Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823). - CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355). - CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587). - CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590). - CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656). - CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733). - CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518). - CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548). - CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725). - CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730). - CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742). - CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813). - CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764). - CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130). - CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748). - CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842). - CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430). - CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132). - CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231). - CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557). - CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558). - CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807). - CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827). - CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930). - CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920). - CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946). - CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272). - CVE-2024-49888: bpf: Fix a sdiv overflow issue (bsc#1232208). - CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358). - CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (bsc#1232366). - CVE-2024-49912: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (bsc#1232367). - CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371). - CVE-2024-49922: drm/amd/display: Check null pointers before using them (bsc#1232374). - CVE-2024-49923: drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags (bsc#1232361). - CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224) - CVE-2024-49933: blk_iocost: fix more out of bound shifts (bsc#1232368). - CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387). - CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166). - CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165). - CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157). - CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264). - CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096). - CVE-2024-49987: bpftool: Fix undefined behavior in qsort(NULL, 0, ...) (bsc#1232258). - CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483). - CVE-2024-50003: drm/amd/display: Fix system hang while resume with TBT monitor (bsc#1232385). - CVE-2024-50004: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 (bsc#1232396). - CVE-2024-50006: ext4: fix i_data_sem unlock order in ext4_ind_migrate() (bsc#1232442). - CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318). - CVE-2024-50012: cpufreq: Avoid a bad reference count on CPU node (bsc#1232386). - CVE-2024-50014: ext4: fix access to uninitialised lock in fc replay path (bsc#1232446). - CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500). - CVE-2024-50084: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() (bsc#1232494). - CVE-2024-50087: btrfs: fix uninitialized pointer free on read_alloc_one_name() error (bsc#1232499). - CVE-2024-50088: btrfs: fix uninitialized pointer free in add_inode_ref() (bsc#1232498). - CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881). - CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885). - CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919). - CVE-2024-50124: Bluetooth: ISO: Fix UAF on iso_sock_timeout (bsc#1232926). - CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928). - CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907). - CVE-2024-50128: net: wwan: fix global oob in wwan_rtnl_policy (bsc#1232905). - CVE-2024-50130: netfilter: bpf: must hold reference on net namespace (bsc#1232894). - CVE-2024-50138: bpf: Use raw_spinlock_t in ringbuf (bsc#1232935). - CVE-2024-50139: KVM: arm64: Fix shift-out-of-bounds bug (bsc#1233062). - CVE-2024-50145: octeon_ep: add SKB allocation failures handling in __octep_oq_process_rx() (bsc#1233044). - CVE-2024-50153: scsi: target: core: Fix null-ptr-deref in target_alloc_device() (bsc#1233061). - CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070). - CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050). - CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049). - CVE-2024-50169: vsock: Update rx_bytes on read_skb() (bsc#1233320). - CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057). - CVE-2024-50177: drm/amd/display: fix a UBSAN warning in DML2.1 (bsc#1233115). - CVE-2024-50182: secretmem: disable memfd_secret() if arch cannot set direct map (bsc#1233129). - CVE-2024-50184: virtio_pmem: Check device status before requesting flush (bsc#1233135). - CVE-2024-50186: net: explicitly clear the sk pointer, when pf->create fails (bsc#1233110). - CVE-2024-50192: irqchip/gic-v4: Do not allow a VMOVP on a dying VPE (bsc#1233106). - CVE-2024-50225: btrfs: fix error propagation of split bios (bsc#1233193). - CVE-2024-50228: mm: shmem: fix data-race in shmem_getattr() (bsc#1233204). - CVE-2024-50230: nilfs2: fix kernel bug due to missing clearing of checked flag (bsc#1233206). - CVE-2024-50245: fs/ntfs3: Fix possible deadlock in mi_read (bsc#1233203). - CVE-2024-50246: fs/ntfs3: Add rough attr alloc_size check (bsc#1233207). - CVE-2024-50248: ntfs3: add bounds checking to mi_enum_attr() (bsc#1233219). - CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233226). - CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201). - CVE-2024-50257: netfilter: Fix use-after-free in get_info() (bsc#1233244). - CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (bsc#1233253). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233453). - CVE-2024-50271: signal: restore the override_rlimit logic (bsc#1233460). - CVE-2024-50273: btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1233462). - CVE-2024-50274: idpf: avoid vport access in idpf_get_link_ksettings (bsc#1233463). - CVE-2024-50275: arm64/sve: Discard stale CPU state when handling SVE traps (bsc#1233464). - CVE-2024-50276: net: vertexcom: mse102x: Fix possible double free of TX skb (bsc#1233465). - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468). - CVE-2024-50289: media: av7110: fix a spectre vulnerability (bsc#1233478). - CVE-2024-50295: net: arc: fix the device for dma_map_single/dma_unmap_single (bsc#1233484). - CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485). - CVE-2024-50298: net: enetc: allocate vf_state during PF probes (bsc#1233487). - CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233540). - CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523). - CVE-2024-53048: ice: fix crash on probe for DPLL enabled E810 LOM (bsc#1233721). - CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547). - CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550). - CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568). - CVE-2024-53058: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (bsc#1233552). - CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (bsc#1233570). - CVE-2024-53082: virtio_net: Add hash_key_length check (bsc#1233573). - CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642). - CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (bsc#1234085). - CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (bsc#1234078). - CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1234223). The following non-security bugs were fixed: - ACPI: CPPC: Fix _CPC register setting issue (git-fixes). - ALSA: 6fire: Release resources at card release (git-fixes). - ALSA: ac97: bus: Fix the mistake in the comment (git-fixes). - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (git-fixes). - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (git-fixes). - ALSA: hda/conexant: fix Z60MR100 startup pop issue (stable-fixes). - ALSA: hda/realtek - Fixed Clevo platform headset Mic issue (stable-fixes). - ALSA: hda/realtek - update set GPIO3 to default for Thinkpad with ALC1318 (git-fixes). - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (stable-fixes). - ALSA: hda/realtek: Apply quirk for Medion E15433 (bsc#1233298). - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (stable-fixes). - ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform (bsc#1233298). - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (bsc#1233298). - ALSA: hda/realtek: Set PCBeep to default value for ALC274 (stable-fixes). - ALSA: hda/realtek: Update ALC225 depop procedure (git-fixes). - ALSA: hda/realtek: Update ALC256 depop procedure (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10 (stable-fixes). - ALSA: hda: Poll jack events for LS7A HD-Audio (stable-fixes). - ALSA: hda: Show the codec quirk info at probing (stable-fixes). - ALSA: ice1712: Remove redundant code in stac9460_dac_vol_put (stable-fixes). - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (stable-fixes). - ALSA: ump: Fix evaluation of MIDI 1.0 FB info (git-fixes). - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (git-fixes). - ALSA: usb-audio: Add Pioneer DJ/AlphaTheta DJM-A9 Mixer (stable-fixes). - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (stable-fixes). - ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes). - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (stable-fixes). - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (git-fixes). - ALSA: usb-audio: Make mic volume workarounds globally applicable (stable-fixes). - ALSA: usb-audio: Use snprintf instead of sprintf in build_mixer_unit_ctl (stable-fixes). - ALSA: usb-audio: add mixer mapping for Corsair HS80 (stable-fixes). - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (git-fixes). - ASoC: Intel: avs: da7219: Remove suspend_pre() and resume_post() (stable-fixes). - ASoC: SOF: Add i2s bt dai configuration support for AMD platforms (bsc#1233305). - ASoC: SOF: Add support for configuring PDM interface from topology (bsc#1233305). - ASoC: SOF: Deprecate invalid enums in IPC3 (bsc#1233305). - ASoC: SOF: IPC4: get pipeline priority from topology (bsc#1233305). - ASoC: SOF: IPC4: synchronize fw_config_params with fw definitions (bsc#1233305). - ASoC: SOF: Refactor sof_i2s_tokens reading to update acpbt dai (bsc#1233305). - ASoC: SOF: Rename amd_bt sof_dai_type (bsc#1233305). - ASoC: SOF: Wire up buffer flags (bsc#1233305). - ASoC: SOF: add alignment for topology header file struct definition (bsc#1233305). - ASoC: SOF: align topology header file with sof topology header (bsc#1233305). - ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index (git-fixes). - ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai() (git-fixes). - ASoC: SOF: ipc4-control: Add support for ALSA enum control (bsc#1233305). - ASoC: SOF: ipc4-control: Add support for ALSA switch control (bsc#1233305). - ASoC: SOF: ipc4-mtrace: move debug slot related definitions to header.h (bsc#1233305). - ASoC: SOF: ipc4-topology: Add deep buffer size to debug prints (bsc#1233305). - ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control (bsc#1233305). - ASoC: SOF: ipc4-topology: Add module ID print during module set up (bsc#1233305). - ASoC: SOF: ipc4-topology: Helper to find an swidget by module/instance id (bsc#1233305). - ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (bsc#1233305). - ASoC: SOF: ipc4-topology: change chain_dma handling in dai_config (bsc#1233305). - ASoC: SOF: ipc4-topology: export sof_ipc4_copier_is_single_format (bsc#1233305). - ASoC: SOF: ipc4-topology: set config_length based on device_count (bsc#1233305). - ASoC: SOF: ipc4: Add data struct for module notification message from firmware (bsc#1233305). - ASoC: SOF: ipc4: Add new message type: SOF_IPC4_GLB_LOAD_LIBRARY_PREPARE (bsc#1233305). - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits (git-fixes). - ASoC: SOF: topology: Parse DAI type token for dspless mode (bsc#1233305). - ASoC: SOF: topology: dynamically allocate and store DAI widget->private (bsc#1233305). - ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA (stable-fixes). - ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (git-fixes). - ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA (stable-fixes). - ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6 (stable-fixes). - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022 (stable-fixes). - ASoC: audio-graph-card2: Purge absent supplies for device tree nodes (stable-fixes). - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (git-fixes). - ASoC: fsl_micfil: Add sample rate constraint (stable-fixes). - ASoC: fsl_micfil: fix regmap_write_bits usage (git-fixes). - ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec (git-fixes). - ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c (git-fixes). - ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue (stable-fixes). - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (git-fixes). - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (stable-fixes). - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (stable-fixes). - ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip (stable-fixes). - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (git-fixes). - Bluetooth: btintel: Direct exception event to bluetooth stack (git-fixes). - Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test (bsc#1230557) - Bluetooth: fix use-after-free in device_for_each_child() (git-fixes). - Bluetooth: hci_core: Fix calling mgmt_device_connected (git-fixes). - Documentation: kgdb: Correct parameter error (git-fixes). - Drop OCFS2 patch causing a regression (bsc#1233255) - HID: core: zero-initialize the report buffer (git-fixes). - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (stable-fixes). - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (stable-fixes). - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (stable-fixes). - HID: multitouch: Add support for B2402FVA track point (stable-fixes). - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (git-fixes). - HID: wacom: fix when get product name maybe null pointer (git-fixes). - Input: hideep - add missing dependency on REGMAP_I2C (git-fixes). - Input: hycon-hy46xx - add missing dependency on REGMAP_I2C (git-fixes). - Input: xpad - add GameSir T4 Kaleid Controller support (git-fixes). - Input: xpad - add GameSir VID for Xbox One controllers (git-fixes). - Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller (git-fixes). - Input: xpad - add support for MSI Claw A1M (git-fixes). - Input: xpad - add support for Machenike G5 Pro Controller (git-fixes). - Input: xpad - fix support for some third-party controllers (git-fixes). - Input: xpad - sort xpad_device by vendor and product ID (git-fixes). - Input: xpad - spelling fixes for 'Xbox' (git-fixes). - KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending doorbells (bsc#1215199). - KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests (bsc#1215199). - KVM: PPC: Book3S HV: remove unused varible (bsc#1194869). - KVM: SEV-ES: Fix svm_get_msr()/svm_set_msr() for KVM_SEV_ES_INIT guests (bsc#1232207). - KVM: SEV-ES: Prevent MSR access post VMSA encryption (bsc#1232207). - Move kabi netfilter fix into patches.kabi - Move upstreamed crypto patches into sorted section - Move upstreamed patches into sorted section - NFS: remove revoked delegation from server's delegation list (git-fixes). - PCI: Add T_PVPERL macro (git-fixes). - PCI: Fix reset_method_store() memory leak (git-fixes). - PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf() (git-fixes). - PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds (git-fixes). - PCI: keystone: Add link up check to ks_pcie_other_map_bus() (git-fixes). - PCI: keystone: Set mode as Root Complex for 'ti,keystone-pcie' compatible (git-fixes). - PCI: rockchip-ep: Fix address translation unit programming (git-fixes). - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (git-fixes) - RDMA/hns: Add mutex_destroy() (git-fixes) - RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset (git-fixes) - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (git-fixes) - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci (git-fixes) - RDMA/hns: Fix cpu stuck caused by printings during reset (git-fixes) - RDMA/hns: Fix different dgids mapping to the same dip_idx (git-fixes) - RDMA/hns: Fix flush cqe error when racing with destroy qp (git-fixes) - RDMA/hns: Fix out-of-order issue of requester when setting FENCE (git-fixes) - RDMA/hns: Use dev_* printings in hem code instead of ibdev_* (git-fixes) - RDMA/hns: Use macro instead of magic number (git-fixes) - RDMA/mlx5: Move events notifier registration to be after device registration (git-fixes) - RDMA/rxe: Fix the qp flush warnings in req (git-fixes) - RDMA/rxe: Set queue pair cur_qp_state when being queried (git-fixes) - RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES (git-fixes) - Revert 'KVM: PPC: Book3S HV Nested: Stop forwarding all HFUs to L1' (bsc#1215199). - Revert 'RDMA/core: Fix ENODEV error for iWARP test over vlan' (git-fixes) - Revert 'cgroup: Fix memory leak caused by missing cgroup_bpf_offline' (bsc#1234108). - Revert 'cpufreq: brcmstb-avs-cpufreq: Fix initial command check' (stable-fixes). - Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (git-fixes). - Revert 'usb: gadget: composite: fix OS descriptors w_value logic' (git-fixes). - SUNRPC: Remove BUG_ON call sites (git-fixes). - USB: chaoskey: Fix possible deadlock chaoskey_list_lock (git-fixes). - USB: chaoskey: fail open after removal (git-fixes). - USB: gadget: dummy-hcd: Fix 'task hung' problem (git-fixes). - USB: serial: ftdi_sio: Fix atomicity violation in get_serial_info() (git-fixes). - USB: serial: io_edgeport: fix use after free in debug printk (git-fixes). - USB: serial: option: add Fibocom FG132 0x0112 composition (stable-fixes). - USB: serial: option: add Quectel RG650V (stable-fixes). - USB: serial: qcserial: add support for Sierra