_cpu() (git-fixes).
• Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary (git-fixes).
• Drivers: hv: Always do Hyper-V panic notification in hvkmsgdump() (git-fixes).
• Drivers: hv: Fix bad pointer dereference in hvgetpartition_id (git-fixes).
• Drivers: hv: fix missing kernel-doc description for 'size' in requestarrinit() (git-fixes).
• Drivers: hv: Fix the check for HYPERVISORCALLBACKVECTOR (git-fixes).
• Drivers: hv: Fix warnings for missing export.h header inclusion (git-fixes).
• Drivers: hv: remove stale comment (git-fixes).
• Drivers: hv: Resolve ambiguity in hypervisor version log (git-fixes).
• Drivers: hv: use kmalloc_array() instead of kmalloc() (git-fixes).
• Drivers: hv: Use kzalloc for panic page allocation (git-fixes).
• Drivers: hv: util: Cosmetic changes for hvutilstransport.c (git-fixes).
• Drivers: hv: vmbus: Add comments about races with 'channels' sysfs dir (git-fixes).
• Drivers: hv: vmbus: Clean up sscanf format specifier in targetcpustore() (git-fixes).
• Drivers: hv: vmbus: Fix sysfs output format for ring buffer index (git-fixes).
• Drivers: hv: vmbus: Fix typos in vmbus_drv.c (git-fixes).
• Drivers: hv: vmbus: Get the IRQ number from DeviceTree (git-fixes).
• Drivers: hv: vmbus: Introduce hvgetvmbusrootdevice() (git-fixes).
• drivers: iio: mpu3050: use deverrprobe for regulator request (git-fixes).
• drm/amd/display: Add signal type check for dcn401 getphyd32clksrc (stable-fixes).
• drm/amd/display: Add USB-C DP Alt Mode lane limitation in DCN32 (stable-fixes).
• drm/amd/display: avoid dig reg access timeout on usb4 link training fail (stable-fixes).
• drm/amd/display: Avoid updating surface with the same surface under MPO (stable-fixes).
• drm/amd/display: bypass post csc for additional color spaces in dal (stable-fixes).
• drm/amd/display: Disable FEC when powering down encoders (stable-fixes).
• drm/amd/display: extend delta clamping logic to CM3 LUT helper (stable-fixes).
• drm/amd/display: Fix dsc eDP issue (stable-fixes).
• drm/amd/display: Fix GFX12 family constant checks (stable-fixes).
• drm/amd/display: Fix out-of-bounds stream encoder index v3 (git-fixes).
• drm/amd/display: Fix system resume lag issue (stable-fixes).
• drm/amd/display: Fix writeback on DCN 3.2+ (stable-fixes).
• drm/amd/display: fix wrong color value mapping on MCM shaper LUT (git-fixes).
• drm/amd/display: Increase DCN35 SR enter/exit latency (stable-fixes).
• drm/amd/display: only power down dig on phy endpoints (stable-fixes).
• drm/amd/display: Reject cursor plane on DCE when scaled differently than primary (git-fixes).
• drm/amd/display: remove assert around dpp_base replacement (stable-fixes).
• drm/amd/display: Remove conditional for shaper 3DLUT power-on (stable-fixes).
• drm/amd/display: Use same max plane scaling limits for all 64 bpp formats (git-fixes).
• drm/amd/pm: Disable MMIO access during SMU Mode 1 reset (stable-fixes).
• drm/amd: Disable MES LR compute W/A (git-fixes).
• drm/amd: Drop 'amdgpu kernel modesetting enabled' message (git-fixes).
• drm/amd: Fix hang on amdgpu unload by using pcidevis_disconnected() (git-fixes).
• drm/amdgpu/gfx10: fix wptr reset in KGQ init (stable-fixes).
• drm/amdgpu/gfx11: fix wptr reset in KGQ init (stable-fixes).
• drm/amdgpu/gfx12: fix wptr reset in KGQ init (stable-fixes).
• drm/amdgpu/soc21: fix xclk for APUs (stable-fixes).
• drm/amdgpu: Add HAINAN clock adjustment (stable-fixes).
• drm/amdgpu: add support for HDP IP version 6.1.1 (stable-fixes).
• drm/amdgpu: Adjust usleep_range in fence wait (stable-fixes).
• drm/amdgpu: avoid a warning in timedout job handler (stable-fixes).
• drm/amdgpu: ensure nohwaccess is visible before MMIO (git-fixes).
• drm/amdgpu: Fix locking bugs in error paths (git-fixes).
• drm/amdgpu: Fix memory leak in amdgpuacpienumerate_xcc() (git-fixes).
• drm/amdgpu: Fix memory leak in amdgpurasinit() (git-fixes).
• drm/amdgpu: fix NULL pointer issue buffer funcs (stable-fixes).
• drm/amdgpu: fix sync handling in amdgpudmabufmovenotify (git-fixes).
• drm/amdgpu: keep vga memory on MacBooks with switchable graphics (stable-fixes).
• drm/amdgpu: remove invalid usage of sched.ready (stable-fixes).
• drm/amdgpu: Replace kzalloc + copyfromuser with memdup_user (stable-fixes).
• drm/amdgpu: Skip loading SDMA_RS64 in VF (stable-fixes).
• drm/amdgpu: stop unmapping MQD for kernel queues v3 (stable-fixes).
