# changelog

author: mapengyuan <mapengyuan@xfusion.com> - 1.0-5.4.u1
changelog:
  - Type:requirement
  - CVE:
  - DESC:use FusionOS instead of xFusion, empty yum repo file,delete RPM-GPG-KEY-EBS file


author: mapengyuan <mapengyuan@xfusion.com> - 1.0-9.u1
changelog:
  - Type:requirement
  - CVE:
  - DESC:replace openEuler to FusionOS, update COPYING and desktop-backgrounds-default.xml file.


author: mapengyuan <mapengyuan@xfusion.com> - 23-57.u1
changelog:
  - Type:requirement
  - CVE:
  - DESC:change value in /etc/os-release and etc/FusionOS-release and change EULA file and delete-eula.en_US-files


author: mapengyuan <mapengyuan@xfusion.com> - 30-59.u1
changelog:
  - Type:requirement
  - CVE:
  - DESC:use FusionOS substitute for xFusion and fix the issue where signature verification failed for ko


author: panchenbo <panchenbo@kylinsec.com.cn> - 1.22.0-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: fix build error: add missing BuildRequires:pkgconfig(polkit-gobject-1)


author: qinxue <qinxue6@h-partners.com> - 1:1.44.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mptcp fix error handling rp_filter when kernel don't support mptcp


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.8-2
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: pkcon: Use appropriate callbacks for client / task async calls


author: lingsheng <lingsheng1@h-partners.com> - 1.2.8-3
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: Revert PkClient: Replace the GSimpleAsyncResult with the GTask API


author: changhan <changhan@xfusion.com> - 1.2.8-5.u1
changelog:
  - Type:CVE
  - CVE:CVE-2026-41651
  - DESC:move dbus interface to main package
         split out gtk module from devel sub package
         cleanup buildrequires
         fix CVE-2026-41651


author: fandehui <fandehui@xfusion.com> - 36.16.5-49.u5
changelog:
  - Type:requirement
  - CVE:
  - DESC:Exit code 14 (license exists) is expected. Add allowed_returncodes
    to run_cmd() so baseline pipeline continues past it.


author: yanglongkang<yanglongkang@h-partners.com> - 3.2.2-2
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Adding Patching Operations
         provides relibility and self-healing capabilities for service


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 3.2.5-2
changelog:
  - Type：update
  - ID：NA
  - SUG:NA
  - DESC: Modify the license to SPDX format
          Delete MIT and Public Domain license because it no longer appears in the upstream source


author: zhangpan <zhangpan103@h-partners.com> - 2.51.0-5
changelog:
  - add macros to control if need /usr/bin/xprop
  - at-spi2-core-help package provided at-spi2-atk-help


author: jchzhou <zhoujiacheng@iscas.ac.cn>- 1:3.1.2-12
changelog:
  - backport patches for fixing Wimplicit-function-declaration, Wbuiltin-declaration-mismatch when building with newer compilers


author: xupeng<xupeng@xfusion.com> - 1.0-1.u16
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix the problem of network failure in different network segments in version 5.10


author: wangsihong<wangsihong@xfusion.com> - 1.0-1.u19
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Mitigate race condition by ensuring /tmp/auto-pxe directory is recreated safely


author: wangsihong<wangsihong@xfusion.com> - 1.1-1.u1
changelog:
  - Type:requirement
  - CVE:
  - DESC:Fix the issue of high code duplication rate.
         Updated the classifiers list.
         Update the version number to 1.1.


author: mapengyuan <mapengyuan@xfusion.com> - 0.8-27.u1
changelog:
  - Type:CVE
  - CVE:CVE-2025-68471,CVE-2025-68468,CVE-2025-68276,CVE-2026-24401
  - DESC: fix CVE-2025-68471,CVE-2025-68468,CVE-2025-68276,CVE-2026-24401,CNNVD-2026-79938149


author: wangyuhang <wangyuhang27@huawei.com> -5.2.15-13
changelog:
  - remove the log message for failing to open cmdline,
    and ensure that the mayexec function does not modify the value of errno.


author: yixiangzhike <yixiangzhike007@163.com> - 5.2.15-16
changelog:
  - sync patches from bash community:
     fix default file descriptor for <> redirection when printing command
     update BASH_COMMAND for subshells
     fix potential file descriptor leak in here document pipes


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-3
changelog:
  - Type:CVE
  - CVE:CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076
  - SUG:NA
  - DESC:fix CVE-2024-0760,CVE-2024-1737,CVE-2024-1975,CVE-2024-4076


author: chengyechun<chengyechun1@huawei.com> - 32:9.18.21-4
changelog:
  - Type:CVE
  - CVE:CVE-2024-11187,CVE-2024-12705
  - SUG:NA
  - DESC:fix CVE-2024-111878 and CVE-2024-12705


author: tangce<tangce1@huawei.com> - 32:9.18.21-5
changelog:
  - Type:CVE
  - CVE:CVE-2025-8677,CVE-2025-40778,CVE-2025-40780
  - SUG:NA
  - DESC:fix CVE-2025-8677,CVE-2025-40778,CVE-2025-40780


author: changhan <changhan@xfusion.com> - 32:9.18.21-9.u2
changelog:
  - Type:CVE
  - CVE:CVE-2026-3039,CVE-2026-3592,CVE-2026-5946
  - DESC:backport some patches from upstream
         fix CVE-2026-3039,CVE-2026-3592,CVE-2026-5946


author: yueyuankun <yueyuankun@kylinos.cn> - 3.8.2-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix syntax error on SymbolKind.toString method
         fix interface syntax error


author: sunhai<sunhai10@huawei.com> - 1:3.8.2-11
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Fix expected exception type when activating devices in populor


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-12
changelog:
  - btrfs-progs: convert: insert a dummy inode item before inode ref for ext2/4
  - btrfs-progs: convert: for ext2, fix possible tree-checker error when converting a large fs


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-17
changelog:
  - sync patch from community
    btrfs-progs: fix the wrong size from device_get_partition_size_sysfs()


author: liuh <liuhuan01@kylinos.cn> - 6.6.3-19
changelog:
  - sync patch from community
    btrfs-progs: subvolume: fix a bug that leads to unnecessary error message


author: xinghe <xinghe2@h-partners.com> - 1.18.1-5
changelog:
  - Type:CVE
  - CVE:CVE-2023-32067 CVE-2023-31130
  - SUG:restart
  - DESC:fix CVE-2023-32067 CVE-2023-31130


author: wangjiang <wangjiang37@h-partners.com> - 2023.2.64-2
changelog:
  - remove expired and sync new certificates
    Removing:
      Security Communication Root CA
    Adding:
      D-Trust SBR Root CA 1 2022
      D-Trust SBR Root CA 2 2022
      Telekom Security SMIME ECC Root 2021
      Telekom Security SMIME RSA Root 2023
      Telekom Security TLS ECC Root 2020
      Telekom Security TLS RSA Root 2023


author: wangjiang <app@cameyan.com> - 2023.2.64-4
changelog:
  - remove expired and sync new certificates
    Removing:
      Certificate "Explicitly Distrust DigiNotar Root CA"
      Certificate "Baltimore CyberTrust Root"
    Adding:
      Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
      Certificate "TWCA CYBER Root CA"
      Certificate "TWCA Global Root CA G2"
      Certificate "SecureSign Root CA12"
      Certificate "SecureSign Root CA14"
      Certificate "SecureSign Root CA15"
      Certificate "D-TRUST BR Root CA 2 2023"
      Certificate "D-TRUST EV Root CA 2 2023"


author: fandehui <fandehui@xfusion.com> - 2023.2.64-5.u1
changelog:
  - Type:requirement                                                                                                     
  - CVE:                                                                                                                 
  - DESC:add SM root certificates for government, public, and device applications


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1.18.0-2
changelog:
  - Type:CVE
  - ID:CVE-2025-50422
  - SUG:NA
  - DESC:Fix a NULL access in active_edges_to_traps()
         Add unlikely() to test for x == INT32_MAX for the NULL reference


author: yangyun <yangyun50@huawei.com> - 1.5.5-1
changelog:
  - update to 1.5.5 version
  	- add support of readers (see README.md)
  	- configure.ac: disable the use of --disabele-usbdropdir
  	- parse: create output.bin file
  	- udev: Disable USB-persist for CCID devices
  	- configure: fail if flex is not found
  	- some other minor improvments


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-54
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.1
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.1


author: liyunfei <liyunfei33@huawei.com> - 17.0.6-56
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.2
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.2


author: liyufnei <liyunfei33@huawei.com> - 17.0.6-57
changelog:
  - update to llvm-for-oe-17.0.6-2512.0.3
  - release-note https://gitee.com/openeuler/llvm-project/releases/tag/llvm-for-oE-17.0.6-2512.0.3


author: chenbo <chenbo1@xfusion.com> - 17.0.6-57.u1
changelog:
  - Type:requirement
  - CVE:
  - DESC:Comment out unused LIT_XFAIL entries for OMPD tests in chroot builds


author: mapengyuan <mapengyuan@xfusion.com> - 17.0.6-63.u4
changelog:
  - Type:bugfix
  - CVE:
  - DESC:update to llvm-for-oE-17.0.6-2603.0.2
         add profile build for llvm
         update llvm.profdata
         Sync patch: set -licm-skip-no-memory-inline-asm option to false
         disable profile build


author: Dongxing Wang <dongxing.wang_a@thundersoft.com> - 3.27.9-5
changelog:
  - Support 
    /usr/bin/cmake --build "aarch64-FusionOS-linux-gnu" -j80 --verbose and 
    DESTDIR="/home/abuild/rpmbuild/BUILDROOT/cmake-3.27.9-8.fos26.aarch64" /usr/bin/cmake --install "aarch64-FusionOS-linux-gnu".


author: fuanan <fuanan3@h-partners.com> - 3.27.9-6
changelog:
  - remove the architecture judgment in the patches section;
  - include all patches in the source package.


author: Han Jinpeng <hanjinpeng@kylinos.cn> - 309-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: remove incorrect provides cockpit-machines and cockpit-machines-ovirt
          remove require libvirt and libvirt-client


author: songyakang <songyakang@xfusion.com> - 1.0.0-14
changelog:
  - Type:requirement
  - CVE:
  - DESC: remove KunlunOS identifier, add systemd service to manage ko modules


author: changhan <changhan@xfusion.com> - 1:1.1.1m-18.u1
changelog:
  - Type:CVE
  - CVE:CVE-2025-69418,CVE-2026-22796,CVE-2026-22795,CVE-2025-69419,CVE-2025-68160,CVE-2025-69421,CVE-2025-69420,CVE-2026-28387,CVE-2026-28388,CVE-2026-28389,CVE-2026-28390
  - DESC:Fix CVE-2025-69418,CVE-2026-22796,CVE-2026-22795,CVE-2025-69419,CVE-2025-68160,CVE-2025-69421,CVE-2025-69420,CVE-2026-28387,CVE-2026-28388,CVE-2026-28389,CVE-2026-28390
         add sw64 support


author: wangyong2 <wangyong2@xfusion.com> - 1:1.1.1m-19.u2
changelog:
  - Type:CVE
  - CVE:CVE-2026-34180,CVE-2026-42766,CVE-2026-45447,CVE-2026-7383,CVE-2026-9076
  - DESC:Fix CVE-2026-34180,CVE-2026-42766,CVE-2026-45447,CVE-2026-7383,CVE-2026-9076


author: dongyuzhen <dongyuzhen@h-partners.com> - 1.6.22-20
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:delete task asynchronously to avoid containerd be killed when delete is blocking


author: Yu Peng <yupeng@kylinos.cn> - 1.6.22-23
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix ctr snapshot mount produce invalid mount command for empty option.


author: hugel <gengqihu2@h-partners.com> - 9.4-12
changelog:
  - sync patches from community
  - add backport-numfmt-don-t-require-a-suffix-with-from-iec-i.patch
        backport-sort-fix-debug-buffer-overrun.patch
        backport-tac-avoid-out-of-bounds-access.patch
        backport-yes-avoid-failure-on-CHERI-protected-systems.patch


author: fuanan <fuanan3@h-partners.com> - 2.13-9
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:revert fix CVE-2015-1197 because it causes AT testcases problems


author: yixiangzhike <yixiangzhike007@163.com> - 1.17.0-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Fix the failure of testcase when building with python-setuptools>=66.0.0


author: Funda Wang <fundawang@yeah.net> - 1:2.4.7-7
changelog:
  - fix CVE-2025-58060, CVE-2025-58364
  - move www files into main package due to requirement by web interface


author: wangsihong <wangsihong@xfusion.com> - 1:2.4.7-14.u4
changelog:
  - Type:CVE
  - CVE:CVE-2026-27447,CVE-2026-34978,CVE-2026-34990,CVE-2026-34980
  - DESC:Fix CVE-2026-27447,CVE-2026-34978,CVE-2026-34990
         fix CVE-2026-34980 regression


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-17
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix freeing of resources in disconnect
         openssl: fix crash on missing cert password


author: zhouyihang <zhouyihang3@h-partners.com> - 8.4.0-24
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:libssh: fix readdir issues
         h3: fix query of concurrent streams
         noproxy: fix the IPV6 network mask pattern match
         krb5_gssapi: fix memory leak on error path
         openldap: fix memory-leak in error path
         conn: fix hostname move on connection reuse 
         pop3: fix CAPA response termination detection
         libssh: properly free sftp_attributes
         openssl: fix a potential memory leak of params.cert


author: liaoshuai <liaoshuai@xfusion.com> - 8.4.0-28.u1
changelog:
  - Type:CVE
  - CVE:CVE-2025-14017,CVE-2025-14524,CVE-2025-14819,CVE-2025-15079,CVE-2025-15224,CVE-2026-1965,CVE-2026-3783,CVE-2026-3784
  - DESC:urlapi: avoid null deref if setting blank host to url
         urlapi: skip appending NULL pointer query
         fix CVE-2025-14017 CVE-2025-14524 CVE-2025-14819 CVE-2025-15079 CVE-2025-15224
         formdata: validate callback is non-NULL before use
         tftp: correct the filename length check
         fix CVE-2026-1965 CVE-2026-3783 CVE-2026-3784


author: liaoshuai <liaoshuai@xfusion.com> - 8.4.0-29.u2
changelog:
  - Type:CVE
  - CVE:CVE-2026-4873,CVE-2026-5545,CVE-2026-5773,CVE-2026-6253,CVE-2026-6276,CVE-2026-6429,CVE-2026-7168
  - DESC:Fix CVE-2026-4873,CVE-2026-5545,CVE-2026-5773,CVE-2026-6253,CVE-2026-6276,CVE-2026-6429,CVE-2026-7168


author: wuyifeng <wuyifeng10@huawei.com> - 78-1
changelog:
  - upgrade to version 78:
  	-incorporate up to 6.5 kernel
  	-add new cxl commands
  	-fix some bugs detail see:github.com/pmem/ndctl


author: hongjinghao <hongjinghao@huawei.com> - 1:1.14.8-3
changelog:
  - sync patch from upstream
  	backport-bus-Don-t-crash-if-bus_context_create_client_policy-.patch
  	backport-bus-When-failing-to-reload-client-policy-continue-it.patch
  	backport-test-Add-a-targeted-test-for-_dbus_unix_groups_from_.patch
  	backport-userdb-Add-proper-error-reporting-when-getting-group.patch


author: liuyumeng <liuyumeng5@huawei.com> - 0.40.0-2
changelog:
  - add patch:dconf read random contents of memory causing discrepancy,initialize memory to eliminate discrepancy


author: hanhuihui <hanhuihui5@huawei.com> - 4.16.2-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf:Remove --duplicates and --oldinstallonly exit with 0 when nothing to remove and Add all candidates for reinstall to solver


author: LuWu <2398491106@qq.com> - 4.16.2-5
changelog:
  - Limit queries to nevra forms when provided by command and Update the man page entry for the countme option


author: majianhan <majianhan@kylinos.cn> - 4.16.2-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix dnf-automatic service to apply security updates the same way as dnf tool


author: chenhaixing <chenhaixing@huawei.com> - 4.3.1-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:dnf-plugins-core:download plugin:respect install_weak_deps option value


author: lingsheng <lingsheng1@h-partners.com> - 2.90-4
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Update DNS records after pruning DHCP leases
         cache: Fix potential NULL deref in arcane situations.
         Fix potential memory leak
         Fix possible SIGSEGV in bpf.c
         allow binding mac with ip6


author: Liu Qingtao <liu.qingtao2@zte.com.cn> - 2.90-5
changelog:
  - Type:bugfix
  - CVE:
  - SUG:NA
  - DESC:Ignore Wincompatible-pointer-types error when compiling with gcc-14.3


author: liaoshuai <liaoshuai@xfusion.com> - 2.90-6.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Add upstream security patches
         Fix SEGV in Dbus code.
         Fix bounds checking in check_ia()
         More fixes for DHCP ops in Dbus when DHCP not configured.


author: changhan <changhan@xfusion.com> - 2.90-9.u3
changelog:
  - Type:CVE
  - CVE:CVE-2026-2291,CVE-2026-4890,CVE-2026-4891,CVE-2026-4892,CVE-2026-4893,CVE-2026-5172
  - DESC:Fix buffer overflow in struct bigname
         Fix NSEC bitmap parsing infinite loop
         Verify rdlen field in RRSIG packets
         Fix buffer overflow in helper.c with large CLIDs
         Fix broken client subnet validation
         Fix buffer overflow vulnerability in extract_addresses()


author: suoxiaocong <suoxiaocong@kylinos.cn> - 18.09.0-337
changelog:
  - Type:BUG
  - CVE:NA
  - SUG:NA
  - DESC:remove ifarch condition check when addding source, this causes src.rpm missing files


author: yanglongkang <yanglongkang@h-partners.com> - 7.5.2-1
changelog:
  - Update package to version 7.5.2
  - Dos2unix can print info about the line break type of the last line, or indicate there is none.
  - Updated documentation about the ASCII conversion mode.
  - Fixed problem of converting a symbolic link target that is on another file system.
  - Updated Chinese and Serbian translations.


author: huangdengdui <huangdengui@huawei.com> - 23.11-30
changelog:
  Sync some patchs from upstreaming for hns3 pmd and modifications
   are as follow:
   - net/hns3: fix unrelease some resources on reset case
   - net/hns3: fix divide by zero
   - net/hns3: fix incorrect failed rollback
   - net/hns3: fix memory leakage for indirect action
   - net/hns3: fix extra waiting for link up
   - net/hns3: fix variable overflow
   - net/hns3: fix memory leakage in failure path
   - net/hns3: remove weak symbols
   - net/hns3: fix reset timeout
   - net/hns3: fix copper port initialization
   - net/hns3: rename RAS module
   - net/hns3: remove PVID info dump for VF
   - net/hns3: fix mbuf freeing in simple Tx path
   In addition, sync a bugfix for devtools:
   - devtools: fix symbol listing


author: huangdengdui <huangdengui@huawei.com> - 23.11-33
changelog:
  Sync some bugfixes for hns3 pmd and modifications are as follow:
   - net/hns3: fix Rx packet without CRC data
   - net/hns3: fix CRC data segment
   - net/hns3: check requirement for hardware GRO
   - net/hns3: allow use of Tx vector when fast free not enabled
   - net/hns3: allow use of Rx vector mode with VLAN filter


author: huangdengdui <huangdengui@huawei.com> - 23.11-34
changelog:
  Sync some patches about support TSO for packets with
   IPv6 extension header and modifications are as follow:
   - net: add tunnel packet type parsing
   - app/testpmd: use packet type parsing API
   - app/testpmd: fix VLAN parsing in checksum engine
   - net: fix offset in GENEVE packet parsing
   - app/testpmd: fix packet type parsing
   - net: fix GTP packet parsing
   - net: add tunnel length in UDP tunnel parsing
   - app/testpmd: fix tunnel inner info


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-36
changelog:
  Unify locks, fix Rx path and resource release:
   - net/hns3: fix inconsistent lock
   - net/hns3: fix overwrite mbuf in vector path
   - net/hns3: fix unrelease VLAN resource when init fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-37
changelog:
  Fix unrelease VLAN resource and L4 protocol retrieval from L3 header:
   - net/hns3: fix unrelease VLAN resource when init fail
   - app/testpmd: fix L4 protocol retrieval from L3 header


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-38
changelog:
  Upload some patches of VF multiple TC and others:
   - app/testpmd: handle IEEE1588 init failure
   - examples/l3fwd: add option to set Rx burst size
   - examples/eventdev: fix queue crash with generic pipeline
   - examples/l3fwd: add Tx burst size configuration option
   - net/hns3: remove duplicate struct field
   - net/hns3: refactor DCB module
   - net/hns3: parse max TC number for VF
   - net/hns3: support multi-TCs capability for VF
   - net/hns3: fix queue TC configuration on VF
   - net/hns3: support multi-TCs configuration for VF
   - app/testpmd: avoid crash in DCB config
   - app/testpmd: show all DCB priority TC map
   - app/testpmd: relax number of TCs in DCB command
   - app/testpmd: reuse RSS config when configuring DCB
   - app/testpmd: add prio-tc map in DCB command
   - app/testpmd: add queue restriction in DCB command
   - app/testpmd: add command to disable DCB
   - examples/l3fwd: force link speed
   - examples/l3fwd-power: force link speed
   - net/hns3: log invalid MAC address from firmware
   - config/arm: add HiSilicon HIP12
   - app/testpmd: fix DCB Tx port
   - app/testpmd: fix DCB Rx queues
   - app/testpmd: set DCB forwarding TCs
   - app/testpmd: support multi-cores process one TC
   - app/testpmd: fix inner UDP checksum offload fail


author: huangdonghua <huangdonghua3@h-partners.com> - 23.11-39
changelog:
  fix L2 length for GRE packets:
   - net: fix L2 length for GRE packets
   - net/hns3: fix outer UDP checksum fail with simple BD


author: mapengyuan<mapengyuan@xfusion.com> - 1.0-1.u8
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Fix passwordless SSH configuration abnormality and Debian GNU/Linux expect installation issues


author: guowenjia<guowenjia@xfusion.com> - 1.1-1.u2
changelog:
  - Type:requirement
  - CVE:
  - DESC:Supports the 910C card, with compatibility adaptations for ascend-dmi.


author: guowenjia<guowenjia@xfusion.com> - 1.1-1.u5
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Remove Sensitive Password and IP Information from Configuration Comments


author: xinghe <xinghe2@h-partners.com> - 2.0.11-12
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix ebtables-restore --noflush failed when ebtables is uninstall


author: changhan <changhan@xfusion.com> - 202308-38.u1
changelog:
  - Type:CVE
  - CVE:CVE-2025-15467,CVE-2025-69418,CVE-2025-69419,CVE-2026-22795,CVE-2026-22796,CVE-2025-69420,CVE-2025-69421,CVE-2025-68160,CVE-2026-28388,CVE-2026-31790,CVE-2026-28389
  - DESC:Enhance virtCCA isolation
         fix CVE-2025-15467,CVE-2025-69418,CVE-2025-69419,CVE-2026-22795,CVE-2026-22796,CVE-2025-69420,CVE-2025-69421,CVE-2025-68160,CVE-2026-28388,CVE-2026-31790,CVE-2026-28389
         Fix error in IsRealm


author: zhangqiumiao <zhangqiumiao1@huawei.com> - 18-4
changelog:
  - Fix segfault when passed --index is greater than current boot order size
    Add missing short option handling for --index (-I)


author: zhangxingrong <zhangxingrong@uniontech.com> - 18-5
changelog:
  - Fix the incorrect long parameter in help messages
  - efibootmgr: delete_bootnext is just a boolean, not an entry id


author: changhan <changhan@xfusion.com> - 38-8.u1
changelog:
  - Type:CVE
  - CVE:CVE-2026-6862
  - DESC:fix sw64 build
         backport patch to fix conflicting types issue due to enum/integer mismatch
         fix CVE-2026-6862


author: lifeifei <lifeifei@kylinos.cn> - 0.190-3
changelog:
  - Type:requirement
  - CVE:NA
  - SUG:NA
  - DESC:add noreplace to /usr/lib/sysctl.d/10-default-yama-scope.conf


author: wangqiang <wangqiang1@kylinos.cn> - 0.190-4
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: Fix handling of corefiles with non-contiguous .so segments


author: shixuantong <shixuantong1@huawei.com> - 0.190-6
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:move /usr/lib64/libdebuginfod.so from debuginfod-client-devel to debuginfod-client


author: yuanchicheng <chicheng.oerv@isrc.iscas.ac.cn> - 0.190-10
changelog:
  - Type: bugfix
  - CVE: NA
  - SUG: NA
  - DESC: backport-fix-riscv64-return-value-location-retrieval-implementation.patch


author: yanglu <yanglu72@h-partners.com> - 2:6.6-5
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:ethtool:hibmcge:fix wrong register address in pretty print of ethtool -d command


author: andy <liuyang01@kylinos.cn> - 2:6.6-6
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Fix SFF-8472 transceiver module identification
          ethtool: Add default branch to sff8636_show_all_ioctl switch
          qsfp: Better handling of Page 03h netlink read failure
          module-eeprom: treat zero arguments like any other arguments for hex dump
          qsf: Better handling of Page A2h netlink read failure


author: Fengyan Mu <mufengyan@huawei.com> - 2:6.6-7
changelog:
  - Type:requirement
  - Id:NA
  - SUG:NA
  - DESC:ethtool: Add support the printer for the registers of unic driver
          through the command -d


author: mapengyuan <mapengyuan@xfusion.com> - 2.5.0-18.u1
changelog:
  - Type:CVE
  - CVE:CVE-2026-24515,CVE-2026-25210,CVE-2026-32778,CVE-2026-32777,CVE-2026-32776,CVE-2026-41080
  - DESC:fix CVE-2026-24515,CVE-2026-25210,CVE-2026-32778,CVE-2026-32777,CVE-2026-32776,CVE-2026-41080


author: wangsihong <wangsihong@xfusion.com> - 3.16-8.u1
changelog:
  - Type:requirement
  - CVE:
  - DESC:Built-in administrators secadm and auditadm for separation of powers.