Wireless EM86xx (stable-fixes). - Update config files (bsc#1218644). - Update config files. Enabled IDPF for ARM64 (bsc#1221309) - accel: Use XArray instead of IDR for minors (jsc#PED-11580). - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (git-fixes). - ad7780: fix division by zero in ad7780_write_raw() (git-fixes). - add bugreference to a hv_netvsc patch (bsc#1232413). - aes-gcm-p10: Use the correct bit to test for P10 (bsc#1232704). - amd-pstate: Set min_perf to nominal_perf for active mode performance gov (git-fixes). - apparmor: fix 'Do simple duplicate message elimination' (git-fixes). - apparmor: test: Fix memory leak for aa_unpack_strdup() (git-fixes). - apparmor: use kvfree_sensitive to free data->data (git-fixes). - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (git-fixes) - arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay (git-fixes) - arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay (git-fixes) - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (git-fixes) - arm64: dts: imx8qxp: Add VPU subsystem file (git-fixes) - arm64: dts: imx93: add nvmem property for eqos (git-fixes) - arm64: dts: imx93: add nvmem property for fec1 (git-fixes) - arm64: dts: imx93: add ocotp node (git-fixes) - arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus (git-fixes) - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes (git-fixes) - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (git-fixes) - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (git-fixes) - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo (git-fixes) - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes (git-fixes) - arm64: dts: rockchip: Fix rt5651 compatible value on (git-fixes) - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610 (git-fixes) - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node (git-fixes) - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma (git-fixes) - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (git-fixes) - arm64: dts: rockchip: Remove undocumented supports-emmc property (git-fixes) - arm64: dts: rockchip: fix i2c2 pinctrl-names property on (git-fixes) - arm64: dts: rockchip: remove num-slots property from (git-fixes) - arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone (git-fixes) - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (git-fixes) - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (git-fixes) - arm64: smccc: replace custom COUNT_ARGS() & CONCATENATE() (git-fixes) - arm64: tegra: Move AGX Orin nodes to correct location (git-fixes) - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (git-fixes) - bpf, arm64: Fix address emission with tag-based KASAN enabled (git-fixes) - bpf, arm64: Remove garbage frame for struct_ops trampoline (git-fixes) - bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock (git-fixes). - bpf, vsock: Drop static vsock_bpf_prot initialization (git-fixes). - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() (bsc#1233193) - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (git-fixes). - can: c_can: fix {rx,tx}_errors statistics (git-fixes). - can: dev: can_set_termination(): allow sleeping GPIOs (git-fixes). - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (git-fixes). - can: hi311x: hi3110_can_ist(): fix potential use-after-free (git-fixes). - can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics (git-fixes). - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes). - can: j1939: j1939_session_new(): fix skb reference counting (git-fixes). - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes). - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation (git-fixes). - can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6 (git-fixes). - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes (git-fixes). - can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics (git-fixes). - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (git-fixes). - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (git-fixes). - cgroup/bpf: only cgroup v2 can be attached by bpf programs (bsc#1234108). - clk: clk-apple-nco: Add NULL check in applnco_probe (git-fixes). - clk: clk-axi-clkgen: make sure to enable the AXI bus clock (git-fixes). - clk: imx: clk-scu: fix clk enable state save and restore (git-fixes). - clk: imx: fracn-gppll: correct PLL initialization flow (git-fixes). - clk: imx: fracn-gppll: fix pll power up (git-fixes). - clk: imx: lpcg-scu: SW workaround for errata (e10858) (git-fixes). - clk: qcom: clk-alpha-pll: drop lucid-evo pll enabled warning (git-fixes). - clk: qcom: clk-alpha-pll: fix lucid 5lpe pll enabled check (git-fixes). - clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (git-fixes). - clk: renesas: rzg2l: Fix FOUTPOSTDIV clk (git-fixes). - clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset (git-fixes). - comedi: Flush partial mappings in error case (git-fixes). - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (git-fixes). - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (git-fixes). - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() (git-fixes). - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() (git-fixes). - cpufreq: loongson2: Unregister platform_driver on failure (git-fixes). - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (git-fixes). - crypto: aes-gcm-p10 - Use the correct bit to test for P10 (bsc#1232704). - crypto: api - Fix liveliness check in crypto_alg_tested (stable-fixes). - crypto: bcm - add error check in the ahash_hmac_init function (git-fixes). - crypto: caam - Fix the pointer passed to caam_qi_shutdown() (git-fixes). - crypto: caam - add error check to caam_rsa_set_priv_key_form (git-fixes). - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (git-fixes). - crypto: cavium - Fix the if condition to exit loop after timeout (git-fixes). - crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() (git-fixes). - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (git-fixes). - crypto: qat - remove check after debugfs_create_dir() (git-fixes). - crypto: qat - remove faulty arbiter config reset (git-fixes). - crypto: qat/qat_4xxx - fix off by one in uof_get_name() (git-fixes). - crypto: x86/aegis128 - access 32-bit arguments as 32-bit (git-fixes). - cxl: downgrade a warning message to debug level in cxl_probe_component_regs() (bsc#1229165). - dma-fence: Fix reference leak on fence merge failure path (git-fixes). - dma-fence: Use kernel's sort for merging fences (git-fixes). - doc: rcu: update printed dynticks counter bits (git-fixes). - drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() (git-fixes). - drm/amd/display: Adjust VSDB parser for replay feature (stable-fixes). - drm/amd/display: Fix brightness level not retained over reboot (git-fixes). - drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe (git-fixes). - drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp (git-fixes). - drm/amd: Add some missing straps from NBIO 7.11.0 (git-fixes). - drm/amd: Fix initialization mistake for NBIO 7.7.0 (stable-fixes). - drm/amdgpu: Adjust debugfs eviction and IB access permissions (stable-fixes). - drm/amdgpu: Adjust debugfs register access permissions (stable-fixes). - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (git-fixes). - drm/amdgpu: Fix JPEG v4.0.3 register write (git-fixes). - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (stable-fixes). - drm/amdgpu: fix check in gmc_v9_0_get_vm_pte() (git-fixes). - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (git-fixes). - drm/amdkfd: Accounting pdd vram_usage for svm (stable-fixes). - drm/amdkfd: Fix wrong usage of INIT_WORK() (git-fixes). - drm/bridge: anx7625: Drop EDID cache on bridge power off (git-fixes). - drm/bridge: it6505: Drop EDID cache on bridge power off (git-fixes). - drm/bridge: tc358767: Fix link properties discovery (git-fixes). - drm/bridge: tc358768: Fix DSI command tx (git-fixes). - drm/etnaviv: Request pages from DMA32 zone on addressing_limited (git-fixes). - drm/etnaviv: hold GPU lock across perfmon sampling (git-fixes). - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - drm/mediatek: Fix child node refcount handling in early exit (git-fixes). - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (git-fixes). - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (git-fixes). - drm/msm/dpu: drop LM_3 / LM_4 on MSM8998 (git-fixes). - drm/msm/dpu: drop LM_3 / LM_4 on SDM845 (git-fixes). - drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block (git-fixes). - drm/msm/gpu: Check the status of registration to PM QoS (git-fixes). - drm/msm: Fix some typos in comment (git-fixes). - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() (git-fixes). - drm/omap: Fix locking in omap_gem_new_dmabuf() (git-fixes). - drm/omap: Fix possible NULL dereference (git-fixes). - drm/panfrost: Add missing OPP table refcnt decremental (git-fixes). - drm/panfrost: Remove unused id_mask from struct panfrost_model (git-fixes). - drm/rockchip: vop: Fix a dereferenced before check warning (git-fixes). - drm/sti: Add __iomem for mixer_dbg_mxn's parameter (git-fixes). - drm/sti: avoid potential dereference of error pointers (git-fixes). - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (git-fixes). - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (git-fixes). - drm/v3d: Address race-condition in MMU flush (git-fixes). - drm/v3d: Enable Performance Counters before clearing them (git-fixes). - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush (git-fixes). - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load (git-fixes). - drm/vc4: hdmi: Avoid hang with debug registers when suspended (git-fixes). - drm/vc4: hvs: Correct logic on stopping an HVS channel (git-fixes). - drm/vc4: hvs: Do not write gamma luts on 2711 (git-fixes). - drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer (git-fixes). - drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function (git-fixes). - drm/vkms: Drop unnecessary call to drm_crtc_cleanup() (git-fixes). - drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (stable-fixes). - drm: Expand max DRM device number to full MINORBITS (jsc#PED-11580). - drm: Use XArray instead of IDR for minors (jsc#PED-11580). - drm: use ATOMIC64_INIT() for atomic64_t (git-fixes). - drm: xlnx: zynqmp_dpsub: fix hotplug detection (git-fixes). - drm: zynqmp_kms: Unplug DRM device before removal (git-fixes). - e1000e: Remove Meteor Lake SMBUS workarounds (git-fixes). - efi/libstub: Free correct pointer on failure (git-fixes). - efi/libstub: fix efi_parse_options() ignoring the default command line (git-fixes). - efi/libstub: zboot.lds: Discard .discard sections (stable-fixes). - efi/memattr: Ignore table if the size is clearly bogus (bsc#1231465). - ext4: fix unttached inode after power cut with orphan file feature enabled (bsc#1234009). - f2fs: get out of a repeat loop when getting a locked data page (bsc#1234011). - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (git-fixes). - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (git-fixes). - firmware: google: Unregister driver_info on failure (git-fixes). - firmware_loader: Fix possible resource leak in fw_log_firmware_info() (git-fixes). - fs/ntfs3: Add more attributes checks in mi_enum_attr() (bsc#1233207) - fs/ntfs3: Fixed overflow check in mi_enum_attr() (bsc#1233207) - fs/ntfs3: Sequential field availability check in mi_enum_attr() (bsc#1233207) - fs: Fix uninitialized value issue in from_kuid and from_kgid (git-fixes). - goldfish: Fix unused const variable 'goldfish_pipe_acpi_match' (git-fixes). - gpio: exar: set value when external pull-up or pull-down is present (git-fixes). - gpio: zevio: Add missed label initialisation (git-fixes). - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (git-fixes). - hwmon: (nct6775-core) Fix overflows seen when writing limit attributes (git-fixes). - hwmon: (tps23861) Fix reporting of negative temperatures (git-fixes). - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set (git-fixes). - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (git-fixes). - i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes). - i40e: fix race condition by adding filter's intermediate sync state (git-fixes). - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (git-fixes). - igb: Disable threaded IRQ for igb_msix_other (git-fixes). - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (git-fixes). - iio: accel: kx022a: Fix raw read format (git-fixes). - iio: adc: ad7606: Fix typo in the driver name (git-fixes). - iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer (git-fixes). - iio: gts: Fix uninitialized symbol 'ret' (git-fixes). - iio: gts: fix infinite loop for gain_to_scaletables() (git-fixes). - iio: light: al3010: Fix an error handling path in al3010_probe() (git-fixes). - ima: fix buffer overrun in ima_eventdigest_init_common (git-fixes). - initramfs: avoid filename buffer overrun (bsc#1232436). - intel_idle: add Granite Rapids Xeon support (bsc#1231630). - intel_idle: fix ACPI _CST matching for newer Xeon platforms (bsc#1231630). - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (git-fixes). - io_uring/sqpoll: close race on waiting for sqring entries (git-fixes). - irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (git-fixes). - jbd2: Move j_transaction_overhead_buffers into a hole (bsc#1234042). - jbd2: avoid infinite transaction commit loop (bsc#1234039). - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (bsc#1234043). - jbd2: avoid mount failed when commit block is partial submitted (bsc#1234040). - jbd2: correct the printing of write_flags in jbd2_write_superblock() (bsc#1234045). - jbd2: fix kernel-doc for j_transaction_overhead_buffers (bsc#1234042). - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (bsc#1234044). - jbd2: fix soft lockup in journal_finish_inode_data_buffers() (bsc#1234046). - jbd2: make jbd2_journal_get_max_txn_bufs() internal (bsc#1234041). - jbd2: precompute number of transaction descriptor blocks (bsc#1234042). - kABI workaround for ASoC SOF (bsc#1233305). - kABI: Restore exported __arm_smccc_sve_check (git-fixes) - kabi, mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes kabi). - kasan: move checks to do_strncpy_from_user (git-fixes). - kernel-binary: Enable livepatch package only when livepatch is enabled Otherwise the filelist may be empty failing the build (bsc#1218644). - kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y (git-fixes). - leds: lp55xx: Remove redundant test for invalid channel number (git-fixes). - lib: string_helpers: silence snprintf() output truncation warning (git-fixes). - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (git-fixes). - maple_tree: fix alloc node fail issue (git-fixes). - maple_tree: refine mas_store_root() on storing NULL (git-fixes). - media: adv7604: prevent underflow condition when reporting colorspace (git-fixes). - media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes). - media: amphion: Set video drvdata before register video device (git-fixes). - media: ar0521: do not overflow when checking PLL values (git-fixes). - media: atomisp: Add check for rgby_data memory allocation failure (git-fixes). - media: cx24116: prevent overflows on SNR calculus (git-fixes). - media: dvb_frontend: do not play tricks with underflow values (git-fixes). - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (stable-fixes). - media: dvbdev: prevent the risk of out of memory access (git-fixes). - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (git-fixes). - media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes). - media: i2c: tc358743: Fix crash in the probe error path when using polling (git-fixes). - media: imx-jpeg: Ensure power suppliers be suspended before detach them (git-fixes). - media: imx-jpeg: Set video drvdata before register video device (git-fixes). - media: mantis: remove orphan mantis_core.h (git-fixes). - media: mtk-jpeg: Fix null-ptr-deref during unload module (git-fixes). - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (git-fixes). - media: platform: exynos4-is: Fix an OF node reference leak in fimc_md_is_isp_available (git-fixes). - media: pulse8-cec: fix data timestamp at pulse8_setup() (git-fixes). - media: s5p-jpeg: prevent buffer overflows (git-fixes). - media: stb0899_algo: initialize cfr before using it (git-fixes). - media: ts2020: fix null-ptr-deref in ts2020_probe() (git-fixes). - media: uvcvideo: Require entities to have a non-zero unique ID (git-fixes). - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (git-fixes). - media: uvcvideo: Stop stream during unregister (git-fixes). - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (git-fixes). - media: v4l2-tpg: prevent the risk of a division by zero (git-fixes). - media: vb2: Fix comment (git-fixes). - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes). - media: wl128x: Fix atomicity violation in fmc_send_cmd() (git-fixes). - mfd: rt5033: Fix missing regmap_del_irq_chip() (git-fixes). - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (git-fixes). - minmax: scsi: fix mis-use of 'clamp()' in sr.c (git-fixes). - misc: apds990x: Fix missing pm_runtime_disable() (git-fixes). - mlxbf_gige: disable RX filters until RX path initialized (git-fixes). - mm/hugetlb: fix nodes huge page allocation when there are surplus pages (bsc#1234012). - mm: avoid unsafe VMA hook invocation when error arises on mmap hook (git-fixes). - mm: move dummy_vm_ops out of a header (git-fixes prerequisity). - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes). - mm: refactor map_deny_write_exec() (git-fixes). - mm: resolve faulty mmap_region() error path behaviour (git-fixes). - mm: unconditionally close VMAs on error (git-fixes). - mmc: core: Further prevent card detect during shutdown (git-fixes). - mmc: mmc_spi: drop buggy snprintf() (git-fixes). - mmc: sunxi-mmc: Fix A100 compatible description (git-fixes). - modpost: remove incorrect code in do_eisa_entry() (git-fixes). - mtd: rawnand: atmel: Fix possible memory leak (git-fixes). - mtd: spi-nor: core: replace dummy buswidth from addr to data (git-fixes). - net: mdio-ipq4019: add missing error check (git-fixes). - net: phy: dp83822: Fix reset pin definitions (git-fixes). - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (git-fixes). - net: relax socket state check at accept