• drm/amdgpu: Unlock a mutex before destroying it (git-fixes).
• drm/amdgpu: Use kvfree instead of kfree in amdgpugmcgetnpsmemranges() (git-fixes).
• drm/amdkfd: fix debug watchpoints for logical devices (stable-fixes).
• drm/amdkfd: Fix GART PTE for non-4K pagesize in svmmigrategart_map() (stable-fixes).
• drm/amdkfd: Fix out-of-bounds write in kfdeventpage_set() (stable-fixes).
• drm/amdkfd: Fix signalevictionfence() bool return value (git-fixes).
• drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (git-fixes).
• drm/amdkfd: Handle GPU reset and drain retry fault race (stable-fixes).
• drm/amdkfd: Relax size checking during queue buffer get (stable-fixes).
• drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts (stable-fixes).
• drm/atmel-hlcdc: fix memory leak from the atomicdestroystate callback (stable-fixes).
• drm/atmel-hlcdc: fix use-after-free of drmcrtccommit after release (stable-fixes).
• drm/bridge: anx7625: Fix invalid EDID size (git-fixes).
• drm/bridge: samsung-dsim: Fix memory leak in error path (git-fixes).
• drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used (git-fixes).
• drm/buddy: Prevent BUG_ON by validating rounded allocation (git-fixes).
• drm/display/dp_mst: Add protection against 0 vcpi (stable-fixes).
• drm/i915/acpi: free _DSM package when no connectors (git-fixes).
• drm/i915/display: Add quirk to skip retraining of dp link (bsc#1253129).
• drm/i915/wakeref: clean up INTELWAKEREFPUT_* flag macros (stable-fixes).
• drm/logicvc: Fix device node reference leak in logicvcdrmconfig_parse() (git-fixes).
• drm/mgag200: fix mgag200bmcstop_scanout() (git-fixes).
• drm/msm/a2xx: fix pixel shader start on A225 (git-fixes).
• drm/msm/disp: set num_planes to 1 for interleaved YUV formats (git-fixes).
• drm/msm/dpu: drop intr_start from DPU 3.x catalog files (git-fixes).
• drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x (git-fixes).
• drm/msm/dpu: fix WD timer handling on DPU 8.x (git-fixes).
• drm/msm/dpu: Set vsync source irrespective of mdp top support (git-fixes).
• drm/panel: Fix a possible null-pointer dereference in jdipaneldsi_remove() (stable-fixes).
• drm/panel: sw43408: Remove manual invocation of unprepare at remove (git-fixes).
• drm/panthor: Evict groups before VM termination (git-fixes).
• drm/panthor: Fix immediate ticking on a disabled tick (git-fixes).
• drm/panthor: Fix the full_tick check (git-fixes).
• drm/panthor: Fix the group priority rotation logic (git-fixes).
• drm/panthor: Fix the logic that decides when to stop ticking (git-fixes).
• drm/panthor: Make sure we resume the tick when new jobs are submitted (git-fixes).
• drm/panthor: Recover from panthorgpuflush_caches() failures (git-fixes).
• drm/radeon: Add HAINAN clock adjustment (stable-fixes).
• drm/radeon: delete radeonfenceprocess in is_signaled, no deadlock (stable-fixes).
• drm/sched: Fix kernel-doc warning for drmschedjob_done() (git-fixes).
• drm/solomon: Fix page start when updating rectangle in page addressing mode (git-fixes).
• drm/tegra: dsi: fix device leak on probe (git-fixes).
• drm/tegra: hdmi: sor: Fix error: variable 'j' set but not used (stable-fixes).
• drm/tests: shmem: Swap names of export tests (git-fixes).
• drm/v3d: Set DMA segment size to avoid debug warnings (stable-fixes).
• drm/vmwgfx: Fix invalid krefput callback in vmwbodirtyrelease (git-fixes).
• drm/vmwgfx: Return the correct value in vmwtranslateptr functions (git-fixes).
• drm/xe/mmio: Avoid double-adjust in 64-bit reads (git-fixes).
• drm/xe/pm: Also avoid missing outer rpm warning on system suspend (stable-fixes).
• drm/xe/pm: Disable D3Cold for BMG only on specific platforms (git-fixes).
• drm/xe/ptl: Apply Wa_13011645652 (stable-fixes).
• drm/xe/query: Fix topology query pointer advance (git-fixes).
• drm/xe/sync: Cleanup partially initialized sync on parse failure (git-fixes).
• drm/xe/xe2_hpg: Add set of workarounds (stable-fixes).
• drm/xe/xe2hpg: Fix handling of Wa14019988906 & Wa_14019877138 (git-fixes).
• drm/xe: Add xetile backpointer to xemmio (stable-fixes).
• drm/xe: Adjust mmio code to pass VF substructure to SRIOV code (stable-fixes).
• drm/xe: Clarify size of MMIO region (stable-fixes).
• drm/xe: Create dedicated xe_mmio structure (stable-fixes).
• drm/xe: Defer gt->mmio initialization until after multi-tile setup (git-fixes).
• drm/xe: Move forcewake to 'gt.pm' substructure (stable-fixes).
• drm/xe: Move GSI offset adjustment fields into 'struct xe_mmio' (stable-fixes).
• drm/xe: Only toggle scheduling in TDR if GuC is running (stable-fixes).