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Firewall startup is to set CleanupModuleOnxit=yes to unload related ko when stopping firewalld service
         To reduce unnecessary loading of ebtables-related kernel modules
         fix(nm): release NM client after a timeout


author: zhouyihang <zhouyihang3@h-partners.com> - 1.2.6-8
changelog:
  - Type:bugfix
  - CVE:NA   
  - SUG:NA   
  - DESC:fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
         fix(ipset): fix configuring IP range for ipsets with nftables
         fix(ipset): fix configuring "timeout","maxelem" values for
         fix(rich): validate service name of rich rule
         fix(rich): fix range check for large rule limit
         fix(nftables): use current pkttype keywords


author: zhangxingrong <zhangxingrong@uniontech.cn> - 1.4.3-3
changelog:
  - Limit the number of clock() calls
  - Documentation (man/flac.md); fix typo 
  - flac: foreign_metadata: fix -Walloc-size
  - Fix format ending up with wrong subformat


author: changhan <changhan@xfusion.com> - 2:2.11.8-5.u1
changelog:
  - Type:CVE
  - CVE:CVE-2026-22852,CVE-2026-22856,CVE-2026-22859,CVE-2026-23530,CVE-2026-23531,CVE-2026-23532,CVE-2026-23534,CVE-2026-24491,CVE-2026-24675,CVE-2026-24676,CVE-2026-24679,CVE-2026-24681,CVE-2026-24682,CVE-2026-24683,CVE-2026-24684,CVE-2026-25997,CVE-2026-26271,CVE-2026-26986,CVE-2026-27015,CVE-2026-25941,CVE-2026-22855,CVE-2026-22857,CVE-2026-23533,CVE-2026-23732,CVE-2026-23883,CVE-2026-23884,CVE-2026-29776,CVE-2026-26955,CVE-2026-26965,CVE-2026-31806,CVE-2026-31883,CVE-2026-31885,CVE-2026-33984,CVE-2026-33983,CVE-2026-31897,CVE-2026-25942,CVE-2026-25952,CVE-2026-25953,CVE-2026-25954,CVE-2026-27951,CVE-2026-29774,CVE-2026-29775,CVE-2026-31884,CVE-2026-33985
  - DESC:Update to 2.11.8 to fix CVEs
         Fix CVE-2026-22852,CVE-2026-22856,CVE-2026-22859,CVE-2026-23530,CVE-2026-23531,CVE-2026-23532,CVE-2026-23534,CVE-2026-24491,CVE-2026-24675,CVE-2026-24676,CVE-2026-24679,CVE-2026-24681,CVE-2026-24682,CVE-2026-24683,CVE-2026-24684,CVE-2026-25997,CVE-2026-26271,CVE-2026-26986,CVE-2026-27015,CVE-2026-25941,CVE-2026-22855,CVE-2026-22857,CVE-2026-23533,CVE-2026-23732,CVE-2026-23883,CVE-2026-23884
         Fix CVE-2026-29776
         Fix CVE-2026-26955,CVE-2026-26965,CVE-2026-31806,CVE-2026-31883,CVE-2026-31885,CVE-2026-33984,CVE-2026-33983
         Fix CVE-2026-31897: Out-of-bounds read in freerdp_bitmap_decompress_planar when SrcSize is 0
         Fix CVE-2026-25942,CVE-2026-25952,CVE-2026-25953,CVE-2026-25954,CVE-2026-27951,CVE-2026-29774,CVE-2026-29775,CVE-2026-31884,CVE-2026-33985


author: changhan <changhan@xfusion.com> - 2:2.11.8-6.u4
changelog:
  - Type:CVE
  - CVE:CVE-2026-40254
  - DESC:Fix CVE-2026-40254 and apply the post-patch for CVE-2026-33977


author: yangyun <yangyun50@huawei.com> -3.16.2-1
changelog:
  - upgrade to 3.16.2
  	- fix some issues (see: https://github.com/libfuse/libfuse/releases) 
  	- improved support for some less common systems (32bit, alternative libcs)
  	- unsupported mount options are no longer silently accepted
  	- auto_unmount is now compatible with allow_other
  	- readdir kernel cache can be enabled from high-level API


author: Qin Fandong <qinfandong@kylinos.cn> - 1.8.17-9
changelog:
  - Remove build requires protobuf-c* and disable plugin logitech-bulkcontroller
    which to upgrade the firmware on Logitech Video Collaboration products.


author: Funda Wang <fundawang@yeah.net> - 9.56.1-14
changelog:
  - Type:CVE
  - ID:NA
  - SUG:NA
  - DECS: Fix CVE-2025-27830, CVE-2025-27832, CVE-2025-27833, CVE-2025-27834, CVE-2025-27835, CVE-2025-27836


author: hdliu <dev03108@linx-info.com> - 9.56.1-15
changelog:
  - Add font mappings so that the PS interpreter can rasterize Chinese content using the two fonts STKaiti-Regular and STheiti-Regular.


author: yaoxin <yao_xin001@hoperun.com> - 5.2.2-1
changelog:
  - Update to 5.2.2
    * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506 (bsc#1198880)
    * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
    * Address SF issue #166: a read zero page leads segment fault in
      getarg.c and memory leaks in gif2rgb.c and gifmalloc.c


author: fuanan <fuanan3@h-partners.com> - 2.43.0-7
changelog:
  - Type:CVE
  - ID:CVE-2025-48384 CVE-2025-48385 CVE-2025-48386
  - SUG:NA
  - DESC:Fix CVE-2025-48384 CVE-2025-48385 CVE-2025-48386


author: fuanan <fuanan3@h-partners.com> - 2.43.0-8
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:fix malformed patch:
         backport-CVE-2025-48385-bundle-uri-fix-arbitrary-file-writes-via-parameter-i.patch


author: fuanan <fuanan3@h-partners.com> - 2.43.0-9
changelog:
  - Type:CVE
  - ID:CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835
  - SUG:NA
  - DESC:Fix CVE-2025-27613 CVE-2025-27614 CVE-2025-46334 CVE-2025-46835


author: fuanan <fuanan3@h-partners.com> - 2.43.0-10
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:backport upstream patch
         config.mak.uname: set CSPRNG_METHOD to getrandom on Linux


author: mapengyuan <mapengyuan@xfusion.com> - 2.78.3-15.u2
changelog:
  - Type:CVE
  - CVE:CVE-2026-1484,CVE-2026-1485,CVE-2026-1489
  - DESC:Fix CVE-2026-1484,CVE-2026-1485,CVE-2026-1489
         gio: Fix a few precondition return values to match the return type


author: wangyong <wangyong2@xfusion.com> - 2.38-102.u1
changelog:
  - Type:CVE
  - CVE:CVE-2026-0861,CVE-2026-0915,CVE-2025-15281,CVE-2026-4437,CVE-2026-4438,CVE-2026-4046,CVE-2026-5450,CVE-2026-5928
  - DESC:nptl: Optimize trylock for high cache contention workloads
         memalign: reinstate alignment overflow check (CVE-2026-0861)
         resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)
         posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)
         Uncode 15.1 Support
         spec: drop stale %endif comment (# %{run_glibc_tests})
         spec: normalize changelog dates
         AArch64: Optimize memcpy for Kunpeng 950 processor
         Backport patch to fix cache computation on Hygon under hypervisors
         AArch64: Improve memset when len is 64
         AArch64: Optimize memcmp for Kunpeng 950 processor
         resolv: Count records correctly (CVE-2026-4437)
         resolv: Check hostname for validity (CVE-2026-4438) 
         iconvdata: Fix invalid pointer arithmetic in ANSI_X3.110 module
         posix: Run tst-wordexp-reuse-mem test
         elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso
         explicitly package /usr/lib64/gconv/gconv-modules.d
         LoongArch: Sync fix from glibc upstream
         Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046)
         Document CVE-2026-4046
         fix-cve-2026-5450
         fix-CVE-2026-5928


author: changhan <changhan@xfusion.com> - 2.38-106.u2
changelog:
  - Type:CVE
  - CVE:CVE-2026-5928,CVE-2026-5450,CVE-2026-5435,CVE-2026-6238
  - DESC:include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h
         Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921)
         libio: Fix ungetwc operating on byte stream [BZ #33998] (CVE-2026-5928)
         stdio-common: Fix buffer overflow in scanf %mc [BZ #34008] (CVE-2026-5450)
         AArch64: Sync latest memcmp optimizations for Kunpeng 950
         fix CVE-2026-5435,CVE-2026-6238


author: wuguanghao <wuguanghao3@huawei.com> - 11.1-1
changelog:
  - upgrade to 11.1
    - add simple-quota xattr to afr and ec ignore list
    - fix asan use-after-free bug
    - fix error not supported for ipv6
    - support OpenSSL 3.0
    - drop libglusterd
    - O_PATH support over protocol
    - Enable AES cipher for SSL by default
    - glusterd: add stripe_count in volume info
    - snapshots: Support for ZFS Snapshots
    - gfapi: Add support for 'AT_EMPTY_PATH' and 'AT_REMOVEDIR' flag


author: wangxiaomeng <wangxiaomeng@kylinos.cn> - 11.1-2
changelog:
  - fix upgrade error that {_mandir}/man8/*gluster*.8* belong to package glusterfs currently conflict with that belong to package help in the lower version.


author: wangyong2 <wangyong2@xfusion.com> - 3.8.2-10.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:backport patches to fix pkcs11 bugs
         pkcs11: fix module name resolution for unconfigured modules
         pkcs11: properly fall back to thread-unsafe module init


author: changhan <changhan@xfusion.com> - 3.8.2-15.u2
changelog:
  - Type:CVE
  - CVE:CVE-2025-14831,CVE-2026-33845,CVE-2026-33846,CVE-2026-3833,CVE-2026-42009,CVE-2026-42010,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260,CVE-2026-5419,CVE-2026-42013,CVE-2026-3832
  - DESC:fix CVE-2025-14831,CVE-2026-33845,CVE-2026-33846,CVE-2026-3833,CVE-2026-42009,CVE-2026-42010,CVE-2026-42014,CVE-2026-42015,CVE-2026-5260,CVE-2026-5419,CVE-2026-42013,CVE-2026-3832
         iterate ocsp response records for matching certificate


author: Julian Zhu <julian.oerv@isrc.iscas.ac.cn> - 1.21.4-40
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: Fix the bootstrap failure caused by the backport of RISC-V RVA23 support


author: huang-xiaoquan <huangxiaoquan1@huawei.com> - 1.21.4-42
changelog:
  - Type:Feature
  - CVE:NA
  - SUG:NA
  - DESC: [stepopt2] Add goexperiment.StepOpt2 for optimized step function in runtime


author: huzhangying <huzhangying@huawei.com> - 1.21.4-43
changelog:
  - Type:CVE
  - CVE:CVE-2025-58183,CVE-2025-58189,CVE-2025-61724,CVE-2025-58188,CVE-2025-58185,CVE-2025-58187,CVE-2025-61723,CVE-2025-47912,CVE-2025-58186
  - SUG:NA
  - DESC:fix CVE-2025-58183,CVE-2025-58189,CVE-2025-61724,CVE-2025-58188,CVE-2025-58185,CVE-2025-58187,CVE-2025-61723,CVE-2025-47912,CVE-2025-58186


author: guowenjia <guowenjia@xfusion.com> - 1.21.4-45.u1
changelog:
  - Type:CVE
  - CVE:CVE-2025-61723,CVE-2025-61728,CVE-2025-61731,CVE-2025-61732,CVE-2025-68119,CVE-2025-68121,CVE-2025-61726,CVE-2025-47912
  - DESC:Fix CVE-2025-61723,CVE-2025-61728,CVE-2025-61731,CVE-2025-61732,CVE-2025-68119,CVE-2025-68121,CVE-2025-61726,CVE-2025-47912


author: guowenjia <guowenjia@xfusion.com> - 1.21.4-46.u2
changelog:
  - Type:CVE
  - CVE:CVE-2026-25679,CVE-2026-27139,CVE-2026-27142
  - DESC:Fix CVE-2026-25679,CVE-2026-27139,CVE-2026-27142


author: guowenjia <guowenjia@xfusion.com> - 1.21.4-48.u4
changelog:
  - Type:CVE
  - CVE:CVE-2026-27140,CVE-2026-27143,CVE-2026-27144,CVE-2026-32288
  - DESC:Fix CVE-2026-27140,CVE-2026-27143,CVE-2026-27144,CVE-2026-32288


author: maxin <maxin@xfusion.com> - 1.21.4-48.u5
changelog:
  - Type:CVE
  - CVE:CVE-2026-33811,CVE-2026-39817,CVE-2026-39819,CVE-2026-39823,CVE-2026-39825,CVE-2026-39826,CVE-2026-42501
  - DESC:fix cves


author: laokz <zhangkai@iscas.ac.cn> - 2.15-2
changelog:
  - riscv64: force --enable-frame-pointers due to unsupported
    -momit-leaf-frame-pointer compile option until gcc14


author: Funda Wang <fundawang@yeah.net> - 1:2.12-40
changelog:
  - requirement
  - CVE:NA
  - SUG:NA
  - DESC: Disable the .package_note awfulness
  - DESC: drop duplicate list of locale files


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-42
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:Revert 'grub-install: bailout root device probing'
         Revert 'Workaround volatile efi boot variable'
         Revert 'Unify the check to enable btrfs relative path'


author: LeoLiu-oc <leoliu-oc@zhaoxin.com> - 1:2.12-43
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:i386: Check for cpuid family when flush cache only on VIA CPUs
         i386: Reduce the time of set VESA mode by clearing FB directly for Zhaoxin/Glenfly card


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-44
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:fs/btrfs: Fix memory leaks
         fs/zfs: Fix a number of memory leaks in ZFS code
         term/ns8250-spcr: Return if redirection is disabled
         loader/i386/linux: Fix resource leak
         lib/reloacator: Fix memory leaks
         disk/ldm: Fix memory leaks
         fs/ntfs: Fix NULL pointer dereference and possible infinite loop
         net/drivers/ieee1275/ofnet: Add missing grub_malloc()
         kern/partition: Unbreak support for nested partitions
         script/execute: Don't let trailing blank lines determine the return code
         commands/file: Fix NULL dereference in the knetbsd tests
         i386/tsc: The GRUB menu gets stuck due to unserialized rdtsc
         kern/i386/tsc_pmtimer: The GRUB menu gets stuck due to failed calibration


author: yechao-w <wang.yechao255@zte.com.cn> - 1:2.12-45
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC: kern/riscv/efi/init: Use time register in grub_efi_get_time_ms()


author: zhangqiumiao <zhangqiumiao1@h-partners.com> - 1:2.12-47
changelog:
  - Type:CVE
  - CVE:CVE-2025-61661,CVE-2025-61662,CVE-2025-54771,CVE-2025-54770,CVE-2025-61663,CVE-2025-61664
  - SUG:NA
  - DESC:commands/usbtest: Ensure string length is sufficient in usb string processing
         commands/usbtest: Use correct string length field
         tests/lib/functional_test: Unregister commands on module unload
         normal/main: Unregister commands on module unload
         gettext/gettext: Unregister gettext command on module unload
         net/net: Unregister net_set_vlan command on unload
         kern/file: Call grub_dl_unref() after fs->fs_close()
         commands/test: Fix error in recursion depth calculation


author: wangsihong <wangsihong@xfusion.com> - 1.22.5-4.u1
changelog:
  - Type:bugfix
  - CVE:
  - DESC:fix GStreamer-SA-2026-0028: Use-after-free in GStreamer core buffer value deserialization


author: changhan <changhan@xfusion.com> - 1.16.2-13.u1
changelog:
  - Type:CVE
  - CVE:CVE-2025-3887,CVE-2026-3082
  - DESC:fix CVE-2025-3887,CVE-2026-3082,GStreamer-SA-2026-0012
         fix vulkan compilation error


author: Funda Wang <fundawang@yeah.net> - 1.22.5-2
changelog:
  - fix CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600,
    CVE-2024-47607, CVE-2024-47615, CVE-2024-47835


author: yaoxin <yao_xin001@hoperun.com> - 1.20.3-3
changelog:
  - Fix cves:
    CVE-2024-47606,CVE-2024-47599,CVE-2024-47613,CVE-2024-47775
    CVE-2024-47776,CVE-2024-47777,CVE-2024-47778,CVE-2024-47774
    CVE-2024-47540,CVE-2024-47602,CVE-2024-47601,CVE-2024-47603
    CVE-2024-47834,CVE-2024-47537,CVE-2024-47597,CVE-2024-47543
    CVE-2024-47596,CVE-2024-47539,CVE-2024-47546,CVE-2024-47598


author: changhan <changhan@xfusion.com> - 1.20.3-8.u1
changelog:
  - Type:CVE
  - CVE:CVE-2026-1940,CVE-2026-3083,CVE-2026-3085
  - DESC:fix CVE-2026-1940, CVE-2026-3083, CVE-2026-3085
         fix GStreamer-SA-2026-0002: Out-of-bounds read in MP4 demuxer


author: xingwei <xingwei14@h-partners.com> - 2.4.58-9
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:mod_log_config: Fix LogFormat directive merging
         Fix X509 leak and Increase MAX_CONCURRENCY hard limit
         mod_proxy_balancer: Fix the handling of the stickysession
         mod_cache_socache: Fix possible crash on error path
         mod_ssl: Check SSL_CTX_new() return value
         core: Report invalid Options argument when parsing AllowOverride directives


author: yanglu <yanglu72@h-partners.com> - 2.4.58-10
changelog:
  - Type:CVE
  - CVE:CVE-2025-49812,CVE-2025-23048,CVE-2024-47252,CVE-2024-43204,CVE-2024-42516
  - SUG:NA
  - DESC:fix CVE-2025-49812 CVE-2025-23048 CVE-2024-47252 CVE-2024-43204 CVE-2024-42516
         mod_lua: Fix memory handling in output filters.
         Fix a regression that caused stickysession keys
         avoid ap_set_content_type when processing a _Request_Header
         set_cookie_name: ensure correct format


author: tangce <tangce1@h-partners.com> - 2.4.58-11
changelog:
  - Type:CVE
  - CVE:CVE-2025-58098,CVE-2025-65082,CVE-2025-66200
  - SUG:NA
  - DESC:fix CVE-2025-58098,CVE-2025-65082,CVE-2025-66200


author: wangsihong <wangsihong@xfusion.com> - 2.4.58-11.u1
changelog:
  - Type:requirement
  - CVE:
  - DESC: replace system name to FusionOS and delete website URL in index.html


author: liaoshuai <liaoshuai@xfusion.com> - 2.4.58-14.u3
changelog:
  - Type:CVE
  - CVE:CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059
  - DESC:Fix CVE-2026-24072,CVE-2026-29168,CVE-2026-29169,CVE-2026-33006,CVE-2026-34059


author: liaoshuai <liaoshuai@xfusion.com> - 2.4.58-15.u4
changelog:
  - Type:CVE
  - CVE:CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032
  - DESC:Fix CVE-2026-33007,CVE-2026-33523,CVE-2026-33857,CVE-2026-34032


author: changhan <changhan@xfusion.com> - 2.4.58-18.u6
changelog:
  - Type:CVE
  - CVE:CVE-2026-29167,CVE-2026-42535,CVE-2026-44631,CVE-2026-48913,CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-43951
  - DESC:fix CVE-2026-29167,CVE-2026-42535,CVE-2026-44631,CVE-2026-48913,CVE-2026-44186,CVE-2026-44185,CVE-2026-44119,CVE-2026-43951


author: fandehui<fandehui@xfusion.com> - 1.1.0-u1
changelog:
  - Type:requirement
  - CVE:
  - DESC:Fix potential memory leak and improve error handling in walk_path.c


author: fandehui<fandehui@xfusion.com> - 1.1.0-u3
changelog:
  - Type:bugfix
  - CVE:
  - DESC:Improved error handling for directory operations and recursion depth checks


author: fandehui <fandehui@xfusion.com> - 1.0-u30
changelog:
  - Type:bugfix
  - CVE:
  - DESC:add /dev/lcd3 guard, cleanup on double modprobe failure, reduce retry sleep


author: fandehui <fandehui@xfusion.com> - 1.0-u30
changelog:
  - Type:bugfix
  - CVE:
  - DESC:add baseline tool with TPCM policy sync; fix SQL injection in xsec_whitelist; cleanup retry in srv script


author: fandehui <fandehui@xfusion.com> - 1.0-u17
changelog:
  - Type:requirement
  - CVE:
  - DESC:enhance file policy loading security
         rename httc_ prefix to xsectc_ and format files


author: Huang Yang <huangyang@loongson.cn> - 1.8.18-22
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:Resolve malloc aborted error raised when executing ipmitool fru.


author: xinghe <xinghe2@h-partners.com> - 1:6.6.0-4
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ss: fix expired time format of timer
         route: filter by interface on multipath routes
         lib: names: check calloc return value in db_names_alloc
         remove redundant patches


author: mufengyan <mufengyan@huawei.com> - 1:6.6.0-10
changelog:
  - Type:feature
  - ID:NA
  - SUG:NA
  - DESC:This patch adds ARPHRD_UB for iproute2 and support name
         parse for it and deletes the display of vf address
         information in the pf


author: yanglu <yanglu72@h-partners.com> - 1.8.9-3
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC:ebtables translate Print flush command after parsing is finished
         fix crash when opts isn't reallocated
         Fix handling of non-existent chains
         nft: Special casing for among match in compare_matches
         extensions: libipt_icmp: Fix confusion between 255/255 and any
         Revert libiptc: fix wrong maptype of base chain counters on restore
         extensions: Fix checking of conntrack --ctproto 0
         libxtables: xtoptions: Fix for non-CIDR-compatible hostmasks
         libxtables: xtoptions: Prevent XTOPT_PUT with XTTYPE_HOSTMASK
         libiptc: Fix for another segfault due to chain index NULL pointer


author: liweigang <liweiganga@uniontech.com> - 1.8.9-5
changelog:
  - Type: bugfix
  - ID: NA
  - SUG: NA
  - DESC: libxtables: Fix memleak of matches' udata
          xshared: Fix parsing of empty string arg in '-c' option


author: yanglu <yanglu72@h-partners.com> - 1.8.9-8
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:extensions:recent:Fix format string for unsigned values
         nft:cmd:Init struct nft_cmd::head early


author: langfei <langfei@huawei.com> - 3:1.9.2-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:restart
  - DESC: Fix socket API being blocked for 10s;
  -	Flush file brfore closing;
  -	Check fflush() return value.


author: Benshuai5D <benshuai5d@163.com> -1:1.8.0.462.b08-5
changelog:
  - add 8287432-C2-assert-tn-in-0-__null-failed-must-have-li.patch
  - add 8210389-C2-assert-n-outcnt-0-C-top-n-n-is_Proj-faile.patch


author: DXwangg <wangjiawei80@huawei.com> -1:1.8.0.472.b08-0
changelog:
  - update to 8u472
  - add 8268366-C1-Incorrect-calculation-of-has_fpu_register.patch
  - deleted 8312065-Socket.connect-does-not-timeout-when-profili.patch
  - modified fix_X509TrustManagerImpl_symantec_distrust.patch
  - modified update-cacerts-and-VerifyCACerts.java-test.patch
  - modified add-missing-test-case.patch


author: mapengyuan <mapengyuan@xfusion.com> - 1.8.0-3.u1
changelog:
  - Type:CVE
  - CVE:CVE-2026-32316,CVE-2026-33947,CVE-2026-33948,CVE-2026-39956,CVE-2026-39979,CVE-2026-40164
  - DESC:Fix CVE-2026-32316,CVE-2026-33947,CVE-2026-33948,CVE-2026-39956,CVE-2026-39979,CVE-2026-40164


author: mapengyuan <mapengyuan@xfusion.com> - 1.8.0-4.u2
changelog:
  - Type:CVE
  - CVE:CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,CVE-2026-43895,CVE-2026-43896,CVE-2026-44777
  - DESC:Fix CVE-2026-40612,CVE-2026-41256,CVE-2026-41257,CVE-2026-43894,CVE-2026-43895,CVE-2026-43896,CVE-2026-44777


author: changhan <changhan@xfusion.com> - 2.50.6-1
changelog:
  - Type:CVE
  - CVE:CVE-2026-20676,CVE-2026-20636,CVE-2026-20644,CVE-2026-20635,CVE-2026-20608,CVE-2025-43457,CVE-2025-43438,CVE-2025-43213,CVE-2025-43214,CVE-2025-43511,CVE-2026-20652,CVE-2025-31223,CVE-2025-31277,CVE-2025-43433,CVE-2023-43010
  - DESC:update to 2.50.6


author: liweigang <liweiganga@uniontech.com> - 0.17-3
changelog:
  - add backport-Handle-yet-another-out-of-memory-condition.patch
  - add backport-Issue-857-fix-a-few-places-where-json_tokener-should.patch


author: yueyuankun <yueyuankun@kylinos.cn> - 0.17-5
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Disallow control characters in strict mode
          Fix the expected output for test_parse
          Fix causing the strict-mode control characters check to incorrectly trigger


author: sunhai <sunhai10@huawei.com> - 0.17-6
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Fix the apps/json_parse "-s" (strict) option so it actually does something, and default to non-strict.


author: sunhai <sunhai10@huawei.com> - 0.17-7
changelog:
  - Type:bugfix
  - ID:NA
  - SUG:NA
  - DESC: Handle NULL gracefully in json_tokener_free
          Issue 881 don t allow json_tokener_new_ex with a dep


author: yanglu <yanglu72@h-partners.com> - 006-2
changelog:
  - Type:enhancement
  - CVE:NA
  - SUG:NA
  - DESC:Add crashkernel auto for Arm 
         enable kdump and set default reserve memory 512MB
         fix test failed due to default value change