time (git-fixes). - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (git-fixes). - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (git-fixes). - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (git-fixes). - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (stable-fixes). - net: wwan: fix global oob in wwan_rtnl_policy (git-fixes). - net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() (git-fixes). - net: xfrm: preserve kabi for xfrm_state (bsc#1233754). - netdevsim: copy addresses for both in and out paths (git-fixes). - netfilter: nf_tables: missing iterator type in lookup walk (git-fixes). - nfs: Fix KMSAN warning in decode_getfattr_attrs() (git-fixes). - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (git-fixes). - nfsd: remove unsafe BUG_ON from set_change_info (bsc#1234121). - nilfs2: fix potential deadlock with newly created symlinks (git-fixes). - nouveau/dp: handle retries for AUX CH transfers with GSP (git-fixes). - nouveau: fw: sync dma after setup is called (git-fixes). - nouveau: handle EBUSY and EAGAIN for GSP aux errors (git-fixes). - ntfs3: Add bounds checking to mi_enum_attr() (bsc#1233207) - nvme-fabrics: fix kernel crash while shutting down controller (git-fixes). - nvme-loop: flush off pending I/O while shutting down loop controller (git-fixes). - nvme-pci: fix freeing of the HMB descriptor table (git-fixes). - nvme-pci: reverse request order in nvme_queue_rqs (git-fixes). - nvme/host: Fix RCU list traversal to use SRCU primitive (git-fixes). - nvme: tcp: avoid race between queue_lock lock and destroy (git-fixes). - ocfs2: fix UBSAN warning in ocfs2_verify_volume() (git-fixes). - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (git-fixes). - ocfs2: uncache inode which has failed entering the group (git-fixes). - of: Add cleanup.h based auto release via __free(device_node) markings (bsc#1232386) - pinctrl: k210: Undef K210_PC_DEFAULT (git-fixes). - pinctrl: qcom: spmi: fix debugfs drive strength (git-fixes). - pinctrl: zynqmp: drop excess struct member description (git-fixes). - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (git-fixes). - platform/x86/amd/pmc: Detect when STB is not available (git-fixes). - platform/x86: panasonic-laptop: Return errno correctly in show callback (git-fixes). - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (bsc#1234098). - power: supply: bq27xxx: Fix registers of bq27426 (git-fixes). - power: supply: core: Remove might_sleep() from power_supply_put() (git-fixes). - power: supply: rt9471: Fix wrong WDT function regfield declaration (git-fixes). - power: supply: rt9471: Use IC status regfield to report real charger status (git-fixes). - powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0 (bsc#1215199). - powerpc/atomic: Use YZ constraints for DS-form instructions (bsc#1194869). - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (bsc#1215199). - powerpc/fadump: Refactor and prepare fadump_cma_init for late init (bsc#1215199). - powerpc/kexec: Fix return of uninitialized variable (bsc#1194869). - powerpc/mm/fault: Fix kfence page fault reporting (bsc#1194869). - powerpc/mm: Fix boot crash with FLATMEM (bsc#1194869). - powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL (bsc#1194869). - powerpc/powernv: Free name on error in opal_event_init() (bsc#1194869). - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (bsc#1194869). - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (bsc#1194869). - powerpc/pseries: Use correct data types from pseries_hp_errorlog struct (bsc#1215199). - powerpc/vdso: Inconditionally use CFUNC macro (bsc#1215199). - pwm: imx-tpm: Use correct MODULO value for EPWM mode (git-fixes). - regmap: detach regmap from dev on regmap_exit (git-fixes). - regmap: irq: Set lockdep class for hierarchical IRQ domains (git-fixes). - rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation. (bsc#1218644) - rtc: ab-eoz9: do not fail temperature reads on undervoltage notification (git-fixes). - rtc: abx80x: Fix WDT bit position of the status register (git-fixes). - rtc: bbnsm: add remove hook (git-fixes). - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (git-fixes). - rtc: rzn1: fix BCD to rtc_time conversion errors (git-fixes). - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - scsi: NCR5380: Check for phase match during PDMA fixup (git-fixes). - scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers (git-fixes). - scsi: Remove scsi device no_start_on_resume flag (git-fixes). - scsi: aacraid: Rearrange order of struct aac_srb_unit (git-fixes). - scsi: cdrom: kABI: fix cdrom_dev_ops change (git-fixes). - scsi: core: Disable CDL by default (git-fixes). - scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING (git-fixes). - scsi: core: Fix the return value of scsi_logical_block_count() (git-fixes). - scsi: core: Handle devices which return an unusually large VPD page count (git-fixes). - scsi: core: alua: I/O errors for ALUA state transitions (git-fixes). - scsi: hisi_sas: Handle the NCQ error returned by D2H frame (git-fixes). - scsi: hpsa: Fix allocation size for Scsi_Host private data (git-fixes). - scsi: kABI: restore no_start_on_resume to scsi_device (git-fixes). - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (git-fixes). - scsi: libsas: Fix the failure of adding phy with zero-address to port (git-fixes). - scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Copyright updates for 14.4.0.6 patches (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Modify CGN warning signal calculation based on EDC response (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Update lpfc version to 14.4.0.6 (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (bsc#1233241 jsc#PED-9943). - scsi: mac_scsi: Disallow bus errors during PDMA send (git-fixes). - scsi: mac_scsi: Refactor polling loop (git-fixes). - scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages (git-fixes). - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (git-fixes). - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (git-fixes). - scsi: mpi3mr: Avoid possible run-time warning with long manufacturer