• drm/xe: Populate GT's mmio iomap from tile during init (stable-fixes).
• drm/xe: Switch MMIO interface to take xemmio instead of xegt (stable-fixes).
• drm/xe: Switch mmioext to use 'struct xemmio' (stable-fixes).
• drm/xe: Unregister drm device on probe error (git-fixes).
• drm: Account property blob allocations to memcg (stable-fixes).
• efi: Fix reservation of unaccepted memory table (git-fixes).
• efivarfs: fix error propagation in efivarentryget() (git-fixes).
• ext4: fix iloc.bh leak in ext4xattrinodeupdateref (git-fixes).
• fbcon: check return value of con2fbacquirenewinfo() (git-fixes).
• fbdev: au1200fb: Fix a memory leak in au1200fbdrvprobe() (git-fixes).
• fbdev: ffb: fix corrupted video output on Sun FFB1 (stable-fixes).
• fbdev: of: displaytiming: fix refcount leak in ofgetdisplaytimings() (git-fixes).
• fbdev: rivafb: fix divide error in nv3_arb() (git-fixes).
• fbdev: smscufx: properly copy ioctl memory to kernelspace (stable-fixes).
• fbdev: vt8500lcdfb: fix missing dmafreecoherent() (git-fixes).
• fpga: dfl: use subsys_initcall to allow built-in drivers to be added (git-fixes).
• fpga: of-fpga-region: Fail if any bridge is missing (stable-fixes).
• genirq: Set IRQFCONDONESHOT in devmrequestirq() (git-fixes).
• gpio: aspeed-sgpio: Change the macro to support deferred probe (stable-fixes).
• gpio: pca953x: mask interrupts in irq shutdown (stable-fixes).
• gpio: sprd: Change sprdgpio lock to rawspin_lock (stable-fixes).
• gpu/panel-edp: add AUO panel entry for B140HAN06.4 (stable-fixes).
• HID: apple: Add 'SONiX KN85 Keyboard' to the list of non-apple keyboards (stable-fixes).
• HID: Apply quirk HIDQUIRKALWAYS_POLL to Edifier QR30 (2d99:a101) (stable-fixes).
• HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK (stable-fixes).
• HID: hid-pl: handle probe errors (git-fixes).
• HID: i2c-hid: fix potential buffer overflow in i2chidget_report() (stable-fixes).
• HID: intel-ish-hid: fix NULL-ptr-deref in ishtpbusremoveallclients (git-fixes).
• HID: intel-ish-hid: Reset enumdevicesdone before enumeration (stable-fixes).
• HID: intel-ish-hid: Update ishtp bus match to support device ID table (stable-fixes).
• HID: logitech-hidpp: Check maxfield in hidppgetreport_length() (stable-fixes).
• HID: magicmouse: Do not crash on missing msc->input (stable-fixes).
• HID: multitouch: add eGalaxTouch EXC3188 support (stable-fixes).
• HID: multitouch: add MTQUIRKSTICKYFINGERS to MTCLS_VTL (stable-fixes).
• HID: playstation: Add missing check for inputffcreate_memless (git-fixes).
• HID: playstation: Center initial joystick axes to prevent spurious events (stable-fixes).
• HID: prodikeys: Check presence of pm->input_ep82 (stable-fixes).
• HID: quirks: Add another Chicony HP 5MP Cameras to hidignorelist (stable-fixes).
• hwmon: (f71882fg) Add F81968 support (stable-fixes).
• hwmon: (it87) Check the it87_lock() return value (git-fixes).
• hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race (git-fixes).
• hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE (stable-fixes).
• hwmon: (occ) Mark occinitattribute() as __printf (git-fixes).
• hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read (git-fixes).
• hyperv: Convert hypercall statuses to linux error codes (git-fixes).
• hyperv: Move arch/x86/hyperv/hv_proc.c to drivers/hv (git-fixes).
• hyperv: Move hvcurrentpartition_id to arch-generic code (git-fixes).
• i3c: dw: Initialize spinlock to avoid upsetting lockdep (git-fixes).
• i3c: master: svc: Initialize 'dev' to NULL in svci3cmasteribiisr() (stable-fixes).
• i3c: master: Update hot-join flag only on success (git-fixes).
• i3c: Move device name assignment after i3cbusinit (git-fixes).
• iio: gyro: itg3200: Fix unchecked return value in read_raw (git-fixes).
• iio: magnetometer: Remove IRQF_ONESHOT (stable-fixes).
• iio: sca3000: Fix a resource leak in sca3000_probe() (git-fixes).
• iio: Use IRQFNOTHREAD (stable-fixes).
• Input: stmfts - correct wording for the warning message (git-fixes).
• Input: stmfts - make comments correct (git-fixes).
• iomap: account for unaligned end offsets when truncating read range (git-fixes).
• ipmi: ipmb: initialise event handler read bytes (git-fixes).
• ktls, sockmap: Fix missing uncharge operation (bsc#1252008).
• KVM: nSVM: Clear exitcodehi in VMCB when synthesizing nested VM-Exits (git-fixes).
• KVM: nSVM: Set exitcodehi to -1 when synthesizing SVMEXITERR (failed VMRUN) (git-fixes).
• KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (git-fixes).
• KVM: x86: Explicitly set new periodic hrtimer expiration in apictimerfn() (git-fixes).
• KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 (git-fixes).
• landlock: Optimize file path walks and prepare for audit support (bsc#1255698).
• leds: qcom-lpg: Check the return value of regmapbulkwrite() (git-fixes).
• media: adv7180: fix frame interval in progressive mode (stable-fixes).
• media: amphion: Clear lastbufferdequeued flag for DECCMDSTART (stable-fixes).
• media: amphion: Drop minqueuedbuffers assignment (git-fixes).
• media: ccs: Accommodate C-PHY into the calculation (git-fixes).
• media: ccs: Avoid possible division by zero (git-fixes).
• media: ccs: Fix setting initial sub-device state (git-fixes).
• media: chips-media: wave5: Fix memory leak on codec_info allocation failure (git-fixes).
• media: cx88: Add missing unmap in sndcx88hw_params() (git-fixes).
• media: cx23885: Add missing unmap in sndcx23885hw_params() (git-fixes).
• media: cx25821: Add missing unmap in sndcx25821hw_params() (git-fixes).
• media: cx25821: Fix a resource leak in cx25821devsetup() (stable-fixes).
• media: dvb-core: dmxdevfilter must always flush bufs (stable-fixes).
• media: dvb-core: fix wrong reinitialization of ringbuffer on reopen (git-fixes).
• media: dvb-net: fix OOB access in ULE extension header tables (git-fixes).
• media: i2c/tw9903: Fix potential memory leak in tw9903_probe() (git-fixes).
• media: i2c/tw9906: Fix potential memory leak in tw9906_probe() (git-fixes).
• media: i2c: ov5647: Correct minimum VBLANK value (git-fixes).
• media: i2c: ov5647: Correct pixel array offset (git-fixes).
• media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode (git-fixes).
• media: i2c: ov5647: Initialize subdev before controls (git-fixes).
• media: i2c: ov5647: Sensor should report RAW color space (git-fixes).
• media: i2c: ov5647: use our own mutex for the ctrl lock (git-fixes).
• media: ipu6: Fix RPM reference leak in probe error paths (git-fixes).
• media: ipu6: Fix typo and wrong constant in ipu6-mmu.c (git-fixes).
• media: mtk-mdp: Fix a reference leak bug in mtkmdpremove() (git-fixes).
• media: mtk-mdp: Fix error handling in probe function (git-fixes).
• media: omap3isp: ispvideombustopix/pixtombus fixes (stable-fixes).
• media: omap3isp: isppreview: always clamp in previewtryformat() (stable-fixes).
• media: omap3isp: set initial format (stable-fixes).
• media: pvrusb2: fix URB leak in pvr2sendrequest_ex (stable-fixes).
• media: qcom: camss: vfe: Fix out-of-bounds access in vfeisrreg_update() (git-fixes).
• media: radio-keene: fix memory leak in error path (git-fixes).
• media: rkisp1: Fix filter mode register configuration (stable-fixes).
• media: solo6x10: Check for out of bounds chip_id (stable-fixes).
• media: tegra-video: Fix memory leak in _tegrachanneltryformat() (git-fixes).
• media: uvcvideo: Fix allocation for small frame sizes (git-fixes).
• media: v4l2-async: Fix error handling on steps after finding a match (stable-fixes).
• media: venus: vdec: fix error state assignment for zero bytesused (git-fixes).
• media: verisilicon: AV1: Fix enable cdef computation (git-fixes).
• media: verisilicon: AV1: Fix tile info buffer size (git-fixes).
• media: verisilicon: AV1: Fix tx mode bit setting (git-fixes).
• media: verisilicon: AV1: Set IDR flag for intra_only frame type (git-fixes).
• mfd: arizona: Fix regulator resource leak on wm5102clearwrite_sequencer() failure (git-fixes).
• mfd: core: Add locking around 'mfdofnode_list' (git-fixes).
• mfd: tps6105x: Fix kernel-doc warnings relating to the core struct and tps6105x_mode (git-fixes).
• mfd: wm8350-core: Use IRQF_ONESHOT (git-fixes).
• misc: bcmvk: Fix possible null-pointer dereferences in bcmvk_read() (stable-fixes).
• misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 (stable-fixes).
• mmc: mmci: Fix devicenode reference leak in ofgetdmlpipe_index() (git-fixes).
• mmc: rtsxpcisdmmc: increase power-on settling delay to 5ms (git-fixes).
• mtd: parsers: Fix memory leak in mtdparsertplinksafeloaderparse() (git-fixes).
• mtd: parsers: ofpart: fix OF node refcount leak in parsefixedpartitions() (git-fixes).
• mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper (git-fixes).
• mtd: rawnand: pl353: Fix software ECC support (git-fixes).
• mtd: spinand: Fix kernel doc (git-fixes).
• myri10ge: avoid uninitialized variable use (stable-fixes).
• net: mana: Fix double destroy_workqueue on service rescan PCI path (git-fixes).
• net: mana: Implement ndotxtimeout and serialize queue resets per port (bsc#1257472).
• net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
• net: mana: Support HW link state events (bsc#1253049).
• net: nfc: nci: Fix parameter validation for packet data (git-fixes).
• net: nfc: nci: Fix zero-length proprietary notifications (git-fixes).
• net: usb: catc: enable basic endpoint checking (git-fixes).
• net: usb: kalmia: validate USB endpoints (git-fixes).