author: mapengyuan <mapengyuan@xfusion.com> - 6.6.0-145.3.12.142.u53
changelog:
  - Type:CVE
  - CVE:CVE-2026-23268,CVE-2026-23317,CVE-2026-23319,CVE-2026-23352,CVE-2026-23388,CVE-2026-23296,CVE-2025-71239,CVE-2025-39981,CVE-2026-23100,CVE-2024-57979,CVE-2026-23208,CVE-2026-23139,CVE-2026-23230,CVE-2026-23140,CVE-2026-23209,CVE-2026-23069,CVE-2026-23212,CVE-2026-23119,CVE-2026-23111,CVE-2026-23099,CVE-2026-23105,CVE-2026-23074,CVE-2026-23101,CVE-2026-23229,CVE-2026-23173,CVE-2026-23177,CVE-2026-23204,CVE-2026-23126,CVE-2026-23133,CVE-2026-23060,CVE-2026-23125,CVE-2026-23102,CVE-2025-71225,CVE-2026-23110,CVE-2026-23163,CVE-2026-23205,CVE-2026-23112,CVE-2026-23220,CVE-2026-23193,CVE-2026-23216,CVE-2026-23179,CVE-2026-23096,CVE-2026-23084,CVE-2026-23094,CVE-2025-38449,CVE-2024-50102,CVE-2025-38062,CVE-2025-38627,CVE-2025-39948,CVE-2025-38678,CVE-2025-38491,CVE-2025-71118,CVE-2025-40300,CVE-2025-39910,CVE-2025-22090,CVE-2025-68231,CVE-2024-35808,CVE-2026-22991,CVE-2025-71141,CVE-2025-39744,CVE-2026-22984,CVE-2026-23021,CVE-2026-22990,CVE-2025-68768,CVE-2025-71083,CVE-2025-68785,CVE-2026-23038,CVE-2025-40220,CVE-2025-71147,CVE-2025-39713,CVE-2025-39721,CVE-2025-38659,CVE-2025-40277,CVE-2025-40271,CVE-2025-40237,CVE-2026-23035,CVE-2025-68176,CVE-2025-68724,CVE-2025-71131,CVE-2025-68816,CVE-2025-68172,CVE-2025-40358,CVE-2026-22980,CVE-2025-68803,CVE-2026-22998,CVE-2025-38489,CVE-2025-38480,CVE-2025-39838,CVE-2025-39942,CVE-2025-71149,CVE-2025-71150,CVE-2025-38730,CVE-2025-68814,CVE-2025-71072,CVE-2025-68794,CVE-2025-40215,CVE-2025-68780,CVE-2025-39833,CVE-2025-39743,CVE-2025-38681,CVE-2025-38699,CVE-2025-68371,CVE-2025-38650,CVE-2025-38578,CVE-2025-71108,CVE-2025-68296,CVE-2025-37800,CVE-2025-40311,CVE-2025-40328,CVE-2025-40099,CVE-2025-39798,CVE-2025-40242,CVE-2025-68304,CVE-2026-23447,CVE-2025-21696,CVE-2026-23312,CVE-2026-23448,CVE-2026-31392,CVE-2026-23473,CVE-2026-31426,CVE-2026-23455,CVE-2026-23449,CVE-2025-21696,CVE-2026-23475,CVE-2026-23398,CVE-2026-23378,CVE-2026-23407,CVE-2026-31389,CVE-2026-23452,CVE-2026-23406,CVE-2026-31415,CVE-2026-31416,CVE-2026-31427,CVE-2026-31428,CVE-2026-31528,CVE-2026-31525,CVE-2026-31473,CVE-2026-31431,CVE-2026-31436,CVE-2026-31407,CVE-2026-31424,CVE-2026-31423,CVE-2026-31420,CVE-2026-31418,CVE-2026-31516,CVE-2026-31665,CVE-2026-31590,CVE-2026-31542,CVE-2026-31532,CVE-2026-31533,CVE-2026-31429,CVE-2026-31505,CVE-2026-31595,CVE-2026-31451,CVE-2026-31450,CVE-2026-31449,CVE-2026-31447,CVE-2026-31446,CVE-2025-68345,CVE-2025-68334,CVE-2025-68340,CVE-2026-31782,CVE-2026-31540,CVE-2026-31602,CVE-2026-31512,CVE-2026-31511,CVE-2026-31510,CVE-2026-31499,CVE-2026-31498,CVE-2026-31452,CVE-2026-31673,CVE-2026-31674,CVE-2026-31680,CVE-2026-31682,CVE-2026-43048,CVE-2026-43047,CVE-2026-43020,CVE-2026-43420,CVE-2026-31486,CVE-2026-43064,CVE-2026-31527,CVE-2026-43419,CVE-2026-43273,CVE-2026-43019,CVE-2026-43018,CVE-2026-31773,CVE-2026-43017,CVE-2026-31771,CVE-2026-43313,CVE-2026-43214,CVE-2026-43265,CVE-2026-31624,CVE-2026-31625,CVE-2026-31667,CVE-2026-31575,CVE-2026-31630,CVE-2026-31441,CVE-2026-43013,CVE-2026-31699,CVE-2026-31698,CVE-2026-43262,CVE-2026-43363,CVE-2026-43429,CVE-2026-31442,CVE-2026-31781,CVE-2026-31469,CVE-2026-43407,CVE-2026-31487,CVE-2026-43284
  - DESC:!21778 urma: implement share TP for RM mode
      urma: implement share TP for RM mode
      !21768 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-146.0.0 to 6.6.0-147.0.0
      ub:hisi-ubus: Adjust the order of the message struct
      ub:ubus: Fix find error ubc_num of local ras
      ub:ubus: Fix null message workqueue issue
      mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().
      net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work
      urma: fix Clos networking and add a new interface get_path_set.
      sched/debug: Fix avg_vruntime() usage
      sched/fair: Fix zero_vruntime tracking fix
      sched/fair: Fix vruntime drift by preventing double lag scaling during reweight
      sched/eevdf: Update se->vprot in reweight_entity()
      sched/fair: Only set slice protection at pick time
      sched: Fix struct sched_entity kabi broken
      sched/fair: Fix NO_RUN_TO_PARITY case
      sched/fair: Use protect_slice() instead of direct comparison
      sched: Cancel the slice protection of the idle entity
      sched/eevdf: Fix wakeup-preempt by checking cfs_rq->nr_running
      sched/eevdf: Disable shorter slices to wakeup-preempt
      sched/eevdf: Allow shorter slices to wakeup-preempt
      sched: Unify more update_curr*()
      sched: Remove vruntime from trace_sched_stat_runtime()
      sched: fix kabi broken in struct sched_statistics
      sched: Unify runtime accounting across classes
      sched/fair: Adhere to place_entity() constraints
      sched/fair: Fix EEVDF entity placement bug causing scheduling lag
      sched/fair: Fix zero_vruntime tracking
      sched: Fix kabi breakage of struct cfs_rq for sum_w_vruntime
      sched/fair: Rename cfs_rq::avg_vruntime to ::sum_w_vruntime, and helper functions
      sched: Fix kabi breakage of struct cfs_rq for sum_weight
      sched/fair: Rename cfs_rq::avg_load to cfs_rq::sum_weight
      sched: Re-evaluate scheduling when migrating queued tasks out of throttled cgroups
      spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer
      spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
      spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one
      spi: tegra210-quad: Move curr_xfer read inside spinlock
      spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer
      tools: Fix bitfield dependency failure
      iomap: allocate s_dio_done_wq for async reads as well
      i3c: Move device name assignment after i3c_bus_init
      staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()
      drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release
      selftests: bonding: Add more missing config options
      selftests: bonding: add missing build configs
      mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
      net: stmmac: fix rx limit check in stmmac_rx_zc()
      netfilter: flowtable: check for maximum number of encapsulations in bridge vlan
      Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
      resource: introduce is_type_match() helper and use it
      resource: replace open coded resource_intersection()
      resource: Reuse for_each_resource() macro
      ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend
      ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend
      ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend
      ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend
      ASoC: Intel: catpt: Fix error path in hw_params()
      vdpa/pds: use %pe for ERR_PTR() in event handler registration
      virtio: fix virtqueue_set_affinity() docs
      virtio: fix whitespace in virtio_config_ops
      virtio: fix typo in virtio_device_ready() comment
      virtio_vdpa: fix misleading return in void function
      ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation
      ext4: remove unused return value of __mb_check_buddy
      ublk: prevent invalid access with DEBUG
      ublk: complete command synchronously on error
      ublk: make sure io cmd handled in submitter task context
      ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
      hwmon: sy7636a: Fix regulator_enable resource leak on error path
      drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1()
      ASoC: fsl_xcvr: clear the channel status control memory
      RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
      RDMA/irdma: Add support to re-register a memory region
      RDMA/irdma: Fix data race in irdma_free_pble
      RDMA/irdma: Fix data race in irdma_sc_ccq_arm
      iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal
      backlight: lp855x: Fix lp855x.h kernel-doc warnings
      backlight: led-bl: Add devlink to supplier LEDs
      wifi: ieee80211: correct FILS status codes
      iomap: always run error completions in user context
      iomap: factor out a iomap_dio_done helper
      drm/nouveau: restrict the flush page to a 32-bit address
      PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
      btrfs: fix leaf leak in an error path in btrfs_del_items()
      staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
      firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
      mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
      RDMA/bnxt_re: Fix the inline size for GenP7 devices
      RISC-V: KVM: Fix guest page fault within HLV* instructions
      crypto: ccree - Correctly handle return of sg_nents_for_len
      crypto: starfive - Correctly handle return of sg_nents_for_len
      selftests/bpf: Improve reliability of test_perf_branches_no_hw()
      selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
      usb: dwc2: fix hang during suspend if set as peripheral
      usb: dwc2: fix hang during shutdown if set as peripheral
      usb: dwc2: disable platform lowlevel hw resources during shutdown
      usb: chaoskey: fix locking for O_NONBLOCK
      cpuset: Treat cpusets in attaching as populated
      net: phy: adin1100: Fix software power-down ready condition
      mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
      mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
      wifi: mac80211: fix CMAC functions not handling errors
      wifi: mac80211: remove RX_DROP_UNUSABLE
      pwm: bcm2835: Make sure the channel is enabled after pwm_request()
      perf arm_spe: Fix memset subclass in operation
      perf arm-spe: Extend branch operations
      drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
      fs/ntfs3: Prevent memory leaks in add sub record
      fs/ntfs3: out1 also needs to put mi
      powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format
      powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit
      wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
      drm/msm/a2xx: stop over-complaining about the legacy firmware
      NFSD/blocklayout: Fix minlength check in proc_layoutget
      tracefs: fix a leak in eventfs_create_events_dir()
      watchdog: starfive: Fix resource leak in probe error path
      watchdog: wdat_wdt: Fix ACPI table leak in probe function
      selftests/bpf: Fix failure paths in send_signal test
      bpf: Handle return value of ftrace_set_filter_ip in register_fentry
      ps3disk: use memcpy_{from,to}_bvec index
      arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
      arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A
      PCI: keystone: Exit ks_pcie_probe() for invalid mode
      leds: netxbig: Fix GPIO descriptor leak in error paths
      scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
      ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint()
      ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
      lib/vsprintf: Check pointer before dereferencing in time_and_date()
      clk: renesas: r9a06g032: Fix memory leak in error path
      coresight: etm4x: Add context synchronization before enabling trace
      coresight: etm4x: Extract the trace unit controlling
      coresight: etm4x: Correct polling IDLE bit
      wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
      powerpc/32: Fix unpaired stwcx. on interrupt exit
      cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
      scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc()
      ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties
      RDMA/rtrs: server: Fix error handling in get_or_create_srv
      dt-bindings: PCI: amlogic: Fix the register name of the DBI region
      staging: most: remove broken i2c driver
      staging: most: i2c: Drop explicit initialization of struct i2c_device_id::driver_data to 0
      scsi: stex: Fix reboot_notifier leak in probe error path
      regulator: core: disable supply if enabling main regulator fails
      perf/x86/intel: Correct large PEBS flag check
      ext4: correct the checking of quota files before moving extents
      mfd: da9055: Fix missing regmap_del_irq_chip() in error path
      efi/libstub: Fix page table access in 5-level to 4-level paging transition
      x86/boot: Fix page table access in 5-level to 4-level paging transition
      ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
      ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
      ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
      spi: tegra210-quad: Fix timeout handling
      fs/9p: Don't open remote file with APPEND mode when writeback cache is used
      scsi: target: Do not write NUL characters into ASCII configfs output
      power: supply: apm_power: only unset own apm_get_power_status
      power: supply: wm831x: Check wm831x_set_bits() return value
      power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges()
      power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges()
      power: supply: cw2015: Check devm_delayed_work_autocancel() return code
      perf record: skip synthesize event when open evsel failed
      perf lock contention: Load kernel map before lookup
      perf maps: Add maps__load_first()
      interconnect: debugfs: Fix incorrect error handling for NULL path
      arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
      interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
      i3c: master: svc: Prevent incomplete IBI transaction
      i3c: fix refcount inconsistency in i3c_master_register
      i3c: master: Inherit DMA masks and parameters from parent device
      pinctrl: stm32: fix hwspinlock resource leak in probe function
      soc: qcom: smem: fix hwspinlock resource leak in probe error paths
      tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
      mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove
      mtd: nand: relax ECC parameter validation check
      Revert "mtd: rawnand: marvell: fix layouts"
      ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
      ARM: dts: renesas: gose: Remove superfluous port property
      sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
      phy: mscc: Fix PTP for VSC8574 and VSC8572
      arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
      firmware: imx: scu-irq: fix OF node leak in
      arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
      s390/ap: Don't leak debug feature files if AP instructions are not available
      s390/smp: Fix fallback CPU detection
      wifi: ath11k: fix peer HE MCS assignment
      clk: qcom: camcc-sm6350: Fix PLL config of PLL2
      clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other
      uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe
      PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
      arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
      arm64: dts: imx8mp-venice-gw702x: remove off-board uart
      arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
      arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props
      iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
      inet: Avoid ehash lookup race in inet_ehash_insert()
      rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu()
      ntfs3: fix uninit memory after failed mi_read in mi_format_new
      crypto: authenc - Correctly pass EINPROGRESS back up to the caller
      irqchip/qcom-irq-combiner: Fix section mismatch
      irqchip/imx-mu-msi: Fix section mismatch
      irqchip/irq-brcmstb-l2: Fix section mismatch
      irqchip/irq-bcm7120-l2: Fix section mismatch
      irqchip/irq-bcm7038-l1: Fix section mismatch
      objtool: Fix weak symbol detection
      objtool: Fix standalone --hacks=jump_label
      HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
      clk: renesas: cpg-mssr: Read back reset registers to assure values latched
      clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register
      clk: renesas: Use str_on_off() helper
      clk: renesas: rzg2l: Use %x format specifier to print CLK_ON_R()
      clk: renesas: rzg2l: Remove critical area
      clk: renesas: rzg2l: Simplify the logic in rzg2l_mod_clock_endisable()
      clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
      USB: Fix descriptor count when handling invalid MBIM extended descriptor
      drm/vgem-fence: Fix potential deadlock on release
      drm/panel: visionox-rm69299: Don't clear all mode flags
      gpu: host1x: Fix race in syncpt alloc/free
      smack: fix bug: unprivileged task can create labels
      staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing
      staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing
      staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser
      comedi: check device's attached status in compat ioctls
      comedi: multiq3: sanitize config options in multiq3_attach()
      comedi: c6xdigio: Fix invalid PNP driver unregistration
      wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1
      samples: work around glibc redefining some of our defines wrong
      HID: elecom: Add support for ELECOM M-XT3URBK (018F)
      platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally
      platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list
      platform/x86: huawei-wmi: add keys for HONOR models
      HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list
      platform/x86: acer-wmi: Ignore backlight event
      pinctrl: qcom: msm: Fix deadlock in pinmux configuration
      HID: hid-input: Extend Elan ignore battery quirk to USB
      bfs: Reconstruct file type when loading from disk
      ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series
      smb: fix invalid username check in smb3_fs_context_parse_param()
      Bluetooth: btrtl: Avoid loading the config file on security chips
      drm/vmwgfx: Use kref in vmw_bo_dirty
      spi: imx: keep dma request disabled before dma transfer setup
      spi: xilinx: increase number of retries before declaring stall
      ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct()
      USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC
      USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC
      serial: add support of CPCI cards
      USB: serial: ftdi_sio: match on interface number for jtag
      USB: serial: option: move Telit 0x10c7 composition in the right place
      USB: serial: option: add Telit Cinterion FE910C04 new compositions
      USB: serial: option: add Foxconn T99W760
      comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
      locking/spinlock/debug: Fix data-race in do_raw_write_lock
      ksmbd: ipc: fix use-after-free in ipc_msg_send_request
      Documentation: process: Also mention Sasha Levin as stable tree maintainer
      leds: spi-byte: Use devm_led_classdev_register_ext()
      fs: aio: set VMA_DONTCOPY_BIT in mmap to fix NULL-pointer-dereference error
      Solve kernel ABI issue introduced by x86_max_cores updates
      x86/acpi/boot: Correct acpi_is_processor_usable() check again
      x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE
      x86/topology: Handle the !APIC case gracefully
      x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI
      x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC
      x86/topology: Handle bogus ACPI tables correctly
      x86/xen/smp_pv: Register the boot CPU APIC properly
      x86/topology: Don't update cpu_possible_map in topo_set_cpuids()
      x86/topology: Don't evaluate logical IDs during early boot
      x86/topology: Ignore non-present APIC IDs in a present package
      x86/cpu/topology: Get rid of cpuinfo::x86_max_cores
      x86/cpu/topology: Provide __num_[cores|threads]_per_package
      x86/cpu/topology: Rename topology_max_die_per_package()
      x86/cpu/topology: Rename smp_num_siblings
      x86/cpu/topology: Retrieve cores per package from topology bitmaps
      x86/cpu/topology: Use topology logical mapping mechanism
      x86/cpu/topology: Provide logical pkg/die mapping
      x86/cpu/topology: Simplify cpu_mark_primary_thread()
      x86/cpu/topology: Mop up primary thread mask handling
      x86/cpu/topology: Use topology bitmaps for sizing
      x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT
      x86/xen/smp_pv: Count number of vCPUs early
      x86/cpu/topology: Assign hotpluggable CPUIDs during init
      x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug
      x86/topology: Add a mechanism to track topology via APIC IDs
      x86/cpu: Detect real BSP on crash kernels
      x86/cpu/topology: Rework possible CPU management
      x86/cpu/topology: Sanitize the APIC admission logic
      x86/smpboot: Make error message actually useful
      x86/cpu/topology: Use a data structure for topology info
      x86/cpu/topology: Simplify APIC registration
      x86/cpu/topology: Confine topology information
      x86/xen/smp_pv: Register fake APICs
      x86/acpi: Dont invoke topology_register_apic() for XEN PV
      x86/mpparse: Use new APIC registration function
      x86/of: Use new APIC registration functions
      x86/jailhouse: Use new APIC registration function
      x86/acpi: Use new APIC registration functions
      x86/cpu/topology: Provide separate APIC registration functions
      x86/cpu/topology: Move registration out of APIC code
      x86/of: Set the parse_smp_cfg for all the DeviceTree platforms by default
      x86/hyperv/vtl: Correct x86_init.mpparse.parse_smp_cfg assignment
      x86/of: Move the x86_flattree_get_config() call out of x86_dtb_init()
      x86/apic: Use a proper define for invalid ACPI CPU ID
      x86/apic: Remove yet another dubious callback
      x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid
      x86/mpparse: Remove the physid_t bitmap wrapper
      x86/mm/numa: Move early mptable evaluation into common code
      x86/mpparse: Switch to new init callbacks
      x86/hyperv/vtl: Prepare for separate mpparse callbacks
      x86/xen/smp_pv: Prepare for separate mpparse callbacks
      x86/jailhouse: Prepare for separate mpparse callbacks
      x86/platform/intel-mid: Prepare for separate mpparse callbacks
      x86/platform/ce4100: Prepare for separate mpparse callbacks
      x86/dtb: Rename x86_dtb_init()
      x86/mpparse: Prepare for callback separation
      x86/mpparse: Provide separate early/late callbacks
      x86/mpparse: Rename default_find_smp_config()
      x86/apic: Remove check_apicid_used() and ioapic_phys_id_map()
      x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck()
      x86/ioapic: Make io_apic_get_unique_id() simpler
      x86/apic: Get rid of get_physical_broadcast()
      x86/ioapic: Replace some more set bit nonsense
      x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids
      x86/xen: return a sane initial apic id when running as PV guest
      x86/cpu/topology: Make the APIC mismatch warnings complete
      Solve kernel ABI issues introduced by x86_coreid_bits updates
      x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON
      x86/apic/uv: Remove the private leaf 0xb parser
      x86/xen/smp_pv: Remove cpudata fiddling
      x86/apic: Remove unused phys_pkg_id() callback
      x86/cpu: Remove x86_coreid_bits
      x86/cpu: Remove topology.c
      x86/cpu: Make topology_amd_node_id() use the actual node info
      x86/mm/numa: Use core domain size on AMD
      x86/cpu: Use common topology code for HYGON
      x86/cpu: Use common topology code for AMD
      x86/smpboot: Teach it about topo.amd_node_id
      x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater
      x86/topology/amd: Ensure that LLC ID is initialized
      x86/cpu/amd: Move TOPOEXT enablement into the topology parser
      x86/cpu/amd: Make the NODEID_MSR union actually work
      x86/cpu/amd: Make the CPUID 0x80000008 parser correct
      x86/cpu: Provide an AMD/HYGON specific topology parser
      x86/cpu/amd: Provide a separate accessor for Node ID
      x86/topology/intel: Unlock CPUID before evaluating anything
      x86/cpu: Use common topology code for Intel
      x86/cpu: Provide a sane leaf 0xb/0x1f parser
      x86/cpu: Move __max_die_per_package to common.c
      x86/cpu: Use common topology code for Centaur and Zhaoxin
      x86/cpu: Add legacy topology parser
      x86/cpu: Provide cpu_init/parse_topology()
      x86/cpuid: Include <linux/build_bug.h> in <asm/cpuid.h>
      x86/cpu: Provide cpuid_read() et al.
      Revert "RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor"
      Solve kernel ABI issues introduced by cpuinfo_x86 updates
      x86/cpu: Provide debug interface
      x86/cpu/topology: Cure the abuse of cpuinfo for persisting logical ids
      x86/apic, x86/hyperv: Use u32 in hv_snp_boot_ap() too
      x86/apic: Use u32 for wakeup_secondary_cpu[_64]()
      x86/apic: Use u32 for [gs]et_apic_id()
      x86/apic: Use u32 for phys_pkg_id()
      x86/apic: Use u32 for cpu_present_to_apicid()
      x86/apic: Use u32 for check_apicid_used()
      x86/apic: Use u32 for APIC IDs in global data
      x86/apic: Use BAD_APICID consistently
      x86/cpu: Move cpu_l[l2]c_id into topology info
      x86/cpu: Move logical package and die IDs into topology info
      x86/cpu: Move cu_id into topology info
      x86/cpu: Move cpu_core_id into topology info
      hwmon: (fam15h_power) Use topology_core_id()
      scsi: lpfc: Use topology_core_id()
      x86/cpu: Move cpu_die_id into topology info
      x86/cpu: Move phys_proc_id into topology info
      x86/cpu: Encapsulate topology information in cpuinfo_x86
      urma: fix bonding udata exchange for imported seg/jetty objects.
      Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
      urma: fix log error in connect
      urma: fix kmod log format error
      x86/uprobes: Fix XOL allocation failure for 32-bit tasks
      pstore/ram: fix buffer overflow in persistent_ram_save_old()
      urma: fix ubcore connect error
      urma: fix error for setting conn timeout
      ub: udma: change return value format.
      drivers/ub/sentry: add some log for sent_cnt and remote_recv_cnt
      drivers/ub/sentry: Refactor the message data format sent via UVB/URMA
      net/mlx5e: Fix race condition during IPSec ESN update
      ub/ubdevshm: Fix register segment failed issue in multi-thread scenario
      nvdimm/bus: Fix potential use after free in asynchronous initialization
      urma: fix bind jetty compat error
      net/mlx5e: Prevent concurrent access to IPSec ASO context
      urma: change urma kmod errno
      urma:delete redundant sub_trans_mode_cap in urma
      RDMA/hns: Fix config the CNP DSCP
      RDMA/hns: Fix the panic caused by a large number of print
      media: dvb-net: fix OOB access in ULE extension header tables
      wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
      urma: bonding support health check
      xSched: update xSched manual for xcu cmdline enable option
      xSched: enable CONFIG_CGROUP_XCU and CONFIG_XCU_SCHED_CFS in arm64/x86 defconfig
      cgroup: sync CGROUP_SUBSYS_COUNT limit with upstream to 16
      xSched/cgroup: make xcu.stat invisible at root cgroup
      xSched/cgroup: reuse SUBSYS for xcu and freezer to preserve KABI
      apparmor: validate DFA start states are in bounds in unpack_pdb
      tcp: secure_seq: add back ports to TS offset
      Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
      Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
      ice: Fix memory leak in ice_set_ringparam()
      bpf: Fix regsafe() for pointers to packet
      drivers/ub/sentry: add lock for update global variables and change some global variables to local variables
      !21696 netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove
      !21695 urma: Create jetty with kernel thread
      netfilter: nf_tables: Fix null ptr dereference of nft_setelem_remove
      urma: Create jetty with kernel thread
      !21670 urma: change well-known jetty to UM
      !21669 urma: adjust netlink log level of ipourma
      urma: change well-known jetty to UM
      urma: adjust netlink log level of ipourma
      !21644 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-145.0.0 to 6.6.0-146.0.0
      f2fs: fix to detect potential corrupted nid in free_nid_list
      ntfs3: Fix uninit buffer allocated by __getname()
      nvme-pci: Fix race bug in nvme_poll_irqdisable()
      tls: Purge async_hold in tls_decrypt_async_wait()
      clsact: Fix use-after-free in init/destroy rollback asymmetry
      nf_tables: nft_dynset: fix possible stateful expression memleak in error path
      xdp: produce a warning when calculated tailroom is negative
      xdp: use modulo operation to calculate XDP frag tailroom
      apparmor: fix race between freeing data and fs accessing it
      Revert "riscv: stacktrace: Disable KASAN checks for non-current tasks"
      riscv: Replace function-like macro by static inline function
      sched/fair: scale wake_wide() threshold by SMT width
      sched/core: fix SCHED_FEAT overflow on 32-bit architectures
      drivers/ub/sentry: fix memory leak in match_dev_by_local_eid()
      urma: fix race condition in async event causing kfree of invalid pointer
      urma: check for null topo map in ubcore_get_topo_info_by_agg_eid
      apparmor: replace recursive profile removal with iterative approach
      apparmor: fix: limit the number of levels of policy namespaces
      nfnetlink_osf: validate individual option lengths in fingerprints
      tls: Fix race condition in tls_sw_cancel_work_tx()
      urma: Kernel-mode file for bugfix of vtpn of empty pointer
      xen/privcmd: add boot control for restricted usage in domU
      xen/privcmd: unregister xenstore notifier on module exit
      xen/privcmd: restrict usage in unprivileged domU
      af_unix: Give up GC if MSG_PEEK intervened.
      urma: Kernel-mode file for bugfix to move hashtable from alloc to active
      apparmor: fix differential encoding verification
      ub:hisi-ubus: Synchronize the missing code
      apparmor: Fix double free of ns_name in aa_replace_profiles()
      mptcp: pm: in-kernel: always mark signal+subflow endp as used
      bridge: cfm: Fix race condition in peer_mep deletion
      ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()
      apparmor: fix race on rawdata dereference
      netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
      net/sched: act_gate: snapshot parameters with RCU on replace
      bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
      netfilter: nf_tables: always walk all pending catchall elements
      netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
      net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs
      netfilter: nf_tables: unconditionally bump set->nelems before insertion
      netfilter: nf_tables: release flowtable after rcu grace period on error
      net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks
      netfilter: xt_CT: drop pending enqueued packets on template removal
      net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit
      apparmor: fix memory leak in verify_header
      wifi: libertas: fix use-after-free in lbs_free_adapter()
      can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
      urma: Kernel-mode file for bugfix deactivate to apply pid in udma
      urma: Kernel-mode file for bugfix of ubcore_get_route_list in loopback
      net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop
      net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
      can: bcm: fix locking for bcm_op runtime updates
      net: phy: register phy led_triggers during probe to avoid AB-BA deadlock
      net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
      net: prevent NULL deref in ip[6]tunnel_xmit()
      net: add xmit recursion limit to tunnel xmit functions
      net: gro: fix outer network offset
      net: annotate data-races around sk->sk_{data_ready,write_space}
      net: add proper RCU protection to /proc/net/ptype
      urma: fix potential deadlock risk in urma_ping
      Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
      sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting
      net: usb: kalmia: validate USB endpoints
      KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
      cpufreq: CPPC: Use `ktime` to replace `jiffies` to get the system time in cppc_get_perf_ctrs_pair()
      urma: use user-specified dev_name when creating agg dev
      mm: thp: deny THP for files on anonymous inodes
      mm/huge_memory: fix folio isn't locked in softleaf_to_folio()
      smb: client: Don't log plaintext credentials in cifs_set_cifscreds
      netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
      xhci: dbgtty: fix device unregister: fixup
      tty: introduce and use tty_port_tty_vhangup() helper
      net: dsa: microchip: Fix error path in PTP IRQ setup
      can: ucan: Fix infinite loop from zero-length messages
      net: dsa: microchip: Free previously initialized ports on init failures
      net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
      selftests: mptcp: join: properly kill background tasks
      staging: rtl8712: Remove driver using deprecated API wext
      net: macb: fix unregister_netdev call order in macb_remove()
      iio: adc: rtq6056: Correct the sign bit index
      nfsd: Replace clamp_t in nfsd4_get_drc_mem()
      net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
      net: dsa: microchip: common: Fix checks on irq_find_mapping()
      drm/amd/display: Check NULL before accessing
      drm: sti: fix device leaks at component probe
      USB: serial: option: add support for Rolling RW101R-GL
      USB: serial: ftdi_sio: add support for u-blox EVK-M101
      xhci: dbgtty: fix device unregister
      xhci: dbgtty: Fix data corruption when transmitting data form DbC to host
      usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths
      usb: dwc3: pci: Sort out the Intel device IDs
      usb: dwc3: pci: add support for the Intel Nova Lake -S
      usb: renesas_usbhs: Fix synchronous external abort on unbind
      usb: gadget: f_eem: Fix memory leak in eem_unwrap
      usb: cdns3: Fix double resource release in cdns3_pci_probe
      serial: amba-pl011: prefer dma_mapping_error() over explicit address checking
      mptcp: clear scheduled subflows on retransmit
      firmware: stratix10-svc: fix bug in saving controller data
      slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
      thunderbolt: Add support for Intel Wildcat Lake
      drivers/usb/dwc3: fix PCI parent check
      dm-verity: fix unreliable memory allocation
      can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
      can: sja1000: fix max irq loop handling
      atm/fore200e: Fix possible data race in fore200e_open()
      ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
      ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
      iio: adc: ad7280a: fix ad7280_store_balance_timer()
      iio: accel: fix ADXL355 startup race condition
      iio: accel: bmc150: Fix irq assumption regression
      iio:common:ssp_sensors: Fix an error handling path ssp_probe()
      iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
      Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
      spi: bcm63xx: fix premature CS deassertion on RX-only transactions
      spi: nxp-fspi: Propagate fwnode in ACPI case as well
      spi: nxp-fspi: Support per spi-mem operation frequency switches
      spi: spi-mem: Add a new controller capability
      spi: spi-mem: Extend spi-mem operations with a per-operation maximum frequency
      spi: spi-mem: Allow specifying the byte order in Octal DTR mode
      spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
      spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
      mailbox: pcc: don't zero error register
      mailbox: mailbox-test: Fix debugfs_create_dir error checking
      usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
      iio: st_lsm6dsx: Fixed calibrated timestamp calculation
      net: fec: do not register PPS event for PEROUT
      net: fec: do not allow enabling PPS and PEROUT simultaneously
      net: fec: do not update PEROUT if it is enabled
      net: fec: cancel perout_timer when PEROUT is disabled
      net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic
      net: dsa: sja1105: simplify static configuration reload
      net: sxgbe: fix potential NULL dereference in sxgbe_rx()
      net: lan966x: Fix the initialization of taprio