strings (git-fixes). - scsi: mpi3mr: Fix ATA NCQ priority support (git-fixes). - scsi: mpi3mr: Validate SAS port assignments (git-fixes). - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (git-fixes). - scsi: pm8001: Do not overwrite PCI queue mapping (git-fixes). - scsi: pm80xx: Set phy->enable_completion only when we wait for it (git-fixes). - scsi: qedf: Set qed_slowpath_params to zero before use (git-fixes). - scsi: scsi_transport_fc: Allow setting rport state to current state (git-fixes). - scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress (git-fixes). - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (git-fixes). - scsi: smartpqi: correct stream detection (git-fixes). - scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly (git-fixes). - scsi: spi: Fix sshdr use (git-fixes). - scsi: sr: Fix unintentional arithmetic wraparound (git-fixes). - scsi: wd33c93: Do not use stale scsi_pointer value (git-fixes). - security/keys: fix slab-out-of-bounds in key_task_permission (git-fixes). - serial: 8250: omap: Move pm_runtime_get_sync (git-fixes). - signal: Replace BUG_ON()s (bsc#1234093). - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (git-fixes). - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (git-fixes). - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - spi: Fix acpi deferred irq probe (git-fixes). - spi: atmel-quadspi: Fix register name in verbose logging function (git-fixes). - spi: mpc52xx: Add cancel_work_sync before module remove (git-fixes). - spi: tegra210-quad: Avoid shift-out-of-bounds (git-fixes). - tcp: Fix refcnt handling in __inet_hash_connect() (git-fixes). - thermal: core: Initialize thermal zones before registering them (git-fixes). - thermal: int3400: Fix reading of current_uuid for active policy (git-fixes). - thermal: intel: int340x: processor: Fix warning during module unload (git-fixes). - thunderbolt: Honor TMU requirements in the domain when setting TMU mode (stable-fixes). - tools/lib/thermal: Fix sampling handler context ptr (git-fixes). - tools/power turbostat: Fix trailing '\n' parsing (git-fixes). - tools/power turbostat: Increase the limit for fd opened (bsc#1233119). - tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1082555 git-fixes). - tpm: fix signed/unsigned bug when checking event logs (git-fixes). - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (git-fixes). - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (git-fixes). - ucounts: fix counter leak in inc_rlimit_get_ucounts() (bsc#1233460). - unicode: Fix utf8_load() error path (git-fixes). - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (git-fixes). - usb: dwc3: gadget: Fix checking for number of TRBs left (git-fixes). - usb: dwc3: gadget: Fix looping of queued SG entries (git-fixes). - usb: ehci-spear: fix call balance of sehci clk handling routines (git-fixes). - usb: gadget: dummy_hcd: Set transfer interval to 1 microframe (stable-fixes). - usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler (stable-fixes). - usb: gadget: dummy_hcd: execute hrtimer callback in softirq context (git-fixes). - usb: musb: Fix hardware lockup on first Rx endpoint request (git-fixes). - usb: musb: sunxi: Fix accessing an released usb phy (git-fixes). - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (git-fixes). - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (git-fixes). - usb: xhci: Fix TD invalidation under pending Set TR Dequeue (git-fixes). - usb: yurex: make waiting on yurex_write interruptible (git-fixes). - vsock: Update msg_count on read_skb() (git-fixes). - watchdog: apple: Actually flush writes after requesting watchdog restart (git-fixes). - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (git-fixes). - watchdog: rti: of: honor timeout-sec property (git-fixes). - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (git-fixes). - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (git-fixes). - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (git-fixes). - wifi: ath12k: Skip Rx TID cleanup for self peer (git-fixes). - wifi: ath12k: fix crash when unbinding (git-fixes). - wifi: ath12k: fix warning when unbinding (git-fixes). - wifi: ath12k: remove msdu_end structure for WCN7850 (git-fixes). - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (git-fixes). - wifi: brcmfmac: release 'root' node in all execution paths (git-fixes). - wifi: cw1200: Fix potential NULL dereference (git-fixes). - wifi: iwlegacy: Clear stale interrupts before resuming device (stable-fixes). - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (git-fixes). - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - wifi: wfx: Fix error handling in wfx_core_init() (git-fixes). - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (bsc#1233443). - x86/microcode/intel: Remove unnecessary cache writeback and invalidation (git-fixes). - x86/resctrl: Remove hard-coded memory bandwidth limit (git-fixes). - x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() (git-fixes). - x86/tdx: Dynamically disable SEPT violations from causing #VEs (git-fixes). - x86/tdx: Enable CPU topology enumeration (git-fixes). - x86/tdx: Introduce wrappers to read and write TD metadata (git-fixes). - x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup() (git-fixes). - x86/traps: move kmsan check after instrumentation_begin (git-fixes). - x86: Increase brk randomness entropy for 64-bit systems (git-fixes). - x86: fix off-by-one in access_ok() (git-fixes). - xfrm: Export symbol xfrm_dev_state_delete (bsc#1233754). - xfrm: Fix unregister netdevice hang on hardware offload (bsc#1233754). - drm: Expand max DRM device number to full MINORBITS (jsc#PED-11580). - accel: Use XArray instead of IDR for minors (jsc#PED-11580). - drm: Use XArray instead of IDR for minors (jsc#PED-11580). - scsi: lpfc: Copyright updates for 14.4.0.6 patches (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Update lpfc version to 14.4.0.6 (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (bsc#1233241 jsc#PED-9943). - scsi: lpfc: Modify CGN warning signal calculation based on EDC response (bsc#1233241 jsc#PED-9943).