• net: usb: kaweth: remove TX queue manipulation in kawethsetrx_mode (git-fixes).
• net: usb: kaweth: validate USB endpoints (git-fixes).
• net: usb: lan78xx: fix silent drop of packets with checksum errors (git-fixes).
• net: usb: lan78xx: fix TX byte statistics for small packets (git-fixes).
• net: usb: lan78xx: scan all MDIO addresses on LAN7801 (git-fixes).
• net: usb: pegasus: enable basic endpoint checking (git-fixes).
• net: usb: r8152: fix transmit queue timeout (stable-fixes).
• net: usb: sr9700: remove code to drive nonexistent multicast filter (stable-fixes).
• net: usb: sr9700: support devices with virtual driver CD (stable-fixes).
• net: wan/fslucchdlc: Fix dmafreecoherent() in uhdlc_memclean() (git-fixes).
• net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets (git-fixes).
• nfc: hci: shdlc: Stop timers and work before freeing context (git-fixes).
• nfc: nci: clear NCIDATAEXCHANGE before calling completion callback (git-fixes).
• nfc: nci: free skb on nci_transceive early error paths (git-fixes).
• nfc: nxp-nci: remove interrupt trigger type (stable-fixes).
• nfc: pn533: properly drop the usb interface reference on disconnect (git-fixes).
• nfc: rawsock: cancel tx_work before socket teardown (git-fixes).
• nfsd: check that server is running in unlock_filesystem (bsc#1257279).
• nfsd: use correct loop termination in nfsd4revokestates() (git-fixes).
• nouveau/dpcd: return EBUSY for aux xfer if the device is asleep (git-fixes).
• ntb: ntbhwswitchtec: Fix array-index-out-of-bounds access (stable-fixes).
• ntb: ntbhwswitchtec: Fix shift-out-of-bounds for 0 mw lut (stable-fixes).
• NTB: ntbtransport: Fix too small buffer for debugfsname (git-fixes).
• nvme-fc: don't hold rport lock when putting ctrl (git-fixes).
• nvme-fc: release admin tagset if init fails (git-fixes).
• nvme-pci: disable secondary temp for Wodposit WPBSNM8 (git-fixes).
• PCI/ACPI: Restrict programhpxtype2() to AER bits (git-fixes).
• PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (git-fixes).
• PCI/MSI: Unmap MSI-X region on error (git-fixes).
• PCI/MSI: Unmap MSI-X region on error (stable-fixes).
• PCI/P2PDMA: Release per-CPU pgmap ref when vminsertpage() fails (git-fixes).
• PCI/PM: Avoid redundant delays on D3hot->D3cold (git-fixes).
• PCI/portdrv: Fix potential resource leak (git-fixes).
• PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] (git-fixes).
• PCI: Add ACS quirk for Qualcomm Hamoa & Glymur (git-fixes).
• PCI: Add ACS quirk for Qualcomm Hamoa & Glymur (stable-fixes).
• PCI: Add defines for bridge window indexing (stable-fixes).
• PCI: Add PCIEMSGCODEASSERTINTx message macros (stable-fixes).
• PCI: Correct PCICAPEXPENDPOINTSIZEOF_V2 value (git-fixes).
• PCI: Do not attempt to set ExtTag for VFs (git-fixes).
• PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port (git-fixes).
• PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port (stable-fixes).
• PCI: Enable ACS after configuring IOMMU for OF platforms (git-fixes).
• PCI: Enable ACS after configuring IOMMU for OF platforms (stable-fixes).
• PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}epcepf_unlink() functions (git-fixes).
• PCI: Fix pcislotlock () device locking (git-fixes).
• PCI: Fix pcislotlock () device locking (stable-fixes).
• PCI: Fix pcislottrylock() error handling (git-fixes).
• PCI: hv: Correct a comment (git-fixes).
• PCI: hv: Fix warnings for missing export.h header inclusion (git-fixes).
• PCI: hv: Remove unnecessary flex array in struct pci_packet (git-fixes).
• PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
• PCI: hv: Remove unused field pcibus in struct hvpcibus_device (git-fixes).
• PCI: Initialize RCB from pciconfiguredevice() (git-fixes).
• PCI: Log bridge info when first enumerating bridge (stable-fixes).
• PCI: Log bridge windows conditionally (stable-fixes).
• PCI: Mark 3ware-9650SA Root Port Extended Tags as broken (git-fixes).
• PCI: Mark ASM1164 SATA controller to avoid bus reset (git-fixes).
• PCI: Mark ASM1164 SATA controller to avoid bus reset (stable-fixes).
• PCI: Mark Nvidia GB10 to avoid bus reset (git-fixes).
• PCI: Mark Nvidia GB10 to avoid bus reset (stable-fixes).
• PCI: mediatek: Fix IRQ domain leak when MSI allocation fails (git-fixes).
• PCI: Move pcireadbridge_windows() below individual window accessors (stable-fixes).
• PCI: Supply bridge device, not secondary bus, to read window details (stable-fixes).
• phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature (stable-fixes).
• phy: mvebu-cp110-utmi: fix dr_mode property read from dts (stable-fixes).
• pinctrl: equilibrium: Fix device node reference leak in pinbank_init() (git-fixes).
• pinctrl: meson: mark the GPIO controller as sleeping (git-fixes).
• pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2datagroups definition (git-fixes).
• pinctrl: single: fix refcount leak in pcsaddgpio_func() (git-fixes).
• platform/chrome: croseclightbar: Fix response size initialization (git-fixes).
• platform/chrome: crostypecswitch: Don't touch struct fwnode_handle::dev (git-fixes).
• platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro (stable-fixes).
• platform/x86: classmate-laptop: Add missing NULL pointer checks (stable-fixes).
• platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data (git-fixes).
• platform/x86: hp-bioscfg: Skip empty attribute names (git-fixes).
• platform/x86: int0002: Remove IRQFONESHOT from requestirq() (git-fixes).
• platform/x86: intel_telemetry: Fix PSS event register mask (git-fixes).
• platform/x86: intel_telemetry: Fix swapped arrays in PSS output (git-fixes).
• platform/x86: ISST: Add missing write block check (git-fixes).
• platform/x86: panasonic-laptop: Fix sysfs group leak in error path (stable-fixes).
• platform/x86: toshiba_haps: Fix memory leaks in add/remove routines (git-fixes).
• PM: sleep: wakeirq: harden devpmclearwakeirq() against races (git-fixes).
• PM: sleep: wakeirq: Update outdated documentation comments (git-fixes).
• PM: wakeup: Handle empty list in wakeupsourceswalk_start() (git-fixes).
• pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset (git-fixes).
• power: reset: nvmem-reboot-mode: respect cell size for nvmemcellwrite (git-fixes).
• power: supply: ab8500: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: act8945a: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: bq27xxx: fix wrong errno when bus ops are unsupported (git-fixes).
• power: supply: bq256xx: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: bq25980: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: cpcap-battery: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: goldfish: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: qcom_battmgr: Recognize 'LiP' as lithium-polymer (git-fixes).
• power: supply: rt9455: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: sbs-battery: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: wm97xx: Fix NULL pointer dereference in powersupplychanged() (git-fixes).
• powercap: intelrapltpmi: Remove FW_BUG from invalid version check (git-fixes).
• qmiwwan: allow maxmtu above hardmtu to control rxurb_size (git-fixes).
• rapidio: replace riofreenet() with kfree() in rioscanalloc_net() (git-fixes).
• RDMA/mana_ib: Add device-memory support (git-fixes).
• RDMA/mana_ib: Take CQ type from the device type (git-fixes).
• RDMA/rtrs-clt: For conn rejection use actual err number (git-fixes).
• regmap: maple: free entry on masstoregfp() failure (stable-fixes).
• regulator: core: fix locking in regulatorresolvesupply() error path (git-fixes).
• regulator: core: move supply check earlier in setmachineconstraints() (git-fixes).
• remoteproc: sysmon: Correct subsysnamelen type in QMI request (git-fixes).
• Revert 'bpf: xfrm: Add bpfxdpgetxfrmstate() kfunc (bsc#1258860).
• Revert 'drm/amd: Check if ASPM is enabled from PCIe subsystem' (git-fixes).
• Revert 'drm/nouveau/disp: Set drmmodeconfigfuncs.atomic(check|commit)' (git-fixes).
• Revert 'hwmon: (ibmpex) fix use-after-free in high/low store' (git-fixes).
• Revert 'mfd: da9052-spi: Change read-mask to write-mask' (stable-fixes).
• Revert 'mmc: rtsxpcisdmmc: increase power-on settling delay to 5ms' (git-fixes).
• Revert 'PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV' (git-fixes).
• Revert 'selftests/bpf: Add tc helpers (bsc#1258860).
• Revert 'selftests/bpf: Remove '&>' usage in the selftests (bsc#1258860).
• Revert 'selftests/bpf: Remove testtctunnel.sh (bsc#1258860).
• Revert 'selftests/bpf: Support when CONFIG_VXLAN=m (bsc#1258860).
• Revert 'selftests/bpf: test_tunnel: Add ping helpers (bsc#1258860).
• Revert 'selftests/bpf: testtunnel: Remove testtunnel.sh (bsc#1258860).
• Revert 'selftests/bpf: Use makesockaddr in testsock_addr (bsc#1258860).
• rpmsg: core: fix race in driveroverrideshow() and use core helper (git-fixes).
• rtc: interface: Alarm race handling should not discard preceding error (git-fixes).
• rtc: zynqmp: correct frequency value (stable-fixes).
• s390/cio: Update purge function to unregister the unused subchannels (bsc#1254214).
• s390/ipl: Clear SBP flag when bootprog is set (bsc#1258176).
• s390/mm: Fix _pteprdp() inline assembly (bsc#1253644).
• s390: Disable ARCHWANTOPTIMIZEHUGETLBVMEMMAP (bsc#1254306).
• scsi: mpi3mr: Event processing debug improvement (bsc#1251186 bsc#1258832).
• scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT (git-fixes).
• scsi: storvsc: Remove redundant ternary operators (git-fixes).
• selftests/bpf: Add tc helpers (bsc#1258860).
• selftests/bpf: add verifier sign extension bound computation tests (git-fixes).
• selftests/bpf: Integrate testtctunnel.sh tests into test_progs (bsc#1258860).
• selftests/bpf: Make testtctunnel.bpf.c compatible with big endian platforms (bsc#1258860).
• selftests/bpf: Remove '&>' usage in the selftests (bsc#1258860).