      net: aquantia: Add missing descriptor cache invalidation on ATL2
      platform/x86: intel: punit_ipc: fix memory corruption
      net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
      Bluetooth: SMP: Fix not generating mackey and ltk when repairing
      can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data
      can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header
      can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
      can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
      !21462 urma: Kernel-mode file for bugfix of kerf of tjetty
      urma: Kernel-mode file for bugfix of kerf of tjetty
      !21456  time/jiffies: Mark jiffies_64_to_clock_t() notrace
      !21393 Fix CVE-2026-23268
      !21446  i40e: Fix preempt count leak in napi poll tracepoint
      !21441  ext4: fix generic/363 failure in iomap buffered I/O mode
      !21200 ub/obmm: delay conti_clear_thread when conti_clear_memseg failed & minor bugfixes
      !21450 Fix CVE-2026-23317
      !21429 urma: add workqueue for well_know_jetty
      !21439 urma: userctl fuction about fix mode.
      !21458 urma: adjust log level to info for get_dev_name
      !21425 urma: fix the double free issue of import_cb
      !21408 urma: ipourma default sl configuration
      urma: usrctrl function about fix mode.
      urma: adjust log level to info for get_dev_name
      !21436  bpf: Release module BTF IDR before module unload
      !21440 v2  CVE-2026-23319
      !21438  bpf: Fix stack-out-of-bounds write in devmap
      time/jiffies: Mark jiffies_64_to_clock_t() notrace
      !21426  RDMA/umad: Reject negative data_len in ib_umad_write
      drm/vmwgfx: Return the correct value in vmw_translate_ptr functions
      !21421 v3  CVE-2026-23352
      !21380  perf: HiSilicon: Support uncore ITS PMU
      !21379  drivers/perf: hisi: Add new function for HiSilicon MN PMU driver
      !21391  quota: fix livelock between quotactl and freeze_super
      !21390  ext4: fix dirtyclusters double decrement on fs shutdown
      !21389  fat: avoid parent link count underflow in rmdir
      !21388  ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O
      !21387  ext4: fix memory leak in ext4_ext_shift_extents()
      !21386  blktrace: fix __this_cpu_read/write in preemptible context
      !21434 Fix CVE-2026-23388
      i40e: Fix preempt count leak in napi poll tracepoint
      ub/obmm: delay conti_clear_thread when conti_clear_memseg failed
      urma: add workqueue for well_know_jetty
      ext4: zero post EOF partial block before iomap appending write
      ext4: move pagecache_isize_extended() out of active handle
      ext4: remove ctime/mtime update from ext4_alloc_file_blocks()
      ext4: unify SYNC mode checks in fallocate paths
      ext4: ensure zeroed partial blocks are persisted in SYNC mode
      ext4: move zero partial block range functions out of active handle
      ext4: pass allocate range as loff_t to ext4_alloc_file_blocks()
      ext4: remove handle parameters from zero partial block functions
      ext4: move ordered data handling out of ext4_block_do_zero_range()
      ext4: rename ext4_block_zero_page_range() to ext4_block_zero_range()
      ext4: factor out journalled block zeroing range
      ext4: rename and extend ext4_block_truncate_page()
      iomap: make zero range flush conditional on unwritten mappings
      iomap: fix handling of dirty folios over unwritten extents
      ub/obmm: minor bugfixes
      bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
      bpf: export bpf_link_inc_not_zero.
      !21406 crypto: hisilicon/qm - support querying the hardware fault status through VFs
      crypto: hisilicon/qm - support querying the hardware fault status through VFs
      urma: ipourma default sl configuration
      bpf: Fix stack-out-of-bounds write in devmap
      bpf: Release module BTF IDR before module unload
      Squashfs: check metadata block offset is within range
      !21346 Revert "net: hns3: add sync command to sync io-pgtable"
      !21372  nvme: fix memory allocation in nvme_pr_read_keys()
      apparmor: fix unprivileged local user can do privileged policy management
      !21423  nvme: fix admin queue leak on controller reset
      !21422  scsi: target: Fix recursive locking in __configfs_open_file()
      RDMA/umad: Reject negative data_len in ib_umad_write
      !21402  CVE-2026-23296
      !21403  fix queue start/stop imbalance under race
      urma: fix the double free issue of bind_cb
      nvme: fix admin queue leak on controller reset
      scsi: target: Fix recursive locking in __configfs_open_file()
      x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size
      x86/efi: defer freeing of boot services memory
      !21405 Fix CVE-2025-71239
      !21398 drivers/ub/sentry: skip memory_failure if pfn is 0x0
      !21410 urma: disallow user-mode calls for some ubagg userctl ops
      !21371 urma: remote all logic device when set dev ns
      urma: disallow user-mode calls for some ubagg userctl ops
      !21109 filemap: restrict pagecache to non-cpuless NUMA nodes
      drivers/ub/sentry: skip memory_failure if pfn is 0x0
      !21314 [OLK-6.6][linux-6.6.y sync] Backport 6.6.116-6.6.117 LTS Patches
      audit: add fchmodat2() to change attributes class
      urma: remote all logic device when set dev ns
      !21348 uvb: support communication in VM
      !21378 net/ipv4:scmtcp: fix no dmi_uuid in VM
      dm: fix queue start/stop imbalance under remove/resume races
      dm: fix queue start/stop imbalance under suspend/load/resume races
      scsi: core: Fix error handling for scsi_alloc_sdev()
      scsi: core: Fix refcount leak for tagset_refcnt
      uvb: support communication in VM
      !21313  bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
      !21334  prevent SEA storms on critical RAS
      !21375 urma: Kernel-mode file for tp reuse in RC transmode
      urma: Kernel-mode file for tp reuse in RC transmode and bugfix of uburma and add tp_state
      quota: fix livelock between quotactl and freeze_super
      ext4: fix dirtyclusters double decrement on fs shutdown
      fat: avoid parent link count underflow in rmdir
      ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O
      ext4: fix memory leak in ext4_ext_shift_extents()
      blktrace: fix __this_cpu_read/write in preemptible context
      !21354  media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
      perf: HiSilicon: Support uncore ITS PMU
      drivers/perf: hisi: Add new function for HiSilicon MN PMU driver
      net/ipv4:scmtcp: fix no dmi_uuid in VM
      !21355  perf: Fix __perf_event_overflow() vs perf_remove_from_context() race
      !21249  arm64/xcall: add research papers reference in file headers
      !21322  nfs: return EISDIR on nfs3_proc_create if d_alias is a dir
      !21369 drivers/ub/sentry: add some log for event report
      mm/filemap: restrict pagecache to non-cpuless NUMA nodes
      mm/mempolicy: add mpol_update_interleave_stats() helper
      !21328 genirq: Get rid of global lock in irq_do_set_affinity()
      !21282 spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization
      nvme: fix memory allocation in nvme_pr_read_keys()
      !21339 iommu: Revert to using .domain_alloc_user without kvm parameter
      spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization
      Revert "Fixed the wrong debugfs node name in hisi_spi debugfs initialization"
      drivers/ub/sentry: add some log for event report
      perf: Fix __perf_event_overflow() vs perf_remove_from_context() race
      media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
      iommu: Revert to using .domain_alloc_user without kvm parameter
      Revert "net: hns3: add sync command to sync io-pgtable"
      regulator: fixed: Rely on the core freeing the enable GPIO
      net/mlx5e: Fix validation logic in rate limiting
      drm/amdgpu: fix cyan_skillfish2 gpu info fw handling
      ntfs3: init run lock for extend inode
      scsi: ufs: host: mediatek: Require CONFIG_PM
      wifi: rtw88: limit indirect IO under powered off for RTL8822CS
      pinctrl: keembay: fix double free in keembay_build_functions()
      block: fix comment for op_is_zone_mgmt() to include RESET_ALL
      mptcp: schedule rtx timer only after pushing data
      ACPI: HMAT: Remove register of memory node for generic target
      mm/memory-tier: fix abstract distance calculation overflow
      mm/truncate: unmap large folio on split failure
      mm: memcg: change flush_next_time to flush_last_time
      mm: memcg: add per-memcg zswap writeback stat
      scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel ADL
      scsi: ufs: core: Add a quirk to suppress link_startup_again
      scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register
      scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT
      scsi: ufs: core: Add fill_crypto_prdt variant op
      scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE
      scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller
      scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE
      f2fs: fix to avoid overflow while left shift operation
      mm, percpu: do not consider sleepable allocations atomic
      iommufd: Don't overflow during division for dirty tracking
      btrfs: ensure no dirty metadata is written back for an fs with errors
      Revert "perf dso: Add missed dso__put to dso__load_kcore"
      selftests: mptcp: connect: trunc: read all recv data
      selftests: mptcp: join: rm: set backup flag
      selftests: mptcp: connect: fix fallback note due to OoO
      pmdomain: samsung: plug potential memleak during probe
      btrfs: do not update last_log_commit when logging inode due to a new name
      btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe()
      EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
      EDAC/altera: Handle OCRAM ECC enable after warm reset
      LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY
      selftests/user_events: fix type cast for write_index packed member in perf_test
      x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
      spi: Try to get ACPI GPIO IRQ earlier
      smb: client: fix cifs_pick_channel when channel needs reconnect
      ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
      mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4
      mm/mm_init: fix hash table order logging in alloc_large_system_hash()
      wifi: mac80211: reject address change while connecting
      selftests/tracing: Run sample events to clear page cache events
      LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY
      LoongArch: Use correct accessor to read FWPC/MWPC
      dma-mapping: benchmark: Restore padding to ensure uABI remained consistent
      strparser: Fix signed/unsigned mismatch bug
      ksmbd: close accepted socket when per-IP limit rejects connection
      gcov: add support for GCC 15
      KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated
      HID: uclogic: Fix potential memory leak in error path
      ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY
      HID: hid-ntrig: Prevent memory leak in ntrig_report_version()
      ARM: dts: imx51-zii-rdu1: Fix audmux node names
      arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1
      mtd: onenand: Pass correct pointer to IRQ handler
      Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
      lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN
      irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops
      acpi/hmat: Fix lockdep warning for hmem_register_resource()
      base/node / ACPI: Enumerate node access class for 'struct access_coordinate'
      acpi: numa: Add setting of generic port system locality attributes
      acpi: Break out nesting for hmat_parse_locality()
      acpi: numa: Add genport target allocation to the HMAT parsing
      acpi: numa: Create enum for memory_target access coordinates indexing
      base/node / acpi: Change 'node_hmem_attrs' to 'access_coordinates'
      ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
      NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()
      NFS: sysfs: fix leak when nfs_client kobject add fails
      pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS
      NFS: enable nconnect for RDMA
      pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect()
      ASoC: tas2781: fix getting the wrong device number
      ASoC: codecs: va-macro: fix resource leak in probe error path
      ASoC: cs4271: Fix regulator leak on probe failure
      regulator: fixed: fix GPIO descriptor leak on register failure
      acpi,srat: Fix incorrect device handle check for Generic Initiator
      cifs: Fix uncached read into ITER_KVEC iterator
      cifs: stop writeback extension when change of size is detected
      Bluetooth: L2CAP: export l2cap_chan_hold for modules
      ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
      ACPI: CPPC: Check _CPC validity for only the online CPUs
      hsr: Fix supervision frame sending on HSRv0
      virtio-net: fix incorrect flags recording in big mode
      net_sched: limit try_bulk_dequeue_skb() batches
      net/mlx5e: Fix potentially misleading debug message
      net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
      net/mlx5e: Fix maxrate wraparound in threshold between units
      net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
      net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
      net_sched: act_connmark: use RCU in tcf_connmark_dump()
      wifi: mac80211: skip rate verification for not captured PSDUs
      net: mdio: fix resource leak in mdiobus_register_device()
      net/handshake: Fix memory leak in tls_handshake_accept()
      net/smc: fix mismatch between CLC header and proposal
      Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
      Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
      Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
      Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
      net: fec: correct rx_bytes statistic for the case SHIFT16 is set
      selftests: net: local_termination: Wait for interfaces to come up
      wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp()
      ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
      smb/server: fix possible refcount leak in smb2_sess_setup()
      smb/server: fix possible memory leak in smb2_read()
      NFS: check if suid/sgid was cleared after a write as needed
      HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
      NFS4: Fix state renewals missing after boot
      drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
      drm/amd/pm: Disable MCLK switching on SI at high pixel clocks
      riscv: acpi: avoid errors caused by probing DT devices when ACPI is used
      RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors
      compiler_types: Move unused static inline functions warning to W=2
      iommufd: Make vfio_compat's unmap succeed if the range is already empty
      smb: client: fix refcount leak in smb2_set_path_attr
      drm/i915: Fix conversion between clock ticks and nanoseconds
      drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
      selftests: netdevsim: set test timeout to 10 minutes
      riscv: stacktrace: fix backtracing through exceptions
      drm/amd/display: Fix black screen with HDMI outputs
      drm/amdgpu: Fix function header names in amdgpu_connectors.c
      extcon: adc-jack: Cleanup wakeup source only if it was enabled
      scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers
      x86/microcode/AMD: Add more known models to entry sign checking
      drm/amd/display: Enable mst when it's detected but yet to be initialized
      net: bridge: fix MST static key usage
      lan966x: Fix sleeping in atomic context
      net: dsa: microchip: Fix reserved multicast address table programming
      net/mlx5e: SHAMPO, Fix skb size check for 64K pages
      net/mlx5e: Fix return value in case of module EEPROM read error
      net/mlx5e: Use extack in get module eeprom by page callback
      wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup
      net: dsa: b53: stop reading ARL entries if search is done
      net: dsa: b53: fix enabling ip multicast
      net: dsa: b53: fix resetting speed and pause on forced link
      net: vlan: sync VLAN features with lower device
      selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh
      netdevsim: add Makefile for selftests
      selftests/net: use destination options instead of hop-by-hop
      selftests/net: fix GRO coalesce test and add ext header coalesce tests
      selftests/net: fix out-of-order delivery of FIN in gro:tcp test
      net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx
      Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2()
      riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro
      riscv: stacktrace: Disable KASAN checks for non-current tasks
      riscv: Improve exception and system call latency
      net: libwx: fix device bus LAN ID
      ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again
      ceph: refactor wake_up_bit() pattern of calling
      ceph: add checking of wait_for_completion_killable() return value
      ASoC: meson: aiu-encoder-i2s: fix bit clock polarity
      kbuild: uapi: Strip comments before size type check
      rtc: pcf2127: fix watchdog interrupt mask on pcf2131
      tools: lib: thermal: use pkg-config to locate libnl3
      tools: lib: thermal: don't preserve owner in install
      tools bitmap: Add missing asm-generic/bitsperlong.h include
      scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS
      9p: sysfs_init: don't hardcode error to ENOMEM
      cpufreq: tegra186: Initialize all cores to max frequencies
      9p: fix /sys/fs/9p/caches overwriting itself
      NTB: epf: Allow arbitrary BAR mapping
      clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled
      clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register
      clk: at91: clk-master: Add check for divide by 3
      ARM: at91: pm: save and restore ACR during PLL disable/enable
      rtc: pcf2127: clear minute/second interrupt
      clk: sunxi-ng: sun6i-rtc: Add A523 specifics
      um: Fix help message for ssl-non-raw
      fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
      btrfs: mark dirty extent range for out of bound prealloc extents
      RDMA/irdma: Set irdma_cq cq_num field during CQ create
      RDMA/irdma: Remove unused struct irdma_cq fields
      RDMA/irdma: Fix SD index calculation
      ACPICA: Update dsmethod.c to get rid of unused variable warning
      char: misc: restrict the dynamic range to exclude reserved minors
      smb: client: transport: avoid reconnects triggered by pending task work
      ksmbd: use sock_create_kern interface to create kernel socket
      orangefs: fix xattr related buffer overflow...
      page_pool: Clamp pool size to max 16K pages
      6pack: drop redundant locking and refcounting
      exfat: limit log print for IO error
      ALSA: usb-audio: add mono main switch to Presonus S1824c
      Bluetooth: SCO: Fix UAF on sco_conn_free
      Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames
      net: macb: avoid dealing with endianness in macb_set_hwaddr()
      arm64: openeuler_defconfig: enable ras critical related configs by default
      rseq: avoid memory access during rseq_get_rseq_cs if task facing critical RAS
      futex: avoid memory access during exit_robust_list if task facing critical RAS
      mm: avoid memory access during __access_remote_vm if task facing critical RAS
      coredump: skip coredump during critical error if task facing critical RAS
      exit: terminate process on critical RAS events to prevent further damage
      ACPI: APEI: Add MMF_RAS_CRITICAL to mark critical RAS scenarios in mm struct
      ACPI: APEI: Add vendor specific error info handling for ARM Processor
      mm: memory_failure: fix UAF in memory_failure_cb
      genirq: Get rid of global lock in irq_do_set_affinity()
      nfs: return EISDIR on nfs3_proc_create if d_alias is a dir
      ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007
      ASoC: stm32: sai: manage context in set_sysclk callback
      amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
      ext4: increase IO priority of fastcommit
      accel/habanalabs/gaudi2: read preboot status after recovering from dirty state
      accel/habanalabs: return ENOMEM if less than requested pages were pinned
      scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate
      accel/habanalabs/gaudi2: fix BMON disable configuration
      scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill()
      net: bridge: Install FDB for bridge MAC on VLAN 0
      NFSv4.1: fix mount hang after CREATE_SESSION failure
      NFSv4: handle ERR_GRACE on delegation recalls
      drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream
      wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256
      remoteproc: qcom: q6v5: Avoid handling handover twice
      PCI/PM: Skip resuming to D0 if device is disconnected
      vfio: return -ENOTTY for unsupported device feature
      sparc64: fix prototypes of reads[bwl]()
      sparc/module: Add R_SPARC_UA64 relocation handling
      r8169: set EEE speed down ratio to 1
      net: intel: fm10k: Fix parameter idx set but not used
      wifi: ath10k: Fix connection after GTK rekeying
      iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot()
      net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X
      net: phy: clear link parameters on admin link down
      ASoC: qcom: sc8280xp: explicitly set S16LE format in sc8280xp_be_hw_params_fixup()
      jfs: fix uninitialized waitqueue in transaction manager
      jfs: Verify inode mode when loading from disk
      ipv6: np->rxpmtu race annotation
      f2fs: fix infinite loop in __insert_extent_tree()
      usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
      usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
      allow finish_no_open(file, ERR_PTR(-E...))
      scsi: lpfc: Define size of debugfs entry for xri rebalancing
      scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup
      scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET
      scsi: ufs: core: Disable timestamp functionality if not supported
      selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency
      drm/amdgpu: reject gang submissions under SRIOV
      HID: i2c-hid: Resolve touchpad issues on Dell systems during S4
      ethernet: Extend device_get_mac_address() to use NVMEM
      drm/amd/display: Disable VRR on DCE 6
      drm/amd/display: Fix DVI-D/HDMI adapters
      drm/amd: Avoid evicting resources at S5
      drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl
      ALSA: serial-generic: remove shared static buffer
      wifi: mt76: mt7996: Temporarily disable EPCS
      wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device
      net/cls_cgroup: Fix task_get_classid() during qdisc run
      crypto: caam - double the entropy delay interval for retry
      PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify()
      crypto: sun8i-ce - remove channel timeout field
      watchdog: s3c2410_wdt: Fix max_timeout being calculated larger
      HID: asus: add Z13 folio to generic group for multitouch to work
      selftests: Replace sleep with slowwait
      eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP
      selftests: Disable dad for ipv6 in fcnal-test.sh
      x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT
      netfilter: nf_reject: don't reply to icmp error messages
      selftests: traceroute: Use require_command()
      media: redrat3: use int type to store negative error codes
      selftests: net: replace sleeps in fcnal-test with waits
      net: sh_eth: Disable WoL if system can not suspend
      phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0
      phy: renesas: r8a779f0-ether-serdes: add new step added to latest datasheet
      phy: cadence: cdns-dphy: Enable lower resolutions in dphy
      wifi: mac80211: Fix HE capabilities element check
      ntfs3: pretend $Extend records as regular files
      scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode changes
      net: phy: marvell: Fix 88e1510 downshift counter errata
      scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure
      scsi: ufs: host: mediatek: Enhance recovery on resume failure
      media: i2c: og01a1b: Specify monochrome media bus format instead of Bayer
      media: ov08x40: Fix the horizontal flip control
      char: Use list_del_init() in misc_deregister() to reinitialize list pointer
      drm/msm: make sure to not queue up recovery more than once
      usb: gadget: f_hid: Fix zero length packet transfer
      drm/amdgpu: add support for cyan skillfish gpu_info
      drm/amdgpu: don't enable SMU on cyan skillfish
      drm/amd: add more cyan skillfish PCI ids
      iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs
      iommu/amd: Skip enabling command/event buffers for kdump
      smsc911x: add second read of EEPROM mac when possible corruption seen
      net: call cond_resched() less often in __release_sock()
      ALSA: usb-audio: apply quirk for MOONDROP Quark2
      media: verisilicon: Explicitly disable selection api ioctls for decoders
      media: adv7180: Only validate format in querystd
      media: adv7180: Do not write format to device in set_fmt
      media: adv7180: Add missing lock in suspend callback
      net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
      ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled
      drm/amdgpu: Allow kfd CRIU with no buffer objects
      drm/msm/dsi/phy_7nm: Fix missing initial VCO rate
      drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL
      dmaengine: dw-edma: Set status for callback_result
      dmaengine: mv_xor: match alloc_wc and free_wc
      dmaengine: sh: setup_xref error handling
      ptp: Limit time setting of PTP clocks
      scsi: pm8001: Use int instead of u32 to store error codes
      crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof()
      mips: lantiq: danube: rename stp node on EASY50712 reference board
      mips: lantiq: xway: sysctrl: rename stp clock
      mips: lantiq: danube: add missing device_type in pci node
      mips: lantiq: danube: add model to EASY50712 dts
      mips: lantiq: danube: add missing properties to cpu node
      drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2)
      media: fix uninitialized symbol warnings
      drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
      drm/amdkfd: fix vram allocation failure for a special case
      fuse: zero initialize inode private data
      net: phy: fixed_phy: let fixed_phy_unregister free the phy_device
      remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper
      extcon: adc-jack: Fix wakeup source leaks on device unbind
      scsi: pm80xx: Fix race condition caused by static variables
      scsi: mpi3mr: Fix controller init failure on fault during queue creation
      rds: Fix endianness annotation for RDS_MPATH_HASH
      ALSA: usb-audio: Add validation of UAC2/UAC3 effect units
      PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
      net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.
      net: stmmac: Correctly handle Rx checksum offload errors
      net: When removing nexthops, don't call synchronize_net if it is not necessary
      char: misc: Does not request module for miscdevice with dynamic minor
      char: misc: Make misc_register() reentry for miscdevice who wants dynamic minor
      usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
      iio: adc: imx93_adc: load calibrated values even calibration failed
      iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register
      drm/amdkfd: Handle lack of READ permissions in SVM mapping
      drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts
      scsi: ufs: host: mediatek: Fix invalid access in vccqx handling
      scsi: ufs: host: mediatek: Change reset sequence for improved stability
      scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO mode change
      scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration
      bridge: Redirect to backup port when port is administratively down
      s390/pci: Use pci_uevent_ers() in PCI recovery
      powerpc/eeh: Use result of error_detected() in uevent
      ice: Don't use %pK through printk or tracepoints
      net: stmmac: Check stmmac_hw_setup() in stmmac_resume()
      x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
      media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for VIDEO_CAMERA_SENSOR
      drm/tidss: Set crtc modesetting parameters with adjusted mode
      drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST
      drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value
      drm/tidss: Use the crtc_* timings when programming the HW
      media: amphion: Delete v4l2_fh synchronously in .release()
      media: pci: ivtv: Don't create fake v4l2_fh
      drm/amdkfd: return -ENOTTY for unsupported IOCTLs
      wifi: rtw88: sdio: use indirect IO for device registers before power-on
      selftests/net: Ensure assert() triggers in psock_tpacket.c
      selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
      PCI: Disable MSI on RDC PCI to PCIe bridges
      drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
      drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff
      drm/amd/pm: Use cached metrics data on arcturus
      drm/amd/pm: Use cached metrics data on aldebaran
      drm/amd/display: update dpp/disp clock from smu clock table
      drm/amd/display: add more cyan skillfish devices
      drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration
      drm/amd/display: ensure committing streams is seamless
      mfd: da9063: Split chip variant reading in two bus transactions
      mfd: madera: Work around false-positive -Wininitialized warning
      mfd: stmpe-i2c: Add missing MODULE_LICENSE
      mfd: stmpe: Remove IRQ domain upon removal
      tools/power x86_energy_perf_policy: Prefer driver HWP limits
      tools/power x86_energy_perf_policy: Enhance HWP enable
      tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage
      tools/cpupower: Fix incorrect size in cpuidle_state_disable()
      hwmon: (dell-smm) Add support for Dell OptiPlex 7040
      hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex
      uprobe: Do not emulate/sstep original instruction when ip is changed
      nvme: Use non zero KATO for persistent discovery connections
      bpf: Clear pfmemalloc flag when freeing all fragments
      riscv: bpf: Fix uninitialized symbol 'retval_off'
      clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
      spi: rpc-if: Add resume support for RZ/G3E
      cpuidle: Fail cpuidle device registration if there is one already
      bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21
      power: supply: qcom_battmgr: handle charging state change notifications
      pmdomain: apple: Add "apple,t8103-pmgr-pwrstate"
      tools/cpupower: fix error return value in cpupower_write_sysfs()
      video: backlight: lp855x_bl: Set correct EPROM start for LP8556
      tee: allow a driver to allocate a tee_device without a pool
      ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method()
      mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
      ARM: tegra: transformer-20: fix audio-codec interrupt
      ARM: tegra: transformer-20: add missing magnetometer interrupt
      soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups
      arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106
      irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller
      hwmon: sy7636a: add alias
      power: supply: sbs-charger: Support multiple devices
      pinctrl: keembay: release allocated memory in detach path
      hwmon: (sbtsi_temp) AMD CPU extended temperature range support
      power: supply: qcom_battmgr: add OOI chemistry
      ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[]
      ACPI: PRM: Skip handlers with NULL handler_address or NULL VA
      irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
      selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh
      arc: Fix __fls() const-foldability via __builtin_clzl()
      cpufreq/longhaul: handle NULL policy in longhaul_exit
      selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
      irqchip/sifive-plic: Respect mask state when setting affinity
      memstick: Add timeout to prevent indefinite waiting
      mmc: host: renesas_sdhi: Fix the actual clock
      pinctrl: single: fix bias pull up/down handling in pin_config_set
      bpf: Don't use %pK through printk
      spi: loopback-test: Don't use %pK through printk
      soc: qcom: smem: Fix endian-unaware access of num_entries
      soc: aspeed: socinfo: Add AST27xx silicon IDs
      usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
      drm/sched: Fix race in drm_sched_entity_select_rq()
      s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP
      sched/fair: Use all little CPUs for CPU-bound workloads
      sched/pelt: Avoid underestimation of task utilization
      net: phy: dp83867: Disable EEE support as not implemented
      s390/pci: Restore IRQ unconditionally for the zPCI device
      regmap: slimbus: fix bus_context pointer in regmap init calls
      block: make REQ_OP_ZONE_OPEN a write operation
      block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL
      drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland
      drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
      drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table()
      sfc: fix potential memory leak in efx_mae_process_mport()
      drm/etnaviv: fix flush sequence logic
      Bluetooth: hci_core: Fix tracking of periodic advertisement
      Bluetooth: ISO: Fix another instance of dst_type handling
      Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset
      libbpf: Fix powerpc's stack register definition in bpf_tracing.h
      ASoC: fsl_sai: fix bit order for DSD format
      ASoC: Intel: avs: Unprepare a stream when XRUN occurs
      scsi: ufs: core: Initialize value of an attribute returned by uic cmd
      ALSA: usb-audio: fix control pipe direction
      drm/msm/a6xx: Fix GMU firmware parser
      wifi: ath12k: free skb during idr cleanup callback
      wifi: ath10k: Fix memory leak on unsupported WMI command
      ASoC: qdsp6: q6asm: do not sleep while atomic
      mptcp: restore window probe
      mptcp: drop bogus optimization in __mptcp_check_push()
      fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
      fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
      Bluetooth: rfcomm: fix modem control handling
      ACPI: button: Call input_free_device() on failing input device registration
      fbdev: atyfb: Check if pll_ops->init_pll failed
      net: usb: asix_devices: Check return value of usbnet_get_endpoints
      bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing
      arm64/xcall: add research papers reference in file headers
      !21367 ub: udma: bugfix related to jfr id.
      !21356 ub: ubase: Improving the reliability of CtrlQ and fasten reboot
      !21357 urma: fix add obj type compile error
      ub: udma: bugfix related to jfr id.
      urma: fix add obj type compile error
      ub: ubase: optimized reboot time required
      !21350 urma: add obj type in ubcore delete uobj error
      !21343 urma: support ubp methods
      !21351  arm64: fix compile error if CONFIG_ARCH_HAS_COPY_MC not enabled
      urma: support ubp methods;
      !21320 urma: decrease session creation max timeout
      !21323 urma: tp reuse in RC transmode
      !21319 urma: remove legacy bonding dev create/delete
      !21342 iommu/ummu: Optimize resource management and eliminate redundant interfaces
      ub: ubase: Improving the reliability of CtrlQ.
      arm64: fix compile error if CONFIG_ARCH_HAS_COPY_MC not enabled
      urma: add obj type in ubcore delete uobj error
      urma: Kernel-mode file for tp reuse in RC transmode
      iommu/ummu-core: Delete the redundant fields of struct ummu_mpam.
      ub:ubfi: Delete device load debug logs
      iommu/ummu-core: Fix kref imbalance in VMA split scenario
      iommu/ummu-core: Prevent FREE_TID while mmap is active
      iommu/ummu: Add deprecation markers for ummu SVA APIs
      !21324 mfs: fix mfsd_prefetch.cpp compile error
      !21303 net/ipv4:scmtcp: fix scmtcp_sk_recvmsg() return incorrect fds due to RLIMIT_NOFILE
      !20936 gmem: fix several issues
      !21267 drivers/ub/sentry: set the priority to prevent machine being hung up when the load is heavy
      !21333 v4  hugetlb: drain pcp for movable zone before alloc
      drivers/ub/sentry: set the priority
      hugetlb: drain pcp for movable zone before alloc
      !21325  mm/hugetlb: fix memory offline failure due to hwpoisoned file hugetlb
      gmem: only create vma->vm_obj when peer_va_alloc_fixed return true
      gmem: check vma->vm_obj in vm_object_split to avoid NULL ptr deference
      gmem: hold mmap_read lock while executing gmem_unmap_region
      gmem: Fix a potential double free in exit_mm() by reordering the intialization of mm->gm_as in dup_mm()
      gmem: fix hmemcpy src/dest conflict deadlock under concurrency
      gmem: fix NULL ptr deference in vm_object_merge
      mm/hugetlb: fix memory offline failure due to hwpoisoned file hugetlb
      mfs: fix mfsd_prefetch.cpp compile error
      !21310 CCA: Add the RSI interface for obtaining the device certificate.
      urma: remove legacy bonding dev create/delete
      urma: Decrease session creation max timeout
      !21316 ub: udma: Move the request for RC context from UDMA to UBASE
      net/ipv4:scmtcp: fix scmtcp_sk_recvmsg() return incorrect fds due to RLIMIT_NOFILE
      ub: ubase: Move the request for RC context from UDMA to UBASE
      !19936 [Intel-SIG]: sched/topology: Fix sched domain build error for GNR, CWF in SNC-3 mode
      !21302 [OLK-6.6]:update patches for sw64 architecture
      ub: udma: bugfix related to deactivate tp.
      ub: udma: bugfix related to jetty group.
      !21311  mm/shrinker: Implementation of register_shrinker() and unregister_shrinker()
      !21312 urma: support remove ubagg & uburma ko
      !21223 kvm: add skip vmovp feature support
      CCA: Add the RSI interface for obtaining the device certificate.
      urma: support remove ubagg & uburma ko
      KVM: arm64: vgic-v4: Elide VMOVP on vCPU scheduling within same affinity group
      !21276 ub/ubdevshm: Fix some issues
      !21292 [OLK-6.6][linux-6.6.y sync] Backport 6.6.115-6.6.116 LTS Patches
      !21309 ub:ub_fwctl:Modify the query to address issues that do not meet expectations
      ub/ubmem-mmu: Fix some issues
      ub/ubmempfd: Add module author
      ub/ubdevshm: Fix some issues
      mm/shrinker: Implementation of register_shrinker() and unregister_shrinker()
      gpio: regmap: Fix memleak in error path in gpio_regmap_register()
      perf: sched: Fix perf crash with new is_user_task() helper
      ub:ub_fwctl:Modify the statistical port link up/down to only count 10 times
      ub:ub_fwctl:When modifying the link information of a query port, verify non-existent ports
      !21307 ub: ubase&unic: Stability and Functionality Fixes Collection
      net: unic: correct DMA direction for TX path
      net: unic: Fix the bug that could cause nconsistent resource state or double-free
      net: unic: optimize MAC address deletion to avoid sleeping in spinlock
      ub: ubase: Resolve integer wraparound
      ub: ubase: Resolve cache coherence and set smp_rmb
      ub: ubase&unic: adjust the encoding format of the ubase&unic driver.
      ub: ubase: Support udma get ue msg info.
      net: unic: The FPGA and EVB compilation macros are deleted from the unic driver.
      ub: ubase: The debugfs function supports querying the Ethernet port rate.
      sw64: adapt arch_tlbbatch_add_pending according to upstream
      sw64: fix the compilation error when CONFIG_DEBUG_VIRTUAL is enabled
      sw64: add support for batched TLB flushing during unmap
      sw64: fix the parameter passing logic of memblock_mark_nomap
      sw64: add HUGE_VMAP support for c4
      sw64: define get_cycles macro
      sw64: cpuidle: refine C6 state stability
      sw64: add barriers and tlb flush for set_atc
      sw64: adapt kernel page table for kdump
      sw64: adapt kernel page table for memory hotplug
      sw64: set PTBR_SYS before accessing vmalloc area
      sw64: set execute permission for virtual machine's hmcode text section
      sw64: adjust the marking and definitions of some kernel mapping functions
      sw64: adapt kernel page table for S4
      sw64: fix an inappropriate lock in __set_memory
      sw64: enable kernel page table
      sw64: use ioremap to map IO address in functions like __get_cpu_nums()
      sw64: move non-boot core's kernel page table enabling logic to hmcode
      sw64: use ioremap to map IO address
      sw64: map legacy I/O to K segment
      sw64: setup early_ioremap
      sw64: reset ATC for kvm
      sw64: setup mapping for efi_mm
      sw64: set protection for kernel page table
      sw64: modify codes with fixmap
      sw64: map the early and the final page table
      sw64: add fixmap support
      sw64: fix mmap_base exceeding Java assertion address
      sw64: add memb before/after atomic
      sw64: add EDAC support with dynamic node and MC detection
      sw64: fix: getcpu passed a null pointer error
      sw64: iommu: refactor iommu v2 initialization
      sw64: cache: fix shared_cpu_map when PPTT is invalid
      sw64: add alternative runtime patching
      sw64: pci: fix IO_BASE if numa_off
      sw64: use ioremap to map spaces for cpufreq and S3
      sw64: pci: add sunway pci controller for Command Completed errata
      sw64: add definitions for kernel-required CPU capabilities
      sw64: kvm: add qemu-gdb watchpoint support
      sw64: kvm: fix srcu lock leak in pv steal time
      gpio: idio-16: Define fixed direction of the GPIO lines
      gpio: regmap: add the .fixed_direction_output configuration parameter
      gpio: regmap: Allow to allocate regmap-irq device
      bits: introduce fixed-type GENMASK_U*()
      bits: add comments and newlines to #if, #else and #endif directives
      xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event
      xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive.
      xhci: dbc: Improve performance by removing delay in transfer event polling.
      xhci: dbc: Allow users to modify DbC poll interval via sysfs
      xhci: dbc: poll at different rate depending on data transfer activity
      serial: sc16is7xx: reorder code to remove prototype declarations
      serial: sc16is7xx: remove unused to_sc16is7xx_port macro
      selftests: mptcp: join: mark 'delete re-add signal' as skipped if not supported
      selftests: mptcp: disable add_addr retrans in endpoint_tests
      arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c
      btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot()
      btrfs: use level argument in log tree walk callback replay_one_buffer()
      btrfs: always drop log root tree reference in btrfs_replay_log()
      btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io()
      btrfs: zoned: refine extent allocator hint selection
      btrfs: zoned: return error from btrfs_zone_finish_endio()
      EDAC/mc_sysfs: Increase legacy channel support to 16
      x86/bugs: Fix reporting of LFENCE retpoline
      x86/bugs: Report correct retbleed mitigation status
      perf: Skip user unwind if the task is a kernel thread
      perf: Have get_perf_callchain() return NULL if crosstask and user are set
      perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of current->mm == NULL
      audit: record fanotify event regardless of presence of rules
      sched/topology,x86: Fix build warning
      sched/topology: Fix sched domain build error for GNR, CWF in SNC-3 mode
      sched: Create architecture specific sched domain distances
      fix build failure with 64K page
      !21258 ub:hisi-ubus: Review of Readability Modifications
      !21293 urma: update urma_admin agg expose flag
      urma: update urma_admin agg expose
      !21227 [OLK-6.6][linux-6.6.y sync] Backport 6.6.114-6.6.115 LTS Patches
      !21270  l2tp: fix double dst_release() on sk_dst_cache race
      !21272  mptcp: fix soft lockup in mptcp_recvmsg()
      !20994 urma: support comm endpoint
      !21245 urma: support non-root execute 'urma_ping' and 'urma_admin show topo'
      !21271 urma: fix useless copy_logic_device and use expose instead.
      urma: support non-root execute in containers
      urma: fix useless copy_logic_device and use expose instead.
      ub:hisi-ubus: Review of Readability Modifications
      mptcp: fix soft lockup in mptcp_recvmsg()
      mptcp: fix MSG_PEEK stream corruption
      l2tp: fix double dst_release() on sk_dst_cache race
      urma: update urma_admin agg expose
      !21252  arm64: Set __nocfi on swsusp_arch_resume()
      !21226 hisi-cca-da: Fix potential data overflow.
      !19706 [OLK-6.6]:update patches for sw64 architecture
      !21253  xattr: switch to CLASS(fd)
      !21255 ub: cdma: cdma bug fix
      !21241 net/ipv4:scmtcp: fix soft lockup caused by spin_lock in soft irq
      ub: cdma: cdma bug fix
      xattr: switch to CLASS(fd)
      arm64: Set __nocfi on swsusp_arch_resume()
      hisi-cca-da: Fix error where multiple devices share the same SMMU domain.
      net/ipv4:scmtcp: fix soft lockup caused by spin_lock in soft irq
      net/ipv4:scmtcp: fix panic caused by file_htable_del_flist
      !21237 urma: change warn log into info for topo query
      hisi-cca-da: Fix potential data overflow.
      !21210 urma: fix tjetty tp type in ping server
      !21224  arm64/mpam: Fix warning of schedule state in resctrl_arch_mon_ctx_alloc()
      !21240 urma: update urma_admin agg expose
      !21042 net/ipv4: introduce IPPROTO_SCMTCP for SCM_RIGHTS
      urma: update urma_admin agg expose
      net/ipv4: introduce IPPROTO_SCMTCP for SCM_RIGHTS
      !21238 urma: delete ubcm_genl implementation
      urma: delete ubcm_genl implementation
      urma: change warn log into info for topo query
      tcpm: allow looking for role_sw device in the main node
      usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
      most: usb: fix double free on late probe failure
      arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation
      net: enetc: fix build warning when PAGE_SIZE is greater than 128K
      gpio: ljca: Initialize num before accessing item in ljca_gpio_config
      s390/cio: Update purge function to unregister the unused subchannels
      x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
      xfs: always warn about deprecated mount options
      devcoredump: Fix circular locking dependency with devcd->mutex.
      serial: 8250_mtk: Enable baud clock and manage in runtime PM
      serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018
      serial: 8250_dw: handle reset control deassert error
      dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp
      tcpm: switch check for role_sw device with fw_node
      most: usb: hdm_probe: Fix calling put_device() before device initialization
      most: usb: Fix use-after-free in hdm_disconnect
      mei: me: add wildcat lake P DID
      comedi: fix divide-by-zero in comedi_buf_munge()
      binder: remove "invalid inc weak" check
      x86/microcode: Fix Entrysign revision check for Zen1/Naples
      xhci: dbc: enable back DbC in resume if it was enabled before suspend
      usb: raw-gadget: do not limit transfer length
      usb/core/quirks: Add Huawei ME906S to wakeup quirk
      USB: serial: option: add Telit FN920C04 ECM compositions
      USB: serial: option: add Quectel RG255C
      USB: serial: option: add UNISOC UIS7720
      sched: Remove never used code in mm_cid_get()
      io_uring: correct __must_hold annotation in io_install_fixed_file
      gpio: ljca: Fix duplicated IRQ mapping
      gpio: update Intel LJCA USB GPIO driver
      hwmon: (sht3x) Fix error handling
      RISC-V: Don't print details of CPUs disabled in DT
      RISC-V: Define pgprot_dmacoherent() for non-coherent devices
      firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode
      spi: spi-nxp-fspi: add extra delay after dll locked
      selftests: mptcp: join: mark implicit tests as skipped if not supported
      selftests: mptcp: join: mark 'flush re-add' as skipped if not supported
      net: ravb: Ensure memory write completes before ringing TX doorbell
      net: ravb: Enforce descriptor type ordering
      net: usb: rtl8150: Fix frame padding
      net: stmmac: dwmac-rk: Fix disabling set_clock_selection
      ocfs2: clear extent cache after moving/defragmenting extents
      MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering
      cifs: Fix TCP_Server_Info::credits to be signed
      gpio: 104-idio-16: Define maximum valid register address offset
      gpio: pci-idio-16: Define maximum valid register address offset
      dma-debug: don't report false positives with DMA_BOUNCE_UNALIGNED_KMALLOC
      net: bonding: fix possible peer notify event loss or dup issue
      arm64, mm: avoid always making PTE dirty in pte_mkwrite()
      !21236  Fix TLBI broadcast optimization loss and incorrect dvmbm handling
      KVM: arm64: Fix CCA guest panic when dvmbm is enabled
      !21228 ub:ubus: add reset function
      !21220  selftests/bpf: Add cross-build support for urandom_read et al
      !21214  optimize lightweight load balancing
      ub:ubus: add reset function
      !21218 ub_fwctl modifies the interception and concurrency verification of commands in different scenarios
      !21221 iommu/ummu: Modify the ummu/tid permission
      selftests: net: fix server bind failure in sctp_vrf.sh
      selftests/net: convert sctp_vrf.sh to run it in unique namespace
      can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of can_dropped_invalid_skb()
      dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path
      net: enetc: correct the value of ENETC_RXB_TRUESIZE
      net: enetc: fix the deadlock of enetc_mdio_lock
      net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush().
      rtnetlink: Allow deleting FDB entries in user namespace
      net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size()
      Unbreak 'make tools/*' for user-space targets
      smb: server: let smb_direct_flush_send_list() invalidate a remote key first
      powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure
      m68k: bitops: Fix find_*_bit() signatures
      lkdtm: fortify: Fix potential NULL dereference on kmalloc failure
      hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super()
      hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
      dlm: check for defined force value in dlm_lockspace_release
      hfs: validate record offset in hfsplus_bmap_alloc
      hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
      hfs: make proper initalization of struct hfs_find_data
      hfs: clear offset and space out of valid records in b-tree node
      nios2: ensure that memblock.current_limit is set when setting pfn limits
      exec: Fix incorrect type for ret
      !21222 ub: ubase: Added the interface for obtaining hardware version information
      !21175 iommu/ummu: Optimize ummu register compatibility ubmem processing
      !21216  Fix RT priority Setting
      arm64/mpam: Fix warning of schedule state in resctrl_arch_mon_ctx_alloc()
      iommu/ummu: Modify the ummu/tid permission
      ub: ubase&unic: Optimize the code for log information
      ub: ubase: Solve The out-of-bounds problem of accessing a variable of the u16 type through unsigned long
      ub: ubase: Fix the issue where the himac reset cannot be triggered during an elr reset
      ub:ub_fwctl:Add a mutex lock
      ub:ub_fwctl:Add interception and validation for unsupported environment commands
      ub: ubase: Added the interface for obtaining hardware version information.
      selftests/bpf: Add cross-build support for urandom_read et al
      !21217  Revert "drivers: core: synchronize really_probe() and dev_uevent()"
      !21205  arm64/mpam: Fix wrong closid config access when CDP is enabled
      !21169 [OLK-6.6][linux-6.6.y sync] Backport 6.6.113-6.6.114 LTS Patches
      Revert "drivers: core: synchronize really_probe() and dev_uevent()"
      !21213 ub:ubus: alter nl ssu credit ras recover
      iommu/ummu: Optimize the duplicate code
      xsched: initialize tgid before configuring RT priority
      xsched: fix typo in xcu cgroup subsys released callback name
      xsched: refactor xse_this_grp_xcu to xse_this_cfs_rq for clarity and correctness
      sched: expand sysctl_sched_features to unsigned long
      sched: Fix kabi breakage of struct sched_domain for newidle_stats
      sched/fair: Proportional newidle balance
      ub:ubus: alter nl ssu credit ras recover
      ub:ubus add some missing code to openeuler
      change bus instance create EID_BYPASS
      urma: fix tjetty tp type in ping server
      iommu/ummu: Optimize the definition of 'hisi_ummu_tdev_info'
      iommu/ummu: Delete the unused interface of the UMMU
      arm64/mpam: Fix wrong closid config access when CDP is enabled
      Revert "fs/resctrl: Fix configuration to wrong control group when CDP is enabled"
      iommu/ummu: Remove the constraint that l_tid must be valid
      iommu/ummu: Remove redundant read register operations
      iommu/ummu: Optimize the UMMU instance matching logic
      iommu/ummu: Improve the reliability of ummu initialization
      iommu/ummu: Modify parameter for separated page table
      drm/amd: Fix suspend failure with secure display TA
      PCI: tegra194: Reset BARs when running in PCIe endpoint mode
      PCI: j721e: Fix programming sequence of "strap" settings
      PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists
      ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
      PCI/sysfs: Ensure devices are powered for config reads (part 2)
      nfsd: decouple the xprtsec policy check from check_nfsd_access()
      phy: cadence: cdns-dphy: Update calibration wait time for startup state machine
      xfs: use deferred intent items for reaping crosslinked blocks
      iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended
      iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure
      phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling
      phy: cdns-dphy: Store hs_clk_rate and return it
      iio: imu: inv_icm42600: Simplify pm_runtime setup
      PM: runtime: Add new devm functions
      xfs: fix log CRC mismatches between i386 and other architectures
      xfs: rename the old_crc variable in xlog_recover_process
      NFSD: Fix last write offset handling in layoutcommit
      NFSD: Minor cleanup in layoutcommit processing
      NFSD: Rework encoding and decoding of nfsd4_deviceid
      nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
      block: fix race between set_blocksize and read paths
      arm64: errata: Apply workarounds for Neoverse-V3AE
      arm64: cputype: Add Neoverse-V3AE definitions
      selftests: arg_parsing: Ensure data is flushed to disk before reading.
      HID: multitouch: fix name of Stylus input devices
      HID: hid-input: only ignore 0 battery events for digitizers
      ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
      selftests/bpf: make arg_parsing.c more robust to crashes
      ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
      drm/rockchip: vop2: use correct destination rectangle height check
      drm/amd/powerplay: Fix CIK shutdown temperature
      drm/i915/guc: Skip communication warning on reset in progress
      ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit
      ASoC: nau8821: Generalize helper to clear IRQ status
      ASoC: nau8821: Cancel jdet_work before handling jack ejection
      ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec
      drm/bridge: lt9211: Drop check for last nibble of version register
      riscv: kprobes: Fix probe address validation
      nvme-multipath: Skip nr_active increments in RETRY disposition
      net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset
      net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
      tls: don't rely on tx_work during send()
      tls: always set record_type in tls_process_cmsg
      tls: wait for async encrypt in case of error during latter iterations of sendmsg
      net: tls: wait for async completion on last message
      tls: trim encrypted message to match the plaintext on short splice
      tg3: prevent use of uninitialized remote_adv and local_adv variables
      tcp: fix tcp_tso_should_defer() vs large RTT
      amd-xgbe: Avoid spurious link down messages during interface toggle
      r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
      doc: fix seg6_flowlabel path
      net: dlink: handle dma_map_single() failure properly
      can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
      dax: skip read lock assertion for read-only filesystems
      HID: multitouch: fix sticky fingers
      usb: gadget: f_rndis: Refactor bind path to use __free()
      usb: gadget: f_ncm: Refactor bind path to use __free()
      usb: gadget: f_acm: Refactor bind path to use __free()
      usb: gadget: f_ecm: Refactor bind path to use __free()
      usb: gadget: Introduce free_usb_request helper
      usb: gadget: Store endpoint pointer in usb_request
      media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
      media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain()
      drm/exynos: exynos7_drm_decon: remove ctx->suspended
      drm/exynos: exynos7_drm_decon: properly clear channels during bind
      drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions
      drm/msm/a6xx: Fix PDC sleep sequence
      drm/msm/adreno: De-spaghettify the use of memory barriers
      eventpoll: Replace rwlock with spinlock
      epoll: Remove ep_scan_ready_list() in comments
      Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1
      cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
      drm/amd: Check whether secure display TA loaded successfully
      drm/amdgpu: use atomic functions with memory barriers for vm fault info
      cifs: parse_dfs_referrals: prevent oob on malformed input
      can: gs_usb: increase max interface to U8_MAX
      can: gs_usb: gs_make_candev(): populate net_device->dev_port
      btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running
      ext4: wait for ongoing I/O to complete before freeing blocks
      jbd2: ensure that all ongoing I/O complete before freeing blocks
      f2fs: fix wrong block mapping for multi-devices
      r8152: add error handling in rtl8152_driver_init
      sw64: ebpf: port arch_prepare_bpf_trampoline()
      sw64: fix random mmap base range
      sw64: paravirt: add pv steal_time support in guest side
      sw64: kvm: add pv steal time support
      sw64: pci: remove redundant debug control
      !21194 hisi-cca-da: Revert smmu realm enabled condition for arm_smmu_domain_finalise.
      !21192 urma: bugfix of ubagg&ubcore&uburma
      !21183  platform/x86: classmate-laptop: Add missing NULL pointer checks
      urma: bugfix of ubagg&ubcore&uburma
      hisi-cca-da: Revert smmu realm enabled condition for arm_smmu_domain_finalise.
      platform/x86: classmate-laptop: Add missing NULL pointer checks
      !21167 urma: fix kernel codecheck issues.
      !21174 urma: change return value for provider err
      !21127 urma: copy linked ports when importing bond jetty/seg
      !20247 ubcore: query primary eid in ipourma loopback mode.
      !21077 Fix hisi cca bugs
      ubcore: route query refine and ipo loopback adapt.
      hisi-cca-da: Transfer PCIe ECAM access requests to RMM for realm device.
      hisi-cca-da: Write NS STE for PF drivers.
      hisi-cca-da: Provide IO interfaces
      hisi-cca-da: Destroy mmu stage2 pagetable after closing vfio devices
      !21045  scsi: hisi_sas: Fix NULL pointer exception when do user_scan()
      hisi-cca-da: Automatically unbind PF/VF drivers and prevent probe.
      !21165  tools/interference: add ifstool utility for kernel interference statistics
      !21166 urma: fix jfce uaf in batch cleanup
      !21043 urma: fix tjetty ref in ping server
      urma: change return value for provider err
      !21128  sched/rt: Skip currently executing CPU in rto_next_cpu()
      !21129  procfs: fix missing RCU protection when reading real_parent in do_task_stat()
      urma: fix jfce uaf in batch cleanup
      !21074 ipmi: Add HiSilicon IPMI Page Soft Offline driver
      !21076 [OLK-6.6][linux-6.6.y sync] Backport 6.6.112-6.6.113 LTS Patches
      urma: fix kernel codecheck issues.
      tools/interference: add ifstool utility for kernel interference statistics
      !20291 [Hygon][6.6][Bugfix] Bug fix for EDAC decode address fail issue on Hygon Dhyana processor
      !21092  kexec: derive purgatory entry from symbol
      !21154  sched: Add SOFT_DOMAIN feature interface for cgroup2
      !21153  fix CVE-2025-39981
      Revert "hisi-cca-da: Delay realm memory release to kvm_destroy_realm"
      urma: fix tjetty ref in ping server
      rme: Enforce isolation to solve compile error without config CONFIG_HISI_CCA
      hisi-cca-da: Improve hisi cca dev validate and delegate
      hisi-cca-da: Fix smmu enable rme problem
      hisi-cca-da: Fix msi region shared problem
      sched: Add SOFT_DOMAIN feature interface for cgroup2
      Bluetooth: MGMT: Fix memory leak in set_ssp_complete
      Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
      overflow: Introduce __DEFINE_FLEX for having no initializer
      overflow: Fix direct struct member initialization in _DEFINE_FLEX()
      overflow: Change DEFINE_FLEX to take __counted_by member
      overflow: add DEFINE_FLEX() for on-stack allocs
      Bluetooth: MGMT: Fix possible UAFs
      Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete()
      !21103  Revert "mm: Move vm_cache_limit_mbytes check to page_cache_over_limit()"
      !21104 v2  vsock/virtio: cap TX credit to local buffer size
      !21070  Fixes CVE-2026-23100
      !21135 RDMA/hns: Support configure and query the CNP DSCP through sysfs
      !21088  ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
      RDMA/hns: Support configure and query the CNP DSCP through sysfs
      RDMA/hns: Support query FW cap bit
      RDMA/hns: Support query HW ID.
      !20934  smb/server: fix refcount leak in parse_durable_handle_context()
      !21004  regmap: Fix race condition in hwspinlock irqsave routine
      !19568 [OLK-6.6]fix txgbe clang compile warning
      urma: copy linked ports when importing bond jetty/seg
      procfs: fix missing RCU protection when reading real_parent in do_task_stat()
      sched/rt: Skip currently executing CPU in rto_next_cpu()
      !21073  scsi: qla2xxx: Fix bsg_done() causing double free
      !21114  CVE-2024-57979
      !21113  iommu: disable SVA when CONFIG_X86 is set
      !20957  dmaengine: xilinx: xdma: Fix regmap max_register
      !21087 net: unic: Multiple stability fixes for tx timeout, DFX capability and concurrent activation/reset
      pps: Fix a use-after-free - fix kabi
      pps: Fix a use-after-free
      !21078  of: unittest: Fix memory leak in unittest_data_add()
      !21079  *** fix CVE-2026-23208 ***
      !21082  ALSA: aloop: Fix racy access at PCM trigger
      !21083  bus: fsl-mc: fix use-after-free in driver_override_show()
      iommu: disable SVA when CONFIG_X86 is set
      vsock/virtio: cap TX credit to local buffer size
      Revert "mm: Move vm_cache_limit_mbytes check to page_cache_over_limit()"
      !20983 Fix CVE-2026-23139
      !20878 Fix CVE-2026-23230
      kexec: derive purgatory entry from symbol
      lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC
      PCI/IOV: Fix race between SR-IOV enable/disable and hotplug
      Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV"
      rtc: interface: Alarm race handling should not discard preceding error
      perf test stat tests: Fix for virtualized machines
      perf test stat: Update test expectations and events
      perf test stat: Avoid hybrid assumption when virtualized
      writeback: Avoid excessively long inode switching times
      writeback: Avoid softlockup when switching many inodes
      cramfs: Verify inode mode when loading from disk
      fs: Add 'initramfs_options' to set initramfs mount options
      minixfs: Verify inode mode when loading from disk
      irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume
      irqchip/sifive-plic: Make use of __assign_bit()
      selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled
      s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG
      s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL
      s390/bpf: Describe the frame using a struct instead of constants
      s390/bpf: Centralize frame offset calculations
      s390/bpf: Change seen_reg to a mask
      ACPI: property: Do not pass NULL handles to acpi_attach_data()
      ACPI: property: Add code comments explaining what is going on
      ACPI: property: Disregard references in data-only subnode lists
      ACPI: battery: Add synchronization between interface updates
      ACPI: battery: Check for error code from devm_mutex_init() call
      ACPI: battery: initialize mutexes through devm_ APIs
      ACPI: battery: allocate driver data through devm_ APIs
      arm64: mte: Do not flag the zero page as PG_mte_tagged
      ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
      !20790  dm: use bio_clone_blkg_association
      ipmi: Add HiSilicon IPMI Page Soft Offline driver
      net: unic: Resolve network unavailability caused by concurrent activation and reset
      net: unic: Provide the DFX capability for querying MNG table
      net: unic: Delete the elr reset process after the tx timeout
      bus: fsl-mc: fix use-after-free in driver_override_show()
      ALSA: aloop: Fix racy access at PCM trigger
      ALSA: usb-audio: Use the right limit for PCM OOB check
      ALSA: usb-audio: Prevent excessive number of frames
      of: unittest: Fix memory leak in unittest_data_add()
      !21034  CVE-2026-23140
      !21016  net: fix segmentation of forwarding fraglist GRO
      !21017  mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
      !21018  CVE-2026-23209
      !21019  ipv6: annotate data-race in ndisc_router_discovery()
      !20881  ipvlan: Make the addrs_lock be per port
      rme: Imporve range delegate
      btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range()
      PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release
      PCI: endpoint: Remove surplus return statement from pci_epf_test_clean_dma_chan()
      misc: fastrpc: Save actual DMA size in fastrpc_map structure
      misc: fastrpc: Add missing dev_err newlines
      mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag
      mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
      mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value
      media: mc: Clear minor number before put device
      lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older
      ACPICA: Allow to skip Global Lock initialization
      ext4: validate ea_ino and size in check_xattrs
      ext4: correctly handle queries for metadata mappings
      ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch()
      nfsd: nfserr_jukebox in nlm_fopen should lead to a retry
      NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()
      mm/damon/vaddr: do not repeat pte_offset_map_lock() until success
      mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when max_huge_pages=0
      mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations
      wifi: mt76: mt7921u: Add VID/PID for Netgear A7500
      wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
      selftests: mptcp: join: validate C-flag + def limit
      spi: cadence-quadspi: Flush posted register writes before DAC access
      spi: cadence-quadspi: Flush posted register writes before INDAC access
      PCI: tegra194: Handle errors in BPMP response
      PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()
      PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock
      PCI: rcar-host: Drop PMSR spinlock
      PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit
      PCI/AER: Support errors introduced by PCIe r6.0
      PCI/AER: Fix missing uevent on recovery when a reset is requested
      PCI/ERR: Fix uevent on failure to recover
      PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
      PCI/sysfs: Ensure devices are powered for config reads
      PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock
      rseq/selftests: Use weak symbol reference, not definition, to link with glibc
      rtc: interface: Fix long-standing race when setting alarm
      rtc: interface: Ensure alarm irq is enabled when UIE is enabled
      memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
      mmc: core: SPI mode remove cmd7
      mtd: rawnand: fsmc: Default to autodetect buswidth
      xtensa: simdisk: add input size check in proc_write_simdisk
      sparc: fix error handling in scan_one_device()
      sparc64: fix hugetlb for sun4u
      scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
      sched/deadline: Fix race in push_dl_task()
      pwm: berlin: Fix wrong register in suspend/resume
      powerpc/pseries/msi: Fix potential underflow and leak issue
      powerpc/powernv/pci: Fix underflow and leak issue
      power: supply: max77976_charger: fix constant current reporting
      pinctrl: samsung: Drop unused S3C24xx driver data
      nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk
      parisc: don't reference obsolete termio struct for TC* constants
      openat2: don't trigger automounts with RESOLVE_NO_XDEV
      of: unittest: Fix device reference count leak in of_unittest_pci_node_verify
      lib/genalloc: fix device leak in of_gen_pool_get()
      KEYS: trusted_tpm1: Compare HMAC values in constant time
      iommu/vt-d: PRS isn't usable if PDS isn't supported
      iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume
      init: handle bootloader identifier in kernel parameters
      iio: xilinx-ams: Unmask interrupts after updating alarms
      iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK
      iio: frequency: adf4350: Fix prescaler usage.
      iio: dac: ad5421: use int type to store negative error codes
      iio: dac: ad5360: use int type to store negative error codes
      fs/ntfs3: Fix a resource leak bug in wnd_extend()
      fbdev: Fix logic error in "offb" name match
      crypto: rockchip - Fix dma_unmap_sg() nents value
      crypto: atmel - Fix dma_unmap_sg() direction
      crypto: aspeed - Fix dma_unmap_sg() direction
      copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64)
      bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup()
      bus: mhi: ep: Fix chained transfer handling in read path
      btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
      blk-crypto: fix missing blktrace bio split events
      drm/nouveau: fix bad ret code in nouveau_bo_move_prep
      drm/rcar-du: dsi: Fix 1/2/3 lane support
      media: lirc: Fix error handling in lirc_register()
      media: venus: firmware: Use correct reset sequence for IRIS2
      media: pci: ivtv: Add missing check after DMA map
      media: mc: Fix MUST_CONNECT handling for pads with no links
      media: i2c: mt9v111: fix incorrect type for ret
      media: cx18: Add missing check after DMA map
      firmware: meson_sm: fix device leak at probe
      xen/events: Update virq_to_irq on migration
      xen/events: Return -EEXIST for bound VIRQs
      xen/manage: Fix suspend error path
      xen/events: Cleanup find_virq() return codes
      dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-required
      ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init
      arm64: dts: ti: k3-am62a-main: Fix main padcfg length
      arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees
      arm64: dts: qcom: msm8939: Add missing MDSS reset
      arm64: dts: qcom: msm8916: Add missing MDSS reset
      ACPI: debug: fix signedness issues in read/write helpers
      ACPI: property: Fix buffer properties extraction for subnodes
      gpio: wcd934x: mark the GPIO controller as sleeping
      tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single