• selftests/bpf: Remove testtctunnel.sh (bsc#1258860).
• selftests/bpf: Support when CONFIG_VXLAN=m (bsc#1258860).
• selftests/bpf: testtunnel: Add genericattach* helpers (bsc#1258860).
• selftests/bpf: test_tunnel: Add ping helpers (bsc#1258860).
• selftests/bpf: testtunnel: Move erspan tunnel tests to testprogs (bsc#1258860).
• selftests/bpf: testtunnel: Move geneve tunnel test to testprogs (bsc#1258860).
• selftests/bpf: testtunnel: Move gre tunnel test to testprogs (bsc#1258860).
• selftests/bpf: testtunnel: Move ip6erspan tunnel test to testprogs (bsc#1258860).
• selftests/bpf: testtunnel: Move ip6geneve tunnel test to testprogs (bsc#1258860).
• selftests/bpf: testtunnel: Move ip6gre tunnel test to testprogs (bsc#1258860).
• selftests/bpf: testtunnel: Move ip6tnl tunnel tests to testprogs (bsc#1258860).
• selftests/bpf: testtunnel: Remove testtunnel.sh (bsc#1258860).
• selftests/bpf: Use connecttoaddr in testsockaddr (bsc#1258860).
• selftests/bpf: Use logerr in opennetns/close_netns (bsc#1258860).
• selftests/bpf: Use makesockaddr in testsock_addr (bsc#1258860).
• selftests/bpf: Use startserveraddr in testsockaddr (bsc#1258860).
• serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done (git-fixes).
• serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done (stable-fixes).
• serial: 8250dw: handle clock enable errors in runtimeresume (git-fixes).
• serial: 8250dw: handle clock enable errors in runtimeresume (stable-fixes).
• serial: imx: change SERIALIMXCONSOLE to bool (git-fixes).
• serial: SH_SCI: improve 'DMA support' prompt (git-fixes).
• shrinkslabmemcg: clear_bits of skipped shrinkers (bsc#1256564).
• soc: mediatek: svs: Fix memory leak in svsenabledebug_write() (git-fixes).
• soc: qcom: cmd-db: Use devmmemremap() to fix memory leak in cmddbdevprobe (git-fixes).
• soc: qcom: smem: handle ENOMEM error during probe (git-fixes).
• soc: ti: k3-socinfo: Fix regmap leak on probe failure (git-fixes).
• soc: ti: pruss: Fix double free in prussclkmux_setup() (git-fixes).
• soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) (stable-fixes).
• soundwire: intelace2x: add SNDHDA_CORE dependency (git-fixes).
• spi-geni-qcom: initialize mode related registers to 0 (stable-fixes).
• spi-geni-qcom: use xfer->bitsperword for can_dma() (stable-fixes).
• spi: spi-mem: Limit octal DTR constraints to octal DTR situations (git-fixes).
• spi: spi-mem: Limit octal DTR constraints to octal DTR situations (stable-fixes).
• spi: spi-mem: Protect dirmapcreate() with spimemaccessstart/end (git-fixes).
• spi: spi-mem: Protect dirmapcreate() with spimemaccessstart/end (stable-fixes).
• spi: spidev: fix lock inversion between spilock and buflock (git-fixes).
• spi: stm32: fix Overrun issue at < 8bpw (stable-fixes).
• spi: tegra114: Preserve SPI mode bits in defcommand1reg (git-fixes).
• spi: tegra210-quad: Move curr_xfer read inside spinlock (bsc#1257952).
• spi: tegra210-quad: Move curr_xfer read inside spinlock (git-fixes).
• spi: tegra210-quad: Protect curr_xfer assignment in (bsc#1257952).
• spi: tegra210-quad: Protect currxfer assignment in tegraqspisetuptransfer_one (git-fixes).
• spi: tegra210-quad: Protect curr_xfer check in IRQ handler (bsc#1257952).
• spi: tegra210-quad: Protect curr_xfer check in IRQ handler (git-fixes).
• spi: tegra210-quad: Protect curr_xfer clearing in (bsc#1257952).
• spi: tegra210-quad: Protect currxfer clearing in tegraqspinoncombinedseqxfer (git-fixes).
• spi: tegra210-quad: Protect currxfer in tegraqspicombinedseq_xfer (bsc#1257952).
• spi: tegra210-quad: Protect currxfer in tegraqspicombinedseq_xfer (git-fixes).
• spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed (bsc#1257952).
• spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (git-fixes).
• spi: tegra: Fix a memory leak in tegraslinkprobe() (git-fixes).
• spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcmfiuprobe() (git-fixes).
• spi: wpcm-fiu: Fix uninitialized res (git-fixes).
• spi: wpcm-fiu: Simplify with deverrprobe() (stable-fixes).
• spi: wpcm-fiu: Use devmplatformioremapresourcebyname() (stable-fixes).
• staging: rtl8723bs: fix memory leak on failure path (stable-fixes).
• staging: rtl8723bs: fix missing status update on sdioallocirq() failure (stable-fixes).
• staging: rtl8723bs: fix null dereference in find_network (git-fixes).
• thermal: int340x: Fix sysfs group leak on DLVR registration failure (stable-fixes).
• thermal: intel: x86pkgtemp_thermal: Handle invalid temperature (git-fixes).