      smb: client: fix missing timestamp updates after utime(2)
      bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()
      drm/amd/display: Properly disable scaling on DCE6
      drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6
      drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs
      drm/amdgpu: Add additional DCE6 SCL registers
      mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
      mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
      tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat()
      perf python: split Clang options when invoking Popen
      tools build: Align warning options with perf
      net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe
      drm/vmwgfx: Fix copy-paste typo in validation
      net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
      LoongArch: Init acpi_gbl_use_global_lock to false
      LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init()
      ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size
      scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
      clk: tegra: do not overallocate memory for bpmp clocks
      clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
      clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()
      clk: mediatek: clk-mux: Do not pass flags to clk_mux_determine_rate_flags()
      clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m
      perf evsel: Ensure the fallback message is always written to
      perf tools: Add fallback for exclude_guest
      perf test: Add a test for default perf stat command
      perf test: Don't leak workload gopipe in PERF_RECORD_*
      perf session: Fix handling when buffer exceeds 2 GiB
      perf arm_spe: Correct memory level for remote access
      perf arm_spe: Correct setting remote access
      rtc: optee: fix memory leak on driver removal
      rtc: x1205: Fix Xicor X1205 vendor prefix
      perf util: Fix compression checks returning -1 as bool
      clk: at91: peripheral: fix return value
      libperf event: Ensure tracing data is multiple of 8 sized
      perf evsel: Avoid container_of on a NULL leader
      asm-generic/io.h: Skip trace helpers if rwmmio events are disabled
      iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
      clocksource/drivers/clps711x: Fix resource leaks in error paths
      fscontext: do not consume log entries when returning -EMSGSIZE
      fs: always return zero on success from replace_fd()
      !21067 [OLK-6.6][linux-6.6.y sync] Backport 6.6.111-6.6.112 LTS Patches
      scsi: qla2xxx: Fix bsg_done() causing double free
      !21065 Fix CVE-2026-23069
      !21062 v4  Support multi-level cgroup
      !20987 Fix CVE-2026-23212
      !20982 Fix CVE-2026-23119
      !20979 Fix CVE-2026-23111
      !20974 Fix CVE-2026-23099
      !20973 Fix CVE-2026-23105
      !20972 Fix CVE-2026-23074
      !20884  ksmbd: add chann_lock to protect ksmbd_chann_list xarray
      !20947 Fix CVE-2026-23101
      ext4: clear i_state_flags when alloc inode
      misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup
      Revert "wifi: ath10k: avoid unnecessary wait for service ready message"
      fs/ntfs3: fix mount failure for sparse runs in run_unpack()
      !20825  efivarfs: fix error propagation in efivar_entry_get()
      !20824  io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
      !20950 ub:ubus: protect iterator ue_list and mue_list with ub_bus_sem
      mm/rmap: fix two comments related to huge_pmd_unshare()
      mm/hugetlb: fix two comments related to huge_pmd_unshare()
      mm/hugetlb: fix hugetlb_pmd_shared()
      mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count
      !20728 drivers: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
      vsock/virtio: fix potential underflow in virtio_transport_get_credit()
      !21001 Fix CVE-2026-23229
      usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call
      arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode
      !20999 Fix CVE-2026-23173
      usb: typec: tipd: Clear interrupts first
      bus: fsl-mc: Check return value of platform_get_resource()
      remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()
      Input: atmel_mxt_ts - allow reset GPIO to sleep
      misc: fastrpc: Skip reference for DMA handles
      misc: fastrpc: fix possible map leak in fastrpc_put_args
      misc: fastrpc: Fix fastrpc_map_lookup operation
      nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe()
      ext4: fix checks for orphan inodes
      ksmbd: fix error code overwriting in smb2_get_info_filesystem()
      LoongArch: Automatically disable kaslr if boot from kexec_file
      mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data()
      mfd: rz-mtu3: Fix MTU5 NFCR register offset
      ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down
      ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
      vhost: vringh: Modify the return value check
      net/mlx5: fw reset, add reset timeout work
      net/mlx5: pagealloc: Fix reclaim race during command interface teardown
      net/mlx5: Stop polling for command response if interface goes down
      net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable
      nfp: fix RSS hash key size when RSS is not supported
      mtd: rawnand: atmel: Fix error handling path in atmel_nand_controller_add_nands
      drivers/base/node: fix double free in register_one_node()
      hwrng: ks-sa - fix division by zero in ks_sa_rng_init
      KEYS: X.509: Fix Basic Constraints CA flag parsing
      Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements
      Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO
      vhost: vringh: Fix copy_to_iter return value check
      RDMA/siw: Always report immediate post SQ errors
      usb: vhci-hcd: Prevent suspending virtually attached devices
      NFSv4.1: fix backchannel max_resp_sz verification check
      coresight: trbe: Return NULL pointer for allocation failures
      coresight: etm4x: Support atclk
      coresight-etm4x: Conditionally access register TRCEXTINSELR
      remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
      PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert()
      vfio/pds: replace bitmap_free with vfree
      sparc: fix accurate exception reporting in copy_{from,to}_user for M7
      sparc: fix accurate exception reporting in copy_to_user for Niagara 4
      sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara
      sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III
      wifi: mac80211: fix Rx packet handling when pubsta information is not available
      wifi: ath10k: avoid unnecessary wait for service ready message
      Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram
      IB/sa: Fix sa_local_svc_timeout_ms read race
      RDMA/core: Resolve MAC of next-hop device without ARP support
      f2fs: fix zero-sized extent for precache extents
      scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp()
      scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES()
      scsi: qla2xxx: edif: Fix incorrect sign of error code
      ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message
      f2fs: fix to truncate first page in error path of f2fs_truncate()
      f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks()
      wifi: mt76: fix potential memory leak in mt76_wmac_probe()
      RDMA/cm: Rate limit destroy CM ID timeout error message
      drivers/base/node: handle error properly in register_one_node()
      watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog
      ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable
      iio: consumers: Fix offset handling in iio_convert_raw_to_processed()
      iio: consumers: Fix handling of negative channel scale in iio_convert_raw_to_processed()
      fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
      fs: ntfs3: Fix integer overflow in run_unpack()
      drm/msm/dpu: fix incorrect type for ret
      ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
      ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
      misc: genwqe: Fix incorrect cmd field being reported in error
      usb: gadget: configfs: Correctly set use_os_string at bind
      usb: phy: twl6030: Fix incorrect type for ret
      drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
      tcp: fix __tcp_close() to only send RST when required
      PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation
      wifi: mwifiex: send world regulatory domain to driver
      drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3)
      drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
      drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
      drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
      drm/amd/pm: Fix si_upload_smc_data (v3)
      drm/amd/pm: Disable ULV even if unsupported (v3)
      drm/amdgpu: Power up UVD 3 for FW validation (v2)
      coresight: Only register perf symlink for sinks with alloc_buffer
      inet: ping: check sock_net() in ping_get_port() and ping_lookup()
      media: st-delta: avoid excessive stack usage
      ALSA: lx_core: use int type to store negative error codes
      media: rj54n1cb0c: Fix memleak in rj54n1_probe()
      scsi: myrs: Fix dma_alloc_coherent() error check
      hwrng: nomadik - add ARM_AMBA dependency
      crypto: keembay - Add missing check after sg_nents_for_len()
      drm/amd/display: Remove redundant semicolons
      serial: max310x: Add error checking in probe()
      usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls
      usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
      phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568
      media: zoran: Remove zoran_fh structure
      drm/bridge: it6505: select REGMAP_I2C
      f2fs: fix condition in __allow_reserved_blocks()
      drm/radeon/r600_cs: clean up of dead code in r600_cs
      drm/panel: novatek-nt35560: Fix invalid return value
      bpf: Enforce expected_attach_type for tailcall compatibility
      i2c: designware: Add disabling clocks when probe fails
      i2c: designware: Fix clock issue when PM is disabled
      i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD
      thermal/drivers/qcom/lmh: Add missing IRQ includes
      thermal/drivers/qcom: Make LMH select QCOM_SCM
      hwmon: (mlxreg-fan) Separate methods of fan setting coming from different subsystems
      once: fix race by moving DO_ONCE to separate section
      smp: Fix up and expand the smp_call_function_many() kerneldoc
      selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported
      i3c: master: svc: Recycle unused IBI slot
      i3c: master: svc: Use manual response for IBI events
      ACPICA: Fix largest possible resource descriptor index
      pwm: tiehrpwm: Fix corner case in clock divisor calculation
      arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible
      arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value
      arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names
      cpuidle: qcom-spm: fix device and OF node leaks at probe
      firmware: firmware: meson-sm: fix compile-test default
      arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0
      null_blk: Fix the description of the cache_size module argument
      pinctrl: renesas: Use int type to store negative error codes
      power: supply: cw2015: Fix a alignment coding style issue
      PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()
      ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer property
      ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property to use correct boolean syntax in DTS
      ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS to use correct boolean syntax
      block: use int to store blk_stack_limits() return value
      selftests/nolibc: fix EXPECT_NZ macro
      regulator: scmi: Use int type to store negative error codes
      arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map
      ARM: at91: pm: fix MCKx restore routine
      pinctrl: meson-gxl: add missing i2c_d pinmux
      soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS
      leds: flash: leds-qcom-flash: Update torch current clamp setting
      ARM: dts: renesas: porter: Fix CAN pin group
      libbpf: Fix reuse of DEVMAP
      bpf: Remove migrate_disable in kprobe_multi_link_prog_run
      bpf/selftests: Fix test_tcpnotify_user
      regmap: Remove superfluous check for !config in __regmap_init()
      arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0
      x86/vdso: Fix output operand size of RDPID
      smb: server: fix IRD/ORD negotiation with the client
      coresight: trbe: Prevent overflow in PERF_IDX2OFF()
      gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote
      selftests: arm64: Check fread return value in exec_target
      seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast
      init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD
      filelock: add FL_RECLAIM to show_fl_flags() macro
      !21022  KVM: Don't clobber irqfd routing type when deassigning irqfd
      !20998  ceph: fix oops due to invalid pointer for kfree() in parse_longname()
      !21023  l2tp: avoid one data-race in l2tp_tunnel_del_work()
      xsched: fix potential NULL dereference in xsched_quota_timeout_update
      xsched: remove the standalone xcu_cfs_cg_deinit() helper
      xsched: restructure xcu_cgrp_subsys teardown to align with cpu_cgrp_subsys lifecycle
      xsched: simplify root group check by direct comparison with root_xcg
      xsched: replace magic number with SCHED_CLASS_MAX_LENGTH for scheduler class string length
      xsched/core: immediate cleanup of remaining operators on task exit
      xsched: add init_fair_xsched_group() for XCU-specific fair group initialization
      xsched: modify xcu_cg_initialize_components helper
      xsched: refactor xsched_entity initialization
      xsched: change rq_init() parameter from struct xsched_cu to struct xsched_rq
      xsched: harden and clarify xcu_move_task() logic
      xsched: move throttling-related fields from xsched_group_xcu_priv to xsched_rq_cfs
      xsched/quota: add throttled flag to cfs_rq for robust hierarchical enqueue under throttling
      xsched/quota: support multi-level cgroup
      xsched: remove redundant xcu parameter from dequeue_ctx
      xsched: update group shares using xcu_grp_shares_add/sub helpers
      xsched: delete unused code
      xsched/cfs: propagate group activation/deactivation up the hierarchy
      xsched/cfs: move xruntime updates to pick/put paths
      xsched: add has_running hook to xsched classes for wake-up eligibility check
      !21012 [OLK-6.6][linux-6.6.y sync] Backport 6.6.110-6.6.111 LTS Patches
      scsi: hisi_sas: Fix NULL pointer exception when do user_scan()
      !21013  CVE-2026-23177
      !21007  bonding: fix use-after-free due to enslave fail after slave array update
      !21006  net: Fix CVE-2026-23204
      bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path
      bpf, test_run: Subtract size of xdp_frame from allowed metadata size
      bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN
      bpf: Make variables in bpf_prog_test_run_xdp less confusing
      bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K
      !21015  libceph: reset sparse-read state in osd_fault()
      !21024 ub: udma: bugfix related to print messages.
      !20980 Fix CVE-2026-23126
      !20922 Fix CVE-2026-23133
      ub: udma: bugfix related to print messages.
      l2tp: avoid one data-race in l2tp_tunnel_del_work()
      KVM: Don't clobber irqfd routing type when deassigning irqfd
      ipv6: annotate data-race in ndisc_router_discovery()
      macvlan: observe an RCU grace period in macvlan_common_newlink() error path
      macvlan: fix error recovery in macvlan_common_newlink()
      mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
      net: fix segmentation of forwarding fraglist GRO
      can: rcar_canfd: Fix CAN-FD mode as default
      libceph: reset sparse-read state in osd_fault()
      !21008 uvb: fix cis call return value and obtain
      mm, shmem: prevent infinite loop on truncate race
      mm/shmem, swap: fix race of truncate and swap entry split
      net/9p: fix double req put in p9_fd_cancelled
      riscv: mm: Do not restrict mmap address based on hint
      riscv: mm: Use hint address in mmap if available
      driver core/PM: Set power.no_callbacks along with power.no_pm
      serial: stm32: allow selecting console when the driver is module
      hid: fix I2C read buffer overflow in raw_event() for mcp2221
      ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
      ALSA: usb-audio: Kill timer properly at removal
      platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list
      can: rcar_canfd: Fix controller mode setting
      can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
      btrfs: ref-verify: handle damaged extent root tree
      ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue
      perf subcmd: avoid crash in exclude_cmds when excludes is empty
      platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list
      dm-integrity: limit MAX_TAG_SIZE to 255
      ASoC: amd: acp: Adjust pdm gain value
      wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188
      USB: serial: option: add SIMCom 8230C compositions
      media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
      !20931 Fix CVE-2026-23060
      uvb: fix cis call return value and obtain
      bonding: fix use-after-free due to enslave fail after slave array update
      net/sched: cls_u32: use skb_header_pointer_careful()
      net: add skb_header_pointer_careful() helper
      regmap: Fix race condition in hwspinlock irqsave routine
      crypto: virtio - Add spinlock protection with virtqueue notification
      net/mlx5e: TC, delete flows only for existing peers
      !20967 net: hns3: modify code of judging if SMMU DMA is enabled
      ceph: fix oops due to invalid pointer for kfree() in parse_longname()
      !20969 Fix CVE-2026-23125
      !20948 v4  arm64: Add memory poison recovery support for various paths
      !20975  CVE-2026-23102
      !20977 v4  support apei_page_offline_policy
      bonding: annotate data-races around slave->last_rx
      netfilter: nf_conncount: update last_gc only when GC has been performed
      bonding: provide a net pointer to __skb_flow_dissect()
      netdevsim: fix a race issue related to the operation on bpf_bound_progs list
      netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
      apei/ghes: Add sysctl interface to control soft-offline page isolation
      Revert "mm/memory-failure: support disabling soft offline for HugeTLB pages"
      crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
      arm64/fpsimd: signal: Fix restoration of SVE context
      arm64/fpsimd: signal: Consistently read FPSIMD context
      arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state
      bonding: limit BOND_MODE_8023AD to Ethernet devices
      net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag
      net/sched: Enforce that teql can only be used as root qdisc
      sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
      drivers/net: Update vendor name of Chengdu NorthLink Technology N5/N6 Series Network Card Drivers
      net: hns3: modify code of judging if SMMU DMA is enabled
      dmaengine: xilinx: xdma: Fix regmap max_register
      ub:ubus: protect iterator ue_list and mue_list with ub_bus_sem
      ub:ubus: Avoid getting empty uent from ubc
      ub:hisi-ubus: Use GFP_ATOMIC when alloc memory
      arm64: send sig fault for user task when apei_claim_sea fails
      arm64: add ras log during do_sea
      arm64: move getting valid siaddr to the top of do_sea
      arm64: mm: shmem: support poison recovery from shmem_file_read_iter()
      arm64: fs: support poison recovery from __kernel_read()
      iov_iter: add mc support for copy_page_to_iter
      arm64: mm: support recovery from copy_{from/to}_user_page()
      iov_iter: get rid of 'copy_mc' flag
      leds: led-class: Only Add LED to leds_list when it is fully ready
      wifi: ath10k: fix dma_free_coherent() pointer
      smb/server: fix refcount leak in parse_durable_handle_context()
      ksmbd: add chann_lock to protect ksmbd_chann_list xarray
      ipvlan: Make the addrs_lock be per port
      smb: client: split cached_fid bitfields to avoid shared-byte RMW races
      efivarfs: fix error propagation in efivar_entry_get()
      io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
      dm: use bio_clone_blkg_association
      RAS/AMD/ATL: fix error nodes per socket on for Hygon Dhyana processor
      net: txgbe: fix clang compile warning
      Add sw64 support in kernel.spec
      !20704 kernel support hisi-cca-da
      !20180 [virtCCA Live Migration 2]virtcca secure cvm supports live migration
      !20905 v2  KVM: arm64: Fix softirq masking in FPSIMD register saving sequence
      !20965 iommu/ummu: Optimized TID invalidation and tdev initialization
      !20964 iommu/ummu: Support TID and EID Granularity for MPAM
      !20970 ub: ubase&unic: Supporting the black box capability of the ubase&unic driver
      hisi-cca-da: Start dev by rsi call
      hisi-cca-da: Set ripas of the bar region as RIPAS_DEV
      hisi-cca-da: Support swiotlb and realm memory use
      hisi-cca-da: Add smmu info when dev attach
      hisi-cca-da: Transfer realm msix access to rmm
      hisi-cca-da: Support pcipc sriov capability
      hisi-cca-da: Delay realm memory release to kvm_destroy_realm
      hisi-cca-da: Create realm s2 host pgtable and map msi mmio to rmm
      hisi-cca-da: Add cca realm s2 pgtable framework
      hisi-cca-da: Use bitmap to determine whether the command can be forwarded
      hisi-cca-da: Restrict Realm SMMU to stage-2 domain only
      hisi-cca-da: Add cmd forward mechanism in realm smmu
      hisi-cca-da: Add realm smmu event and gerror irq initialization
      hisi-cca-da: Add realm smmu stream table initialization
      hisi-cca-da: Add realm smmu cmdq and evtq initialization
      hisi-cca-da: Add realm smmu initialization
      hisi-cca-da: Add relam iommu support to iommufd
      hisi-cca-da: Add realm iommu support for vfio-iommu-type1
      hisi-cca-da: Support dev map and unmap
      hisi-cca-da: Support dev validate and dev start
      hisi-cca-da: VFIO support ccada
      hisi-cca-da: Support dev delegate and dev attach
      hisi-cca-da: Support root dev delegate and dev init
      hisi-cca-da: Add hisilicon extension smc and ccada cmd
      hisi-cca-da: Add hisi ccada feature config
      !20751 ARM CCA supports hugepage
      !20944 ub: ubmempfd: supports for D2H mapping and demapping
      !20888  HiSock Enhancement
      ub: ubase&unic: Supporting the black box capability of the ubase&unic driver.
      net: unic: Resolve the residual MAC address problem
      net: unic: Optimized the code for the cmd structure and FEC function.
      ub: ubase: add log for post mailbox timeout
      ub: ubus: Remove black box header file to include dir
      rme: Remove the secret bit of the vring desc addr
      rme: improve hisi-cca data mmap and destroy method
      !20943 uvb: fix wd_obtain logic err
      !20942 urma: fix bond device id not release
      !20892  dcache: Limit the minimal number of bucket to two
      rme: isolate page when do delegation to avoid migration
      rme: hisi-cca supports different levels for mapping ram
      rme: rename ccal to hisi-cca
      rme: support set ripas for ccal realm vm
      rme: support destroy ram data for ccal realm vm
      rme: support populate region for ccal realm vm
      rme: support map ram for ccal realm vm
      rme: support config ccal realm vm
      rme: support ccal RMI calls
      rme: realm vm supports wfx handler
      !20952 urma: introduce ipourma module
      iommu/ummu-core: Simplifies tdev initialization resources
      iommu/ummu: Optimized log printing
      iommu/ummu: Use passed gfp_mask in map_pages callback
      uvb: fix wd_obtain logic err
      !20949 ub: udma: support user ctl function.
      urma: fix bond device id not release
      !20901 drivers/ub/sentry: some bugfix
      ub: ubmempfd: supports for D2H mapping and demapping
      ub: ubmempfd: supports providing services to the QEMU process through file nodes
      [virtCCA Live Migration 2]virtcca secure cvm supports live migration
      urma: query priority and enable bit, support ring size configuration
      urma: implement debugfs, improve boundary checks and error handling logic
      urma: implement data plane interaction and statistics
      urma: implement ipourma network device operations
      urma: ipourma resource management
      urma: ipourma resource management and err code
      urma: introduce ipourma main module
      iommu/ummu: Optimized the TID invalidation configuration
      iommu/ummu: Optimized SVA permission table memory allocation approach
      iommu/ummu: Adapt UMMU SVA interface adjustment
      iommu/ummu: Support TID and EID Granularity for MPAM
      !20848 [OLK-6.6] backport important bugfix for nvme driver from upstream linux-6.6.y
      !20847 urma: sl resource query error
      !20908 [OLK-6.6][linux-6.6.y sync] Backport 6.6.108-6.6.110 LTS Patches
      !20084 Loongarch: Enable CONFIG_CRYPTO_XTS for disk encryption
      !20929  PCI: Fix NVMe link speed downgrade to 2.5GT/s during hotplug
      drivers/ub/sentry: fix check input parameters
      ub: udma: support user ctl function.
      ub: udma: support uboe function.
      ub: udma: bugfix related to query aux info.
      !20935 ub: ubmem_vmmu: supports IOMMU driver for the UB memory MMU in VMs
      drivers/ub/sentry: do not use magic numbers
      !20876 urma: Kernel-mode specific implementations file for Jetty extension interface
      urma: sl resource query error
      !20873 sunrpc: fix NULL pointer dereference in rpcb_register_inet6 and rpcb_register_inet4
      !20875 sunrpc: fix race in cache cleanup causing stale nextcheck time
      ub: ubmem_vmmu: supports IOMMU driver for the UB memory MMU in VMs
      ub: ubmem_vmmu: supports parsing and configuring the hardware node information
      ub: ubmem_vmmu: HiSilicon ubmem_vmmu Architecture Implementation
      !20806 Fix CVE-2025-71225
      !20896  scsi: qla2xxx: Free sp in error path to fix system crash
      !20894  scsi: qla2xxx: Delay module unload while fabric scan in progress
      !20893  scsi: qla2xxx: Validate sp before freeing associated memory
      !20802 Fix CVE-2026-23110
      urma: Kernel-mode specific implementations file for Jetty extension interface
      drivers/ub/sentry: fix memory leak in process_urma_data()
      drivers/ub/sentry: initialize some variables
      PCI: Fix NVMe link speed downgrade to 2.5GT/s during hotplug
      !20770 ub: ubdevshm: supports the memory user to obtain and release shared memory
      Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00
      mm: consider non-anon swap cache folios in folio_expected_ref_count()
      mm: simplify folio_expected_ref_count()
      ASoC: qcom: audioreach: fix potential null pointer dereference
      gcc-plugins: Remove TODO_verify_il for GCC >= 16
      crypto: sha256 - fix crash at kexec
      drm/i915/backlight: Return immediately when scale() finds invalid parameters
      minmax.h: remove some #defines that are only expanded once
      minmax.h: simplify the variants of clamp()
      minmax.h: move all the clamp() definitions after the min/max() ones
      minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()
      minmax.h: reduce the #define expansion of min(), max() and clamp()
      minmax.h: update some comments
      minmax.h: add whitespace around operators and after commas
      minmax: fix up min3() and max3() too
      minmax: improve macro expansion and type checking
      minmax: don't use max() in situations that want a C constant expression
      minmax: simplify min()/max()/clamp() implementation
      minmax: make generic MIN() and MAX() macros available everywhere
      drm/ast: Use msleep instead of mdelay for edid read
      gpiolib: Extend software-node support to support secondary software-nodes
      ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB
      s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b
      kmsan: fix out-of-bounds access to shadow memory
      afs: Fix potential null pointer dereference in afs_put_server
      ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address
      i40e: improve VF MAC filters accounting
      i40e: add mask to apply valid bits for itr_idx
      HID: asus: add support for missing PX series fn keys
      drm/gma500: Fix null dereference in hdmi teardown
      octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
      net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port
      net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup()
      net: dsa: lantiq_gswip: do also enable or disable cpu port
      selftests: fib_nexthops: Fix creation of non-FDB nexthops
      net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS
      bnxt_en: correct offset handling for IPv6 destination address
      vhost: Take a reference on the task in struct vhost_task.
      Bluetooth: hci_sync: Fix hci_resume_advertising_sync
      ethernet: rvu-af: Remove slash from the driver name
      can: peak_usb: fix shift-out-of-bounds issue
      can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
      can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
      can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
      can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
      bpf: Reject bpf_timer for PREEMPT_RT
      can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
      wifi: virt_wifi: Fix page fault on connect
      cpufreq: Initialize cpufreq-based invariance before subsys
      ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients
      arm64: dts: imx8mp: Correct thermal sensor index
      mm: folio_may_be_lru_cached() unless folio_test_large()
      mm/gup: local lru_add_drain() to avoid lru_add_drain_all()
      mm/gup: check ref_count instead of lru before migration
      mm: add folio_expected_ref_count() for reference count calculation
      mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked"
      IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
      ALSA: usb-audio: Add mute TLV for playback volumes on more devices
      ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
      ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
      i2c: designware: Add quirk for Intel Xe
      mmc: sdhci-cadence: add Mobileye eyeQ support
      usb: core: Add 0x prefix to quirks debug output
      ALSA: usb-audio: Fix build with CONFIG_INPUT=n
      ALSA: usb-audio: Convert comma to semicolon
      ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
      ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
      ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
      ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
      ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
      ALSA: usb-audio: Fix block comments in mixer_quirks
      firewire: core: fix overlooked update of subsystem ABI version
      scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE
      !20843 [OLK-6.6][linux-6.6.y sync] Backport 6.6.107-6.6.108 LTS Patches
      !20869 ub:hisi-ubus: fix bug of security smatch
      !20861  CVE-2026-23163
      ub: ubdevshm: supports the memory user to obtain and release shared memory
      ub: ubdevshm: supports granting and revoking shared memory permissions
      ub: ubdevshm: supports the registration and deregistration of shared memory segments
      ub: ubdevshm: supports the registration and deregistration
      KVM: arm64: Fix softirq masking in FPSIMD register saving sequence
      !20886  Fix CVE-2026-23205
      !20803 Fix CVE-2026-23112
      !20868  sched/fair: Prefer steal within LLC and fallback to upper LLC newidle_balance on failure
      !20811  smb/server: fix refcount leak in smb2_open()
      !20810  smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()
      !20809  smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
      sunrpc: fix NULL pointer dereference in rpcb_register_inet6 and rpcb_register_inet4
      sunrpc: fix race in cache cleanup causing stale nextcheck time
      scsi: qla2xxx: Free sp in error path to fix system crash
      scsi: qla2xxx: Delay module unload while fabric scan in progress
      scsi: qla2xxx: Validate sp before freeing associated memory
      dcache: Limit the minimal number of bucket to two
      !20872 Fix CVE-2026-23220
      !20846 Fix CVE-2026-23193
      !20815 Fix CVE-2026-23216
      !20859 Fix CVE-2026-23179
      !20871  CVE-2026-23096
      !20858 ub: ubase: resolve the cmdq crq overflow problem
      bpf: Deprecate hisock unused kfuncs and orig ingress logic
      bpf: Add local connect support for hisock
      bpf: Add ipv4-mapped ipv6 addr support for hisock
      bpf: Add target comm parse to hisock_cmd
      bpf: Add multi port parse to hisock_cmd
      bpf: Only deploy hisock in server
      bpf: Apply BPF_HISOCK_INGRESS to hisock ingress
      bpf: Add bpf_handle_ingress/egress_ptype kfunc
      bpf: Add bpf_get_skb_ethhdr kfunc
      bpf: Add bpf_set_ingress/egress_dev kfunc
      bpf: Add bpf_set_ingress_dst kfunc
      bpf: Add BPF_HISOCK_INGRESS attach type
      cgroup: make cgroup_bpf_prog_attach work when cgroup2 is not mounted
      smb: client: fix potential UAF and double free in smb2_open_file()
      smb/client: fix memory leak in smb2_open_file()
      !20852  ASoC: amd: fix memory leak in acp3x pdm dma ops
      ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths
      uacce: fix cdev handling in the cleanup path
      Revert "uacce: fix for cdev memory leak"
      ub:hisi-ubus: fix bug of security smatch
      ub:ubus: injected route event
      ub:ubus: Black Box Development
      !20865 urma: urma support uboe
      sched/fair: Prefer steal within LLC and fallback to upper LLC newidle_balance on failure
      urma: urma support uboe
      !20857 ub_fwctl driver adds support for querying some functions
      ub:ub_fwctl:Add illegal verification for scc
      ub:ub_fwctl:Support querying the historical status of port links
      drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove
      drm/amdkfd: Don't use sw fault filter if retry cam enabled
      ub:ub_fwctl:Support querying firmware version numbers
      ub: ub_fwctl: Support querying real-time bandwidth statistics
      ub:ub_fwctl:Support querying statistical indicators at the ub port and uboe port levels
      nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
      !20854 [URMA] add ping server for urma_ping
      urma: add ping server
      ub: ubase: resolve the cmdq crq overflow problem
      ub: ubase: Optimized the QoS code naming to improve code readability.
      ub: ubase&unic: optimizing code and configuration settings.
      net: unic: not support query and configure ip by control plane in UBoE
      net: unic: fix the automatically enable uc guid promisc mode.
      !20844 urma:kernel header of userctl
      urma: Kernel-mode header file for Jetty extension interface
      ASoC: amd: fix memory leak in acp3x pdm dma ops
      nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
      scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()
      phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again)
      ACPICA: Work around bogus -Wstringop-overread warning since GCC 11
      !20835 Fix CVE-2026-23084
      minmax: add a few more MIN_T/MAX_T users
      minmax: simplify and clarify min_t()/max_t() implementation
      minmax: avoid overly complicated constant expressions in VM code
      rtc: pcf2127: fix SPI command byte for PCF2131 backport
      xhci: dbc: Fix full DbC transfer ring after several reconnects
      xhci: dbc: decouple endpoint allocation from initialization
      phy: ti: omap-usb2: fix device leak at unbind
      phy: Use device_get_match_data()
      drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
      ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
      ASoC: wm8974: Correct PLL rate rounding
      ASoC: wm8940: Correct typo in control name
      ASoC: wm8940: Correct PLL rate rounding
      io_uring: include dying ring in task_work "should cancel" state
      io_uring: backport io_should_terminate_tw()
      ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
      selftests: mptcp: avoid spurious errors on TCP disconnect
      selftests: mptcp: connect: catch IO errors on listen side
      rds: ib: Increment i_fastreg_wrs before bailing out
      KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
      mmc: mvsdio: Fix dma_unmap_sg() nents value
      ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
      ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface
      btrfs: tree-checker: fix the incorrect inode ref size check
      iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
      LoongArch: Check the return value when creating kobj
      LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
      LoongArch: Update help info of ARCH_STRICT_ALIGN
      nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
      octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
      net: liquidio: fix overflow in octeon_init_instr_queue()
      bonding: don't set oif to bond dev when getting NS target destination
      net/mlx5e: Consider aggregated port speed during rate configuration
      i40e: remove redundant memory barrier when cleaning Tx descs
      net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
      selftests: mptcp: sockopt: fix error messages
      mptcp: tfo: record 'deny join id0' info
      mptcp: set remote_deny_join_id0 on SYN recv
      dpaa2-switch: fix buffer pool seeding for control traffic
      btrfs: fix invalid extref key setup when replaying dentry
      pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
      wifi: mac80211: fix incorrect type for ret
      wifi: mac80211: increase scan_ies_len for S1G
      ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
      !20769 [OLK-6.6][linux-6.6.y sync] Backport 6.6.106-6.6.107 LTS Patches
      be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list
      !20776 ub:ubfi: Release the chosen node
      !20817  CVE-2026-23094
      !20819  dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
      ub:ubus: Add port num check
      !20379 [OLK-6.6][sync from OLK-5.10]io_uring: Support forcing sq thread to be idle and woken up by hrtimer
      !20830  sched/soft_domain: Increasing NR_MAX_CLUSTER to 32
      sched/soft_domain: Increasing NR_MAX_CLUSTER to 32
      btrfs: fix incorrect readahead expansion length
      x86: disable image size check for test builds
      drm/i915/power: fix size for for_each_set_bit() in abox iteration
      drm/amdgpu: fix a memory leak in fence cleanup when unloading
      net: mdiobus: release reset_gpio in mdiobus_unregister_device()
      phy: ti-pipe3: fix device leak at unbind
      phy: tegra: xusb: fix device and OF node leak at probe
      dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate
      usb: gadget: midi2: Fix MIDI2 IN EP max packet size
      usb: gadget: midi2: Fix missing UMP group attributes initialization
      USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
      RISC-V: Remove unnecessary include from compat.h
      hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
      hrtimer: Remove unused function
      regulator: sy7636a: fix lifecycle of power good gpio
      dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
      hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
      hsr: use rtnl lock when iterating over ports
      net: hsr: Add VLAN CTAG filter support
      net: hsr: Add support for MC filtering at the slave device
      can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
      can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails
      can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed
      igb: fix link test skipping when interface is admin down
      docs: networking: can: change bcm_msg_head frames member to support flexible array
      tunnels: reset the GSO metadata before reusing the skb
      net: bridge: Bounce invalid boolopts
      net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
      USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
      USB: serial: option: add Telit Cinterion FN990A w/audio compositions
      dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
      serial: sc16is7xx: fix bug in flow control levels init
      tty: hvc_console: Call hvc_kick in hvc_write unconditionally
      Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups"
      Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table
      Input: iqs7222 - avoid enabling unused interrupts
      mm/khugepaged: fix the address passed to notifier on testing young
      btrfs: fix corruption reading compressed range when block size is smaller than page size
      btrfs: use readahead_expand() on compressed extents
      mm/damon/sysfs: fix use-after-free in state_show()
      mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
      mtd: nand: raw: atmel: Fix comment in timings preparation
      drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages
      drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time
      mm/damon/core: set quota->charged_from to jiffies at first charge window
      fuse: prevent overflow in copy_file_range return value
      fuse: check if copy_file_range() returns larger than requested size
      mtd: rawnand: stm32_fmc2: fix ECC overwrite
      mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
      net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups
      i2c: i801: Hide Intel Birch Stream SoC TCO WDT
      ocfs2: fix recursive semaphore deadlock in fiemap call
      mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN
      compiler-clang.h: define __SANITIZE_*__ macros only when undefined
      EDAC/altera: Delete an inappropriate dma_free_coherent() call
      rcu-tasks: Maintain real-time response in rcu_tasks_postscan()
      rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks
      rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks
      s390/cpum_cf: Deny all sampling events by counter PMU
      NFSv4/flexfiles: Fix layout merge mirror check.
      NFSv4.2: Serialise O_DIRECT i/o and copy range
      NFSv4.2: Serialise O_DIRECT i/o and clone range
      NFSv4.2: Serialise O_DIRECT i/o and fallocate()
      NFS: Serialise O_DIRECT i/o and truncate()
      fs/nfs/io: make nfs_start_io_*() killable
      ftrace/samples: Fix function size computation
      NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
      NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
      media: i2c: imx214: Fix link frequency validation
      NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs()
      nfsd: Fix a regression in nfsd_setattr()
      kasan: fix GCC mem-intrinsic prefix with sw tags
      kunit: kasan_test: disable fortify string checker on kasan_strings() test
      io_uring: fix kabi broken in struct io_ring_ctx
      io_uring: Support forcing sq thread to be idle and woken up by hrtimer
      dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
      uacce: fix isolate sysfs check condition
      Revert "uacce: fix isolate sysfs check condition"
      scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
      smb/server: fix refcount leak in smb2_open()
      smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()
      smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
      md: suspend array while updating raid_disks via sysfs
      scsi: core: Wake up the error handler when final completions race against each other
      nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
      ub:ubfi: Release the chosen node
      ub:ubus: Delete unused functions
      Loongarch: Enable CONFIG_CRYPTO_XTS for disk encryption
      change the package name of 64KB page size kernel to kernel-64k
      !20820 ub/obmm: add sysfs interface for mempool statistics & bugfixes
      ub/obmm: fix wrong pxm_numa parameter validation
      ub/obmm: Remove unused parameters from obmm_addr_check.c
      ub/obmm: Enhance mem_allocator_granu validation
      ub/obmm: simplify allocator naming scheme
      ub/obmm: fix allow_slow logic and optimize conti_alloc_memory
      ub/obmm: add sysfs interface with fine-grained memory statistics
      !20804  net: hv_netvsc: reject RSS hash key programming without RX indirection table
      !20813  migrate: correct lock ordering for hugetlb file folios
      !20812  libceph: make calc_target() set t->paused, not just clear it
      !20719 drivers/ub/sentry: some bugfix
      !20798 urma: log should not retrieve eid_idx from uctx
      !20808 urma: support triple bonding device
      urma: log should not retrieve eid_idx from uctx
      migrate: correct lock ordering for hugetlb file folios
      libceph: make calc_target() set t->paused, not just clear it
      !20745 vfio platform VFIO support for hisi05a1 devices
      urma: support triple bonding device
      net: hv_netvsc: reject RSS hash key programming without RX indirection table
      !20789  gic: Add hip09 support for HISILICON_ERRATUM_165010801
      !20726  tracing: Add recursion protection in kernel stack trace recording
      !20668  irqchip/gic-v3-its: Avoid truncating memory addresses
      !20795 ub: udma: support query and set qos info.
      !20791 Migration/urma:optimize performance in live migration.
      ub: udma: Support for UE link establishment message.
      Migration/urma: optimize performance in live migration.
      !20787 ub: cdma: modify the method of assigning values to the structure
      !20759 ubcore: hotfix route query for port eid on the same node.
      ub: udma: support query and set qos info.
      Revert "ub: ubase: Support for RC saved by queue granularity"
      ubcore: hotfix route query for port eid on the same node.
      !20676 urma: set/get sl
      !20765 urma: bugfix of UAF and double free in ubcm
      !20778 ub: ubase&unic: Fixes some bugfix in resetting and dfx ability
      gic: Add hip09 support for HISILICON_ERRATUM_165010801
      vfio/platform: Add CONFIG_VFIO_HISI05A1 to openeuler_defconfig and turn it on by default
      vfio/platform: VFIO support for hisi05a1 devices
      ub: cdma: modify the method of assigning values to the structure
      urma: set/get sl
      ub: ubase: support to query ub dl pkt stats and real-time peak bandwidth
      ub: ubase: Support for RC saved by queue granularity
      ub: ubase: Traverse mailbox AE events using interrupts and polling.
      ub: ubase: Modify ubase ctrlq trace to distinguish between MUE and UE messages
      net: unic: The function of dumping himac registers is added.
      ub: ubase: Fix MAC is_pfc sync, optimize list ops and code style
      ub: ubase: Retain the initial tm qset configuration and restore it
      net: unic: Fixed an issue in the bond IP address notification and pause configuration when an exception occurs.
      ub: ubase: Add a retransmission function to improve reliability.
      net: unic: Increase the readability and reliability of loopback code
      net: unic: Synchronize the code modify for ip management and deactivation
      net: unic: Increase the readability and reliability of VLAN feature.
      net: unic: Added unic DFX log information.
      ub: ubase: Add and correct comments for some functions and data structures
      net: unic: Notify MAMI when the bond port status changes
      ub: ubase: Support for HIMAC reset during ELR reset and Optimize ELR reset
      !20768 iommu/ummu-core: Fix separate page table compatibility
      !20665 [OLK-6.6] Enhance CMA memory usage reporting for CSV3
      !20764 net: hns3: fix double free issue for tx spare buffer
      urma: bugfix of UAF and double free in ubcm
      iommu/ummu-core: Fix separate page table compatibility
      net: hns3: fix double free issue for tx spare buffer
      drivers/ub/sentry: fix memory leak in sentry_msg_helper
      drivers/ub/sentry: initialize some variables
      drivers/ub/sentry: fix potential buffer overflow in convert_str_to_smh_msg()
      drivers/ub/sentry: fix potential null pointer reference in sentry_uvb_comm
      drivers/ub/sentry: add input parameter verification for exported symbols
      tracing: Add recursion protection in kernel stack trace recording
      x86/csv: Enhance CMA memory usage reporting for CSV3
      irqchip/gic-v3-its: Avoid truncating memory addresses
      !20727 v2  bpf: sockmap fixes
      !20741  scsi: qla2xxx: Sanitize payload size to prevent member overflow
      !20744  fix CVE-2025-38449
      !20763  net: usb: asix: validate PHY address before use
      !20762  smc91x: fix broken irq-context in PREEMPT_RT
      !20293 [Hygon][6.6][EDAC] The width of hash value is 2 bits for Hygon family 18h model 6h processors
      !20290 [Hygon][6.6][Bugfix] Bug fix for EDAC to use unicast instead of broadcast on hygon family 18h model 4h
      !20289 [Hygon][6.6][Bugfix] Bug fix for EDAC to correct the address translation on hygon family 18h model 4h
      !20245 KVM: arm64: Refactor exit handlers
      !20246 KVM: arm64: Mark some header functions as inline
      !19005 [Hygon] [OLK-6.6] [Bugfix] Fix memory bandwidth counter width for Hygon QoS
      !20292 [Hygon][6.6][TSC Adjust] Backport x86 TSC adjust patch
      !20273 [Hygon][6.6][Bugfix] Get correct CPU LLC ID in guest for Hygon processors
      !20722 [OLK-6.6][linux-6.6.y sync] Backport 6.6.104-6.6.106 LTS Patches
      !20667  fix CVE-2024-50102
      !20736  netfilter: nf_tables: remove redundant chain validation on register store
      !20758 ub: ubase: Fixed the alarm issue caused by the initialization of the structure variable definition.
      !20721 obmm: reduce log noise for successful export/import/preimport
      net: usb: asix: validate PHY address before use
      smc91x: fix broken irq-context in PREEMPT_RT
      !20731  devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
      !20732  libceph: return the handler error from mon_handle_auth_done()
      !20743  mm: slub: avoid wake up kswapd in set_track_prepare
      ub: ubase: Fixed the alarm issue caused by the initialization of the structure variable definition.
      !20750 ub: cdma: adapted to UMMU interface changes
      !20713 urma: DFX of log in kernel
      urma: optimize log levels for kernel space
      ub: cdma: adapted to UMMU interface changes
      wifi: ath11k: avoid bit operation on key flags
      drm/mediatek: fix potential OF node use-after-free
      cpufreq: intel_pstate: Check IDA only before MSR_IA32_PERF_CTL writes
      wifi: cfg80211: sme: store capped length in __cfg80211_connect_result()
      !20708 ub:hisi-ubus: Add create bus instance ummu bypass
      drm: fix kabi for struct drm_framebuffer
      drm/framebuffer: Acquire internal references on GEM handles
      drm/gem: Acquire references on GEM handles for framebuffers
      mm: slub: avoid wake up kswapd in set_track_prepare
      scsi: qla2xxx: Sanitize payload size to prevent member overflow
      netfilter: nf_tables: remove redundant chain validation on register store
      libceph: return the handler error from mon_handle_auth_done()
      devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
      Documentation/hw-vuln: Add VMSCAPE documentation
      dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
      riscv: use lw when reading int cpu in asm_per_cpu
      mm: slub: avoid wake up kswapd in set_track_prepare
      tools: gpio: remove the include directory on make clean
      tools: gpio: rm .*.cmd on make clean
      drm/amd/amdgpu: Fix missing error return on kzalloc failure
      drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c
      perf bpf-event: Fix use-after-free in synthesis
      drm/bridge: ti-sn65dsi86: fix REFCLK setting
      spi: spi-fsl-lpspi: Clear status register after disabling the module
      spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
      spi: spi-fsl-lpspi: Set correct chip-select polarity bit
      spi: spi-fsl-lpspi: Fix transmissions when using CONT
      hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM
      pcmcia: omap: Add missing check for platform_get_resource
      Revert "drm/amdgpu: Avoid extra evict-restore process."
      ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY
      ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
      drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv
      drm/mediatek: Fix using wrong drm private data to bind mediatek-drm
      drm/mediatek: Add crtc path enum for all_drm_priv array
      vmxnet3: update MTU after device quiesce
      net: dsa: microchip: linearize skb for tail-tagging switches
      net: dsa: microchip: update tag_ksz masks for KSZ9477 family
      dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
      ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
      ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
      iio: pressure: mprls0025pa: use aligned_s64 for timestamp
      iio: chemical: pms7003: use aligned_s64 for timestamp
      iio: imu: inv_mpu6050: align buffer for timestamp
      thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold
      nouveau: fix disabling the nonstall irq due to storm code
      cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
      net: pcs: rzn1-miic: Correct MODCTRL register offset
      platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list
      drm/amdgpu: drop hw access in non-DC audio fini
      wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data()
      wifi: mwifiex: Initialize the chan_stats array to zero
      tcp_bpf: Fix copied value in tcp_bpf_sendmsg
      skmsg: Return copied bytes in sk_msg_memcopy_from_iter
      tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
      Revert "bpf, sockmap: Add sk_rmem_alloc check for sockmap"
      ALSA: usb-audio: Add mute TLV for playback volumes on some devices
      phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
      selftest: net: Fix weird setsockopt() in bind_bhash.c.
      net: atm: fix memory leak in atm_register_sysfs when device_register fail
      ax25: properly unshare skbs in ax25_kiss_rcv()
      mctp: return -ENOPROTOOPT for unknown getsockopt options
      net/smc: Remove validation of reserved bits in CLC Decline message
      ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
      net: thunder_bgx: decrement cleanup index before use
      net: thunder_bgx: add a missing of_node_put
      wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
      wifi: libertas: cap SSID len in lbs_associate()
      wifi: cw1200: cap SSID length in cw1200_do_join()
      net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
      wifi: ath11k: fix group data packet drops during rekey
      wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay()
      wifi: ath11k: rename ath11k_start_vdev_delay()
      wifi: ath11k: Introduce and use ath11k_sta_to_arsta()
      net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()
      macsec: read MACSEC_SA_ATTR_PN with nla_get_uint
      netlink: add variable-length / auto integers
      net: macb: Fix tx_ptr_lock locking
      icmp: fix icmp_ndo_send address translation for reply direction
      mISDN: Fix memory leak in dsp_hwec_enable()
      xirc2ps_cs: fix register access when enabling FullDuplex
      netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
      wifi: cfg80211: fix use-after-free in cmp_bss()
      arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC
      arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM
      tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"
      arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
      Bluetooth: hci_sync: Avoid adding default advertising on startup
      cpupower: Fix a bug where the -t option of the set subcommand was not working.
      drm/amd/display: Don't warn when missing DCE encoder caps
      cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN
      LoongArch: Save LBT before FPU in setup_sigcontext()
      btrfs: avoid load/store tearing races when checking if an inode was logged
      btrfs: fix race between setting last_dir_index_offset and inode logging
      btrfs: fix race between logging inode and checking if it was logged before
      bpf: Fix oob access in cgroup local storage
      !20556 urma: fix update topo logic
      !20639 [OLK-6.6][linux-6.6.y sync] Backport 6.6.103-6.6.104 LTS Patches
      !20641 [OLK-6.6][linux-6.6.y sync] LoongArch: Add more instruction opcodes and emit_* helpers
      !20560  *** fix CVE-2025-38062 ***
      !20662  pNFS: Fix a deadlock when returning a delegation during open()
      ub:hisi-ubus: Add create bus instance ummu bypass
      Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set"
      Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
      HID: mcp2221: Handle reads greater than 60 bytes
      HID: mcp2221: Don't set bus speed on every transfer
      net/mlx5: SF, Fix add port error handling
      drm/nouveau/disp: Always accept linear modifier
      smb3 client: fix return code mapping of remap_file_range
      net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
      dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted
      HID: wacom: Add a new Art Pen 2
      HID: logitech: Add ids for G PRO 2 LIGHTSPEED
      HID: quirks: add support for Legion Go dual dinput modes
      net: stmmac: Set CIC bit only for TX queues with COE
      net: stmmac: xgmac: Correct supported speed modes
      net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
      net/mlx5e: Set local Xoff after FW update
      net/mlx5e: Update and set Xon/Xoff upon port speed set
      net/mlx5e: Update and set Xon/Xoff upon MTU set
      net/mlx5: Nack sync reset when SFs are present
      net/mlx5: Convert SF port_indices xarray to function_ids xarray
      net/mlx5: Use devlink port pointer to get the pointer of container SF struct
      net/mlx5: Call mlx5_sf_id_erase() once in mlx5_sf_dealloc()
      phy: mscc: Fix when PTP clock is register and unregister
      net: dlink: fix multicast stats being counted incorrectly
      dt-bindings: display/msm: qcom,mdp5: drop lut clock
      drm/nouveau: remove unused memory target test
      drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
      Bluetooth: hci_sync: fix set_local_name race condition
      Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
      Bluetooth: hci_event: Mark connection as closed during suspend disconnect
      Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success
      HID: input: report battery status changes immediately
      HID: input: rename hidinput_set_battery_charge_status()
      powerpc/kvm: Fix ifdef to remove build warning
      drm/msm: Defer fd_install in SUBMIT ioctl
      vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
      ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list
      erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC
      ASoC: codecs: tx-macro: correct tx_macro_component_drv name
      smb: client: fix race with concurrent opens in unlink(2)
      scsi: core: sysfs: Correct sysfs attributes access rights
      of: dynamic: Fix use after free in of_changeset_add_prop_helper()
      of: Add a helper to free property struct
      mips: lantiq: xway: sysctrl: rename the etop node
      mips: dts: lantiq: danube: add missing burst length property
      pinctrl: STMFX: add missing HAS_IOMEM dependency
      of: dynamic: Fix memleak when of_pci_add_properties() failed
      !20684 urma: adjust urma log format
      !20355  udp: Deal with race between UDP socket address change and rehash
      !20627  Fixes CVE-2025-38627
      !20702  CVE-2025-39948
      !20701  netfilter: ctnetlink: remove refcounting in expectation dumpers
      !20700  CVE-2025-38678
      !20703  CVE-2025-38491
      !20690  tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
      obmm: reduce log noise for successful export/import/preimport
      mptcp: avoid deadlock on fallback while reinjecting
      mptcp: plug races between subflow fail and subflow creation
      mptcp: make fallback action and fallback decision atomic
      ice: fix Rx page leak on multi-buffer frames
      ice: fix incorrect counter for buffer allocation failures
      ice: stop storing XDP verdict within ice_rx_buf
      ice: gather page_count()'s of each frag right before XDP prog call
      ice: Introduce ice_xdp_buff
      netfilter: ctnetlink: remove refcounting in expectation dumpers
      netfilter: nf_tables: reject duplicate device on updates
      netfilter: nf_tables: Introduce functions freeing nft_hook objects
      netfilter: nf_tables: Fix percpu address space issues in nf_tables_api.c
      err.h: add ERR_PTR_PCPU(), PTR_ERR_PCPU() and IS_ERR_PCPU() macros
      tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
      !20498 Fix CVE-2025-71118
      !20608  pmdomain: arm: scmi: Fix genpd leak on provider registration failure
      !20679  x86/CPU/AMD: Add RDSEED fix for Zen5
      !20650  fix cve-2025-40300
      !20661  Input: alps - fix use-after-free bugs caused by dev3_register_work
      !20664  backport some net bugfix from 6.6 lts
      urma: adjust urma log format
      !20678 ub: udma: close debug switch load parameters.
      ub: udma: close debug switch load parameters.
      x86/CPU/AMD: Add RDSEED fix for Zen5
      !20630  net: LTS-6.6 bugfix backport
      !20632  net/sched: sch_qfq: do not free existing class in qfq_change_class()
      !20631  macvlan: fix possible UAF in macvlan_forward_source()
      !20628  Fix CVE-2025-39910
      !20659 v2  Fix CVE-2025-22090
      !20506  XSched: Update XSched manual
      !20647  media: imon: make send_packet() more robust
      !20646  ksm: use range-walk function to jump over holes in scan_get_next_rmap_item
      !20645  fbcon: Set fb_display[i
      !20648  parse_longname(): strrchr() expects NUL-terminated string
      !20621 urma: modify log level
      !20602 urma: fix the jfe uaf issue that occurred during the killall process.
      !20567 urma:change log level and pass status 9
      !20640  iio: common: st_sensors: Fix use of uninitialize device structs
      !20634  usb: gadget: udc: fix use-after-free in usb_gadget_state_work
      !20633  net: dsa: properly keep track of conduit reference
      !20635  fix CVE-2025-68231
      !20651  mm/slub: avoid accessing metadata when pointer is invalid in object_err()
      !20649  drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
      !20652  mm/vmalloc: fix data race in show_numa_info()
      x86: uaccess: don't use runtime-const rewriting in modules
      x86: fix off-by-one in access_ok()
      x86: fix user address masking non-canonical speculation issue
      x86/uaccess: Zero the 8-byte get_range case on failure on 32-bit
      x86/uaccess: Improve the 8-byte getuser() case
      x86: fix whitespace in runtime-const assembler output
      dcache: keep dentry_hashtable or d_hash_shift even when not used
      runtime constants: add x86 architecture support
      runtime constants: deal with old decrepit linkers
      x86/uaccess: Add missing __force to casts in __access_ok() and valid_user_address()
      !20345 arm64: entry: xcall/xint: make asm conditionals compatible with clang IAS
      tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
      libceph: replace BUG_ON with bounds check for map->max_osd
      libceph: prevent potential out-of-bounds writes in handle_auth_session_key()
      libceph: fix potential use-after-free in have_mon_and_osd_map()
      sctp: Hold sock lock while iterating over address list
      sctp: Prevent TOCTOU out-of-bounds write
      sctp: Hold RCU read lock while iterating over address list
      tipc: Fix use-after-free in tipc_mon_reinit_self().
      sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
      sctp: avoid NULL dereference when chunk data buffer is missing
      bpf: Explicitly check accesses to bpf_sock_addr
      ipvs: Defer ip_vs_ftp unregister during netns cleanup
      nexthop: Forbid FDB status change while nexthop is in a group
      netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
      tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
      net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
      sctp: initialize more fields in sctp_v6_from_sk()
      pNFS: Fix a deadlock when returning a delegation during open()
      Input: alps - fix use-after-free bugs caused by dev3_register_work
      x86/cpu: Get CPU LLC ID from CPUID 0x8000001d in guest for Hygon processors
      kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork()
      mm: (un)track_pfn_copy() fix + doc improvements
      x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
      !20642  mtdchar: fix integer overflow in read/write ioctls
      mm/vmalloc: fix data race in show_numa_info()
      mm/slub: avoid accessing metadata when pointer is invalid in object_err()
      config: enable CONFIG_MITIGATION_VMESCAPE by default on x86
      x86/vmscape: Enable the mitigation
      x86/vmscape: Enumerate VMSCAPE bug
      x86/vmscape: Add conditional IBPB mitigation
      drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
      parse_longname(): strrchr() expects NUL-terminated string
      media: imon: make send_packet() more robust
      ksm: use range-walk function to jump over holes in scan_get_next_rmap_item
      fbcon: Set fb_display[i]->mode to NULL when the mode is released
      !20569  CVE-2024-35808
      mtdchar: fix integer overflow in read/write ioctls
      !20619 Fix CVE-2026-22991
      !20612 net: hns3: extend HCLGE_FD_AD_COUNTER_NUM to 8 bits
      LoongArch: Add more instruction opcodes and emit_* helpers
      iio: common: st_sensors: Fix use of uninitialize device structs
      !20581  null_blk: fix kmemleak by releasing references to fault configfs items
      mm/mempool: fix poisoning order>0 pages with HIGHMEM
      mm/page_poison: replace kmap_atomic() with kmap_local_page()
      mm/mempool: replace kmap_atomic() with kmap_local_page()
      usb: gadget: udc: fix use-after-free in usb_gadget_state_work
      net: dsa: properly keep track of conduit reference
      net/sched: sch_qfq: do not free existing class in qfq_change_class()
      macvlan: fix possible UAF in macvlan_forward_source()
      netfilter: nft_objref: validate objref and objrefmap expressions
      arp: do not assume dev_hard_header() does not change skb->head
      ip6_gre: make ip6gre_header() robust
      netfilter: nf_tables: avoid chain re-validation if possible
      netfilter: nf_tables: drop unused 3rd argument from validate callback ops
      Revert "netfilter: nft_objref: validate objref and objrefmap expressions"
      bpf: Fix reference count leak in bpf_prog_test_run_xdp()
      net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
      ethtool: Avoid overflowing userspace buffer on stats query
      ipvs: fix ipv4 null-ptr-deref in route error path
      ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
      !20596  mm/page_alloc: prevent pcp corruption with SMP=n
      !20598  team: fix check for port enabled in team_queue_override_port_prio_changed()
      !18823  hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio
      mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()
      kasan: avoid sleepable page allocation from atomic context
      f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
      f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi
      !20583 [OLK-6.6][linux-6.6.y sync] Backport 6.6.102-6.6.103 LTS Patches
      !20460  fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
      urma:fix log level and pass status 9
      urma: modify log level
      !20592  CVE-2025-71141 fixup
      !20594  CVE-2025-39744 fixup
      !20607  powerpc/64s/slb: Fix SLB multihit issue during SLB preload
      !20606  mm/huge_memory: fix NULL pointer deference when splitting folio
      !20604 Fix CVE-2026-22984
      !20603 Fix CVE-2026-23021
      !20600 Fix CVE-2026-22990
      urma: fix the jfe uaf issue that occurred during the killall process.
      !20380 pswiotlb: Adapt to the IOMMU DMA API upgraded by IOMMUFD
      libceph: make free_choose_arg_map() resilient to partial allocation
      drm/dp: Change AUX DPCD probe address from LANE0_1_STATUS to TRAINING_PATTERN_SET
      net: hns3: extend HCLGE_FD_AD_COUNTER_NUM to 8 bits
      net: hns3: extend HCLGE_FD_AD_QID to 11 bits
      net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue
      net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M
      Revert "net: hns3: add support for FD counter"
      !20587  dmaengine: stm32: dmamux: fix device leak on route allocation
      pmdomain: arm: scmi: Fix genpd leak on provider registration failure
      powerpc/64s/slb: Fix SLB multihit issue during SLB preload
      mm/huge_memory: fix NULL pointer deference when splitting folio
      !20562  LoongArch: BPF: Sign extend kfunc call arguments
      !20470  ipv4: Fix reference count leak when using error routes with nexthop objects
      !20471  net: sock: fix hardened usercopy panic in sock_recv_errqueue
      !20472  net: fix memory leak in skb_segment_list for GRO packets
      !20473  ipv4: ip_gre: make ipgre_header() robust
      !20469  SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
      !20476  ipv6: Fix use-after-free in inet6_addr_del().
      !20477  svcrdma: bound check rq_pages index in inline path
      !20578  ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
      !20579  fix CVE-2025-68768
      !20542  Fix NFS deadlock
      USB: storage: Remove subclass and protocol overrides from Novatek quirk
      cpuidle: governors: menu: Select polling state in some more cases
      cpuidle: governors: menu: Rearrange main loop in menu_select()
      cpuidle: menu: Update documentation after previous changes
      Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"
      parisc: Remove spurious if statement from raw_copy_from_user()
      ata: libata-scsi: Fix system suspend for a security locked drive
      Revert "drm/amdgpu: fix incorrect vm flags to map bo"
      mfd: axp20x: Set explicit ID for regulator cell if no IRQ line is present
      drm/amd/display: use udelay rather than fsleep
      sched/fair: Revert max_newidle_lb_cost bump
      net: ipv4: fix regression in local-broadcast routes
      tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers
      PM: runtime: Do not clear needs_force_resume with enabled runtime PM
      usb: typec: ucsi: psy: Set max current to zero when disconnected
      io_uring/rw: cast rw->flags assignment to rwf_t
      Documentation: ACPI: i2c-muxes: fix I2C device references
      s390/hypfs: Enable limited access during lockdown
      s390/hypfs: Avoid unnecessary ioctl registration in debugfs
      ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
      net/mlx5e: Preserve shared buffer capacity during headroom updates
      net/mlx5: Base ECVF devlink port attrs from 0
      Octeontx2-af: Skip overlap check for SPI field
      bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
      bonding: Add independent control state machine
      bonding: update LACP activity flag after setting lacp_active
      net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
      ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
      gve: prevent ethtool ops after shutdown
      phy: mscc: Fix timestamping for vsc8584
      net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
      ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
      net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
      ALSA: usb-audio: Fix size validation in convert_chmap_v3()
      mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
      Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
      Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
      scsi: qla4xxx: Prevent a potential error pointer dereference
      RDMA/bnxt_re: Fix to initialize the PBL array
      RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
      RDMA/bnxt_re: Fix to do SRQ armena by default
      RDMA/erdma: Fix ignored return value of init_kernel_qp
      iosys-map: Fix undefined behavior in iosys_map_clear()
      cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
      spi: spi-fsl-lpspi: Clamp too high speed_hz
      usb: typec: maxim_contaminant: disable low power mode when reading comparator values
      usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean
      iio: imu: inv_icm42600: change invalid data error to -EBUSY
      iio: imu: inv_icm42600: Convert to uXX and sXX integer types
      iio: imu: inv_icm42600: use = { } instead of memset()
      iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64
      iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
      iio: light: as73211: Ensure buffer holes are zeroed
      tls: fix handling of zero-length records on the rx_list
      powerpc/boot: Fix build with gcc 15
      mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
      compiler: remove __ADDRESSABLE_ASM{_STR,}() again
      drm/amd/display: Don't overclock DCE 6 by 15%
      usb: dwc3: pci: add support for the Intel Wildcat Lake
      usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
      USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
      usb: storage: realtek_cr: Use correct byte order for bcs->Residue
      USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
      usb: renesas-xhci: Fix External ROM access timeouts
      usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
      comedi: Make insn_rw_emulate_bits() do insn->n samples
      usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
      cdx: Fix off-by-one error in cdx_rpmsg_probe()
      most: core: Drop device reference after usage in get_channel()
      iio: proximity: isl29501: fix buffered read on big-endian systems
      iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
      fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
      drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
      cpuidle: governors: menu: Avoid selecting states with too much latency
      cpuidle: menu: Remove iowait influence
      mmc: sdhci-pci-gli: Add a new function to simplify the code
      mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values
      mptcp: disable add_addr retransmission when timeout is 0
      mptcp: remove duplicate sk_reset_timer call
      use uniform permission checks for all mount propagation changes
      arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
      scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
      scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
      scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
      PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features
      PCI: imx6: Delay link start until configfs 'start' written
      PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
      PCI: rockchip: Use standard PCIe definitions
      drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
      drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
      drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
      drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
      ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
      mm/debug_vm_pgtable: clear page table entries at destroy_args()
      squashfs: fix memory leak in squashfs_fill_super
      mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
      memstick: Fix deadlock by moving removing flag earlier
      KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
      sched/fair: Fix frequency selection for non-invariant case
      kbuild: userprogs: use correct linker when mixing clang and GNU ld
      ata: libata-scsi: Return aborted command when missing sense and result TF
      PM: runtime: Take active children into account in pm_runtime_get_if_in_use()
      PM: runtime: Simplify pm_runtime_get_if_active() usage
      ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
      usb: dwc3: imx8mp: fix device leak at unbind
      wifi: mac80211: check basic rates validity in sta_link_apply_parameters
      KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
      s390/mm: Remove possible false-positive warning in pte_free_defer()
      btrfs: send: make fs_path_len() inline and constify its argument
      btrfs: send: use fallocate for hole punching with send stream v2
      btrfs: send: avoid path allocation for the current inode when issuing commands
      btrfs: send: keep the current inode's path cached
      btrfs: send: add and use helper to rename current inode when processing refs
      btrfs: send: only use boolean variables at process_recorded_refs()
      btrfs: send: factor out common logic when sending xattrs
      btrfs: populate otime when logging an inode item
      btrfs: constify more pointer parameters
      btrfs: fix ssd_spread overallocation
      btrfs: open code timespec64 in struct btrfs_inode
      xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
      btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
      btrfs: always abort transaction on failure to add block group to free space tree
      btrfs: move transaction aborts to the error site in add_block_group_free_space()
      btrfs: qgroup: fix race between quota disable and quota rescan ioctl
      usb: typec: fusb302: cache PD RX state
      block: Make REQ_OP_ZONE_FINISH a write operation
      block: reject invalid operation in submit_bio_noacct
      leds: flash: leds-qcom-flash: Fix registry access after re-bind
      leds: flash: leds-qcom-flash: Limit LED current based on thermal condition
      selftests/memfd: add test for mapping write-sealed memfd read-only
      mm: update memfd seal write check to include F_SEAL_WRITE
      mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
      mptcp: drop skb if MPTCP skb extension allocation fails
      ipv6: sr: Fix MAC comparison to be constant-time
      drm/amd/display: Don't overwrite dce60_clk_mgr
      drm/amd/display: Add primary plane to commits for correct VRR handling
      drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
      drm/amdgpu: update mmhub 3.0.1 client id mappings
      drm/amdgpu: Avoid extra evict-restore process.
      drm/amd: Restore cached power limit during resume
      media: venus: venc: Clamp param smaller than 1fps and bigger than 240
      media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
      media: venus: protect against spurious interrupts during probe
      media: venus: hfi: explicitly release IRQ during teardown
      media: qcom: camss: cleanup media device allocated resource on error path
      media: ov2659: Fix memory leaks in ov2659_probe()
      media: usbtv: Lock resolution while streaming
      media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
      media: verisilicon: Fix AV1 decoder clock frequency
      media: vivid: fix wrong pixel_array control size
      media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
      media: hi556: correct the test pattern configuration
      media: gspca: Add bounds checking to firmware parser
      parisc: Update comments in make_insert_tlb
      parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
      parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
      parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
      parisc: Define and use set_pte_at()
      parisc: Check region is readable by user in raw_copy_from_user()
      soc/tegra: pmc: Ensure power-domains are in a known state
      f2fs: fix to avoid out-of-boundary access in dnode page
      phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence
      vhost/vsock: Avoid allocating arbitrarily-sized SKBs
      PCI: endpoint: Fix configfs group removal on driver teardown
      PCI: endpoint: Fix configfs group list head handling
      mtd: rawnand: renesas: Add missing check after DMA map
      mtd: rawnand: fsmc: Add missing check after DMA map
      mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
      mtd: spi-nor: Fix spi_nor_try_unlock_all()
      hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
      pwm: mediatek: Fix duty and period setting
      pwm: mediatek: Handle hardware enable and clock enable separately
      pwm: imx-tpm: Reset counter if CMOD is 0
      wifi: ath11k: fix dest ring-buffer corruption when ring is full
      wifi: ath11k: fix source ring-buffer corruption
      wifi: ath11k: fix dest ring-buffer corruption
      wifi: ath12k: fix dest ring-buffer corruption when ring is full
      wifi: ath12k: fix source ring-buffer corruption
      wifi: ath12k: fix dest ring-buffer corruption
      wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
      iio: adc: ad_sigma_delta: change to buffer predisable
      zynq_fpga: use sgtable-based scatterlist wrappers
      scsi: ufs: ufs-pci: Fix default runtime and system PM levels
      scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
      ata: libata-scsi: Fix ata_to_sense_error() status handling
      scsi: mpi3mr: Fix race between config read submit and interrupt completion
      dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
      dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
      arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
      arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
      arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
      btrfs: zoned: fix write time activation failure for metadata block group
      ext4: fix hole length calculation overflow in non-extent inodes
      ext4: don't try to clear the orphan_present feature block device is r/o
      ext4: fix reserved gdt blocks handling in fsmap
      ext4: fix fsmap end of range reporting with bigalloc
      ext4: check fast symlink for ea_inode correctly
      tracing: fprobe-event: Sanitize wildcard for fprobe event name
      crypto: qat - lower priority for skcipher and aead algorithms
      lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
      vt: defkeymap: Map keycodes above 127 to K_HOLE
      vt: keyboard: Don't process Unicode characters in K_OFF mode
      bus: mhi: host: Fix endianness of BHI vector table
      usb: dwc3: meson-g12a: fix device leaks at unbind
      usb: musb: omap2430: fix device leak at unbind
      usb: gadget: udc: renesas_usb3: fix device leak at unbind
      usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
      m68k: Fix lost column on framebuffer debug console
      platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
      cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
      rcu: Fix racy re-initialization of irq_work causing hangs
      HID: apple: avoid setting up battery timer for devices without battery
      HID: magicmouse: avoid setting up battery timer when not needed
      RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
      tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
      media: uvcvideo: Do not mark valid metadata as invalid
      media: venus: Fix OOB read due to missing payload bound check
      parisc: Makefile: fix a typo in palo.conf
      fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
      btrfs: do not allow relocation of partially dropped subvolumes
      btrfs: zoned: do not select metadata BG as finish target
      btrfs: clear dirty status from extent buffer on error at insert_new_root()
      btrfs: zoned: do not remove unwritten non-data block group
      btrfs: abort transaction during log replay if walk_log_tree() failed
      btrfs: zoned: use filesystem size not disk size for reclaim decision
      cdc-acm: fix race between initial clearing halt and open
      thunderbolt: Fix copy+paste error in match_service_id()
      usb: typec: ucsi: Update power_supply on power role change
      misc: rtsx: usb: Ensure mmc child device is active when card is present
      iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range
      cifs: reset iface weights when we cannot find a candidate
      drm/amdgpu: fix incorrect vm flags to map bo
      scsi: lpfc: Remove redundant assignment to avoid memory leak
      rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
      pNFS: Handle RPC size limit for layoutcommits
      pNFS: Fix disk addr range check in block/scsi layout
      pNFS: Fix stripe mapping in block/scsi layout
      ASoC: Intel: avs: Fix uninitialized pointer error in probe()
      net: phy: smsc: add proper reset flags for LAN8710A
      ipmi: Fix strcpy source and destination the same
      kconfig: lxdialog: fix 'space' to (de)select options
      kconfig: gconf: fix potential memory leak in renderer_edited()
      kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
      ipmi: Use dev_warn_ratelimited() for incorrect message warnings
      vfio/mlx5: fix possible overflow in tracking max message size
      scsi: aacraid: Stop using PCI_IRQ_AFFINITY
      scsi: target: core: Generate correct identifiers for PR OUT transport IDs
      scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
      kconfig: nconf: Ensure null termination where strncpy is used
      vfio/type1: conditional rescheduling while pinning
      kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
      f2fs: check the generic conditions first
      exfat: add cluster chain loop check for dir
      i2c: Force DLL0945 touchpad i2c freq to 100khz
      apparmor: use the condition in AA_BUG_FMT even with debug disabled
      dm-table: fix checking for rq stackable devices
      dm-mpath: don't print the "loaded" message if registering fails
      i3c: master: Initialize ret in i3c_i2c_notifier_call()
      i3c: don't fail if GETHDRCAP is unsupported
      apparmor: shift ouid when mediating hard links in userns
      rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
      i3c: add missing include to internal header
      module: Prevent silent truncation of module name in delete_module(2)
      md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
      soundwire: Move handle_nested_irq outside of sdw_dev_lock
      soundwire: amd: serialize amd manager resume sequence during pm_prepare
      crypto: octeontx2 - add timeout for load_fvc completion poll
      media: uvcvideo: Fix bandwidth issue for Alcor camera
      media: usb: hdpvr: disable zero-length read messages
      media: tc358743: Increase FIFO trigger level to 374
      media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
      media: tc358743: Check I2C succeeded during probe
      pinctrl: stm32: Manage irq affinity settings
      scsi: mpi3mr: Correctly handle ATA device errors
      scsi: mpt3sas: Correctly handle ATA device errors
      power: supply: qcom_battmgr: Add lithium-polymer entry
      RDMA/core: reduce stack using in nldev_stat_get_doit()
      dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs
      leds: leds-lp50xx: Handle reg to get correct multi_index
      media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
      MIPS: lantiq: falcon: sysctrl: fix request memory check logic
      crypto: jitter - fix intermediary handling
      watchdog: iTCO_wdt: Report error if timeout configuration fails
      MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
      clk: qcom: ipq5018: keep XO clock always on
      hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state
      watchdog: dw_wdt: Fix default timeout
      fs/orangefs: use snprintf() instead of sprintf()
      phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal
      mfd: axp20x: Set explicit ID for AXP313 regulator
      clk: tegra: periph: Fix error handling and resolve unsigned compare warning
      fbdev: fix potential buffer overflow in do_register_framebuffer()
      cifs: Fix calling CIFSFindFirst() for root path without msearch
      watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
      drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported
      drm/amd/display: Only finalize atomic_obj if it was initialized
      vhost: fail early when __vhost_add_used() fails
      vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
      net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
      rcu: Fix rcu_read_unlock() deadloop due to IRQ work
      drm/amd/display: Avoid trying AUX transactions on disconnected ports
      selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
      bpf: Make reg_not_null() true for CONST_PTR_TO_MAP
      uapi: in6: restore visibility of most IPv6 socket options
      drm/ttm: Should to return the evict error
      drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range
      net: ncsi: Fix buffer overflow in fetching version id
      ionic: clean dbpage in de-init
      wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
      ptp: Use ratelimite for freerun error message
      bpftool: Fix JSON writer resource leak in version command
      net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
      net: dsa: b53: prevent DIS_LEARNING access on BCM5325
      net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
      net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
      gve: Return error for unknown admin queue command
      net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
      net: vlan: Make is_vlan_dev() a stub when VLAN is not configured
      drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
      dpaa_eth: don't use fixed_phy_change_carrier
      wifi: iwlegacy: Check rate_idx range after addition
      netmem: fix skb_frag_address_safe with unreadable skbs
      powerpc: floppy: Add missing checks after DMA map
      wifi: ath12k: Decrement TID on RX peer frag setup error handling
      wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0
      wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
      wifi: mac80211: update radar_required in channel context after channel switch
      drm/amd/display: Fix 'failed to blank crtc!'
      wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
      wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
      wifi: ath12k: Add memset and update default rate value in wmi tx completion
      drm/amd/display: Separate set_gsl from set_gsl_source_select
      net: fec: allow disable coalescing
      net: atlantic: add set_power to fw_ops for atl2 to fix wol
      net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
      net: thunderbolt: Enable end-to-end flow control also in transmit
      kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
      wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch
      wifi: rtw89: Disable deep power saving for USB/SDIO
      wifi: rtw89: Fix rtw89_mac_power_switch() for USB
      drm/msm: use trylock for debugfs
      wifi: mac80211: fix rx link assignment for non-MLO stations
      ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
      (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
      wifi: mac80211: don't complete management TX on SAE commit
      sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
      s390/stp: Remove udelay from stp_sync_clock()
      wifi: iwlwifi: mvm: fix scan request validation
      um: Re-evaluate thread flags repeatedly
      wifi: iwlwifi: mvm: set gtk id also in older FWs
      perf/cxlpmu: Remove unintended newline from IRQ name format string
      net: phy: micrel: Add ksz9131_resume()
      net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
      net: ipv4: fix incorrect MTU in broadcast routes
      wifi: cfg80211: Fix interface type validation
      net: mctp: Prevent duplicate binds
      arm64: Mark kernel as tainted on SAE and SError panic
      net/mlx5e: Properly access RCU protected qdisc_sleeping variable
      net: ag71xx: Add missing check after DMA map
      et131x: Add missing check after DMA map
      wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
      be2net: Use correct byte order and format string for TCP seq and ack_seq
      s390/time: Use monotonic clock in get_cycles()
      wifi: cfg80211: reject HTC bit for management frames
      ktest.pl: Prevent recursion of default variable options
      wifi: ath12k: Correct tid cleanup when tid setup fails
      net: usb: cdc-ncm: check for filtering capability
      xen/netfront: Fix TX response spurious interrupts
      Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie()
      powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64
      ASoC: qcom: use drvdata instead of component to keep id
      ASoC: codecs: rt5640: Retry DEVICE_ID verification
      iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
      ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
      ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
      platform/chrome: cros_ec_typec: Defer probe on missing EC parent
      platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
      soc: qcom: mdt_loader: Actually use the e_phoff
      imx8m-blk-ctrl: set ISI panic write hurry level
      pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
      usb: core: usb_submit_urb: downgrade type check
      usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
      ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
      ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
      ALSA: hda: Disable jack polling at shutdown
      ALSA: hda: Handle the jack polling always via a work
      mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
      mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
      char: misc: Fix improper and inaccurate error code returned by misc_init()
      reset: brcmstb: Enable reset drivers for ARCH_BCM2835
      pps: clients: gpio: fix interrupt handling order in remove path
      ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
      mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
      ACPI: processor: fix acpi_object initialization
      PM: sleep: console: Fix the black screen issue
      thermal: sysfs: Return ENODATA instead of EAGAIN for reads
      PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
      firmware: tegra: Fix IVC dependency problems
      ACPI: PRM: Reduce unnecessary printing to avoid user confusion
      selftests: tracing: Use mutex_unlock for testing glob filter
      tools/build: Fix s390(x) cross-compilation with clang
      gpio: tps65912: check the return value of regmap_update_bits()
      iio: adc: ad_sigma_delta: don't overallocate scan buffer
      tools/nolibc: define time_t in terms of __kernel_old_time_t
      thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
      ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
      EDAC/synopsys: Clear the ECC counters on init
      gpio: wcd934x: check the return value of regmap_update_bits()
      remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU
      soc: qcom: rpmh-rsc: Add RSC version 4 support
      usb: xhci: Avoid showing errors during surprise removal
      usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
      usb: xhci: Avoid showing warnings for dying controller
      usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
      selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
      cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
      platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list
      usb: xhci: print xhci->xhc_state when queue_command failed
      tracefs: Add d_delete to remove negative dentries
      securityfs: don't pin dentries twice, once is enough...
      fix locking in efi_secret_unlink()
      ext2: Handle fiemap on empty files to prevent EINVAL
      fs/ntfs3: correctly create symlink for relative path
      fs/ntfs3: Add sanity check for file name
      better lockdep annotations for simple_recursive_removal()
      hfs: fix not erasing deleted b-tree node issue
      drbd: add missing kref_get in handle_write_conflicts
      udf: Verify partition map count
      gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
      nvme-pci: try function level reset on init failure
      smb/server: avoid deadlock when linking with ReplaceIfExists
      arm64: Handle KCOV __init vs inline mismatches
      ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
      intel_idle: Allow loading ACPI tables for any family
      net: ti: icss-iep: Fix incorrect type for return value in extts_enable()
      netfilter: ctnetlink: fix refcount leak on table dump
      udp: also consider secpath when evaluating ipsec use for checksumming
      KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs
      KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter
      KVM: VMX: Extract checking of guest's DEBUGCTL into helper
      KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported
      KVM: VMX: Handle forced exit due to preemption timer in fastpath
      KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits
      KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
      libceph: prevent potential out-of-bounds reads in handle_auth_done()
      net: usb: pegasus: fix memory leak in update_eth_regs_async()
      libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
      !20540 urma: added support for ipoverurma
      team: fix check for port enabled in team_queue_override_port_prio_changed()
      mm/page_alloc: prevent pcp corruption with SMP=n
      !20528 Fix CVE-2025-71083
      KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
      KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
      KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
      smb: client: don't wait for info->send_pending == 0 on error
      smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection()
      ACPI: processor: perflib: Move problematic pr->performance check
      ACPI: processor: perflib: Fix initial _PPC limit application
      Documentation: ACPI: Fix parent device references
      fs: Prevent file descriptor table allocations exceeding INT_MAX
      sunvdc: Balance device refcount in vdc_port_mpgroup_check
      PCI: Extend isolated function probing to LoongArch
      NFSD: detect mismatch of file handle and delegation stateid in OPEN op
      net: dpaa: fix device leak when querying time stamp info
      net: ti: icss-iep: fix device and OF node leaks at probe
      net: mtk_eth_soc: fix device leak at probe
      net: enetc: fix device and OF node leak at probe
      net: gianfar: fix device leak when querying time stamp info
      net: phy: micrel: fix KSZ8081/KSZ8091 cable test
      gpio: mlxbf3: use platform_get_irq_optional()
      gpio: mlxbf2: use platform_get_irq_optional()
      gpio: virtio: Fix config space reading.
      ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks
      ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
      ALSA: usb-audio: Validate UAC3 cluster segment descriptors
      rcu: Fix racy re-initialization of irq_work causing hangs
      rcu: Fix rcu_read_unlock() deadloop due to IRQ work
      drm/tilcdc: Fix removal actions in case of failed probe
      drm/tilcdc: request and mapp iomem with devres
      urma: fix update topo logic
      dmaengine: stm32: dmamux: fix device leak on route allocation
      pswiotlb: Adapt to the IOMMU DMA API upgraded by IOMMUFD
      null_blk: fix kmemleak by releasing references to fault configfs items
      inet: frags: flush pending skbs in fqdir_pre_exit()
      inet: frags: add inet_frag_queue_flush()
      ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
      md/dm-raid: don't clear MD_RECOVERY_FROZEN after setting frozen
      md/dm-raid: don't call md_reap_sync_thread() directly
      ACPICA: Avoid walking the Namespace if start_node is NULL
      arm64: entry: xcall/xint: make asm conditionals compatible with clang IAS
      LoongArch: BPF: Sign extend kfunc call arguments
      genirq/msi:: Fix kabi break of struct msi_desc
      genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie
      NFS: Fix a deadlock involving nfs_release_folio()
      Revert "[Huawei] Revert "NFS: fix up nfs_release_folio() to try to release the page""
      urma: added support for ipoverurma
      drm/ttm: Avoid NULL pointer deref for evicted BOs
      XSched: Update XSched manual
      svcrdma: bound check rq_pages index in inline path
      ipv6: Fix use-after-free in inet6_addr_del().
      ipv4: ip_gre: make ipgre_header() robust
      net: fix memory leak in skb_segment_list for GRO packets
      net: sock: fix hardened usercopy panic in sock_recv_errqueue
      ipv4: Fix reference count leak when using error routes with nexthop objects
      SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
      fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
      udp: Deal with race between UDP socket address change and rehash
      EDAC/amd64: The width of hash value is 2 bits for Hygon family 18h model 6h processors
      x86/tsc: Use topology_max_packages() to get package number
      EDAC/amd64: Use unicast instead of broadcast to access the cs_config register
      EDAC/amd64: Correct the address translation for hygon family 18h model 4h
      KVM: arm64: Mark some header functions as inline
      KVM: arm64: Refactor exit handlers
      x86/resctrl: Fix memory bandwidth counter width for Hygon CPUs
      hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio
      riscv: perf vendor events: fix lrw core PMU event mapping
      riscv kernel upgrade to 6.6.0-138.0.0
      Fixed system hang when boot systemd on spacemit k3
      !20588 [OLK-6.6] Revert "x86/csv: Enhance CMA memory usage reporting for CSV3"
      Revert "x86/csv: Enhance CMA memory usage reporting for CSV3"
      !20576  media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
      !20575  RDMA/cm: Fix leaking the multicast GID table reference
      !20580  RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
      !20551  Fix CVE-2025-68785
      !20478  f2fs: fix to avoid potential deadlock
      !20501 [OLK-6.6] backport important bugfix for bnxt driver from upstream linux-6.6.y
      !20520 Fix CVE-2026-23038
      !20424  net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
      !20425  mlx5: Fix default values in create CQ
      RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
      media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
      RDMA/cm: Fix leaking the multicast GID table reference
      net: openvswitch: fix middle attribute validation in push_nsh() action
      net: openvswitch: remove never-working support for setting nsh fields
      pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
      bnxt_en: Fix potential data corruption with HW GRO/LRO
      f2fs: fix to avoid potential deadlock
      mlx5: Fix default values in create CQ
      net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
      !20552 ub: udma: fix some code issues.
      !20313 Fix CVE-2025-40220
      !20321  nvme: fix admin request_queue lifetime
      !20512 PM / devfreq: hisi: Fix potential UAF in OPP handling
      !20544 Fix CVE-2025-71147
      !20548 v4  net: LTS-6.6 backport
      !20503 Fix CVE-2025-39713
      !20133 Fix CVE-2025-39721
      !20438 Fix CVE-2025-38659
      !20264 Fix CVE-2025-40277
      !20340 Fix CVE-2025-40271
      !20319 Fix CVE-2025-40237
      !20392  vfs: Don't leak disconnected dentries on umount
      !20554  iommu/s390: Implement blocking domain
      !20489 [OLK-6.6][linux-6.6.y sync] Backport 6.6.101-6.6.102 LTS Patches
      !20513 ACPI: PCC: Fix race condition by removing static qualifier
      !20468  drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
      !20483  rcu: Protect ->defer_qs_iw_pending from data race
      !20510 drivers/ub/sentry: fix primary eid index value
      !20553 ub: cdma: support separated page table feature
      ub: udma: fix some code issues.
      !20480 iommu/ummu-core: fix error invalidate tid
      !20561 iommu/ummu: Add ummu sva independent page table parameter
      ub: udma: bugfix related to 2m_hugepage.
      ub: udma: support for separate page tables
      ub: udma: delete debugfs code.
      ub: udma: bugfix related to ctrlq function.
      ub: udma: verify get cqe/ae aux info out addr and len.
      ub: cdma: support separated page table feature
      iommu/ummu: Add ummu sva independent page table parameter
      iommu: Adjust PLB refresh timing in 'grant' and 'ungrant'
      !20505 Fix CVE-2026-23035
      iommu/s390: Implement blocking domain
      drivers/ub/sentry: fix primary eid index value
      !20535  libceph: make decode_pool() more resilient against corrupted osdmaps
      !20536  mm/page_alloc: change all pageblocks migrate type on coalescing
      !20537  mm/secretmem: fix use-after-free race in fault handler
      !20538  wifi: avoid kernel-infoleak from struct iw_point
      !20539  net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
      !20440  PCI/AER: Fix NULL pointer access by aer_info
      !20262 Fix CVE-2025-68176
      netfilter: nf_reject: don't leak dst refcount for loopback packets
      net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
      page_pool: always add GFP_NOWARN for ATOMIC allocations
      virtio-net: fix received length check in big packets
      net: bridge: fix use-after-free due to MST port state bypass
      vsock: Ignore signal/timeout on connect() if already established
      tls: make sure to abort the stream if headers are bogus
      xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
      xfrm: Duplicate SPI Handling
      tls: handle data disappearing from under the TLS ULP
      net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
      bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
      Bluetooth: hci_core: Fix use-after-free in vhci_flush()
      KEYS: trusted: Fix a memory leak in tpm2_load_cmd
      !20237 Fix CVE-2025-68724
      !20459 Fix CVE-2025-71131
      !20525 Fix CVE-2025-68816
      !20529  CVE-2025-68172
      net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
      !20370 Revert "Revert "RDMA/hns: Fix mismatch exception rollback""
      wifi: avoid kernel-infoleak from struct iw_point
      mm/secretmem: fix use-after-free race in fault handler
      mm/page_alloc: change all pageblocks migrate type on coalescing
      libceph: make decode_pool() more resilient against corrupted osdmaps
      pps: Fix kabi breakage of struct pps_device for last_fetched_ev
      sched: Fix kabi breakage of struct task_struct for saved_state
      crypto: aspeed - fix double free caused by devm
      !20515  Bluetooth: bcsp: receive data only if registered
      !20507 Fix CVE-2025-40358
      !20450 ub: ubase&unic: Fix some bug in concurrent process
      !20452 iommu/ummu: Fix some bugs and optimize the code implementation
      !20451 iommu/ummu: Add the function of creating devices with SVA-separated
      !20500 mm: fix the inaccurate memory statistics issue for users
      net/mlx5: fw_tracer, Validate format string parameters
      Bluetooth: bcsp: receive data only if registered
      ACPI: PCC: Fix race condition by removing static qualifier
      ACPI: CPPC: Fix missing PCC check for guaranteed_perf
      iommu/ummu: Add the function of creating devices with SVA-separated
      iommu/ummu-core: fix error invalidate tid
      riscv: stacktrace: Disable KASAN checks for non-current tasks
      !20497  arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
      !20496  drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
      !20495  iommu/amd: Avoid stack buffer overflow from kernel cmdline
      !20494  HID: core: Harden s32ton() against conversion to 0 bits
      !20493  iommu: Fix two issues in iommu_copy_struct_from_user()
      net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv
      PM / devfreq: hisi: Fix potential UAF in OPP handling
      media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
      !20487  interference: Fix uninitialized ifs_clock compiling issue
      MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
      MIPS: mm: Prevent a TLB shutdown on initial uniquification
      mm: fix the inaccurate memory statistics issue for users
      mm: add config option for atomic mode in mm counter
      Revert "mm: fix the inaccurate memory statistics issue for users"
      !20444  net/mlx5e: Fix crash on profile change rollback failure
      !20442  net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
      arch_topology: Fix incorrect error check in topology_parse_cpu_capacity()
      drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies
      iommu/amd: Avoid stack buffer overflow from kernel cmdline
      HID: core: Harden s32ton() against conversion to 0 bits
      iommu: Fix two issues in iommu_copy_struct_from_user()
      SUNRPC: call