• tools/hv: fcopy: Fix irregularities with size of ring buffer (git-fixes).
• tools/power cpupower: Reset errno before strtoull() (stable-fixes).
• tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() (git-fixes).
• tools: hv: Enable debug logs for hvkvpdaemon (git-fixes).
• tpm: st33zp24: Fix missing cleanup on get_burstcount() error (git-fixes).
• tpm: tpmi2cinfineon: Fix locality leak on get_burstcount() failure (git-fixes).
• uiohvgeneric: Align ring size to system page (git-fixes).
• uiohvgeneric: Use correct size for interrupt and monitor pages (git-fixes).
• Update 'drm/mgag200: fix mgag200bmcstop_scanout()' bug number (bsc#1258153 bsc#1258226).
• Update 'drm/mgag200: fix mgag200bmcstop_scanout()' bug number (bsc#1258153).
• usb: bdc: fix sleep during atomic (git-fixes).
• usb: dwc2: fix resume failure if dr_mode is host (git-fixes).
• usb: gadget: tegra-xudc: Add handling for BLCGCOREPLLPWRDN (git-fixes).
• USB: serial: option: add Telit FN920C04 RNDIS compositions (stable-fixes).
• usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs (git-fixes).
• watchdog: imx7ulp_wdt: handle the nowayout option (stable-fixes).
• wifi: ath9k: debug.h: fix kernel-doc bad lines and struct athtxstats (git-fixes).
• wifi: ath9k: fix kernel-doc warnings in common-debug.h (git-fixes).
• wifi: ath10k: fix lock protection in ath10kwmieventpeerstapsstate_chg() (stable-fixes).
• wifi: ath10k: sdio: add missing lock protection in ath10ksdiofwcrasheddump() (git-fixes).
• wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 (stable-fixes).
• wifi: ath11k: Fix failure to connect to a 6 GHz AP (stable-fixes).
• wifi: ath12k: fix preferred hardware mode calculation (stable-fixes).
• wifi: cfg80211: allow only one NAN interface, also in multi radio (stable-fixes).
• wifi: cfg80211: cancel rfkillblock work in wiphyunregister() (git-fixes).
• wifi: cfg80211: Fix bitrate calculation overflow for HE rates (stable-fixes).
• wifi: cfg80211: Fix use_for flag update on BSS refresh (git-fixes).
• wifi: cfg80211: stop NAN and P2P in cfg80211_leave (git-fixes).
• wifi: cfg80211: wext: fix IGTK key ID off-by-one (git-fixes).
• wifi: cw1200: Fix locking in error paths (git-fixes).
• wifi: iwlegacy: add missing mutex protection in il3945storemeasurement() (stable-fixes).
• wifi: iwlegacy: add missing mutex protection in il4965storetx_power() (stable-fixes).
• wifi: iwlwifi: mvm: check the validity of noa_len (stable-fixes).
• wifi: iwlwifi: mvm: pause TCM on fast resume (git-fixes).
• wifi: libertas: fix WARNING in usbtxblock (stable-fixes).
• wifi: mac80211: bounds-check linkid in ieee80211ml_reconfiguration (git-fixes).
• wifi: mac80211: collect station statistics earlier when disconnect (stable-fixes).
• wifi: mac80211: correctly check if CSA is active (stable-fixes).
• wifi: mac80211: don't increment cryptotxtailroomneededcnt twice (stable-fixes).
• wifi: mac80211: fix NULL pointer dereference in meshrxcsa_frame() (git-fixes).
• wifi: mac80211: ocb: skip rxnosta when interface is not joined (stable-fixes).
• wifi: mt76: Fix possible oob access in mt76connac2macwritetxwi_80211() (git-fixes).
• wifi: mt76: mt7925: Fix possible oob access in mt7925macwritetxwi80211() (git-fixes).
• wifi: mt76: mt7996: Fix possible oob access in mt7996macwritetxwi80211() (git-fixes).
• wifi: radiotap: reject radiotap with unknown bits (git-fixes).
• wifi: rsi: Don't default to -EOPNOTSUPP in rsimac80211config (git-fixes).
• wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxustaadd (git-fixes).
• wifi: rtw88: 8822b: Avoid WARNING in rtw8822bconfigtrx_mode() (stable-fixes).
• wifi: rtw88: Fix alignment fault in rtwcoreenable_beacon() (git-fixes).
• wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero (stable-fixes).
• wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H (stable-fixes).
• wifi: rtw89: 8922a: set random mac if efuse contains zeroes (stable-fixes).
• wifi: rtw89: mac: correct page number for CSI response (stable-fixes).
• wifi: rtw89: pci: restore LDO setting after device resume (stable-fixes).
• wifi: rtw89: ser: enable error IMR after recovering from L1 (stable-fixes).
• wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode (stable-fixes).
• wifi: wlcore: ensure skb headroom before skb_push (stable-fixes).
• wifi: wlcore: Fix a locking bug (git-fixes).
• workqueue: mark power efficient workqueue as unbounded if (bsc#1257891).
• x86/hyperv: fix an indentation issue in mshyperv.h (git-fixes).
• x86/hyperv: Fix usage of cpuonlinemask to get valid cpu (git-fixes).
• x86/hyperv: Fix warnings for missing export.h header inclusion (git-fixes).
• x86/hyperv: Use named operands in inline asm (git-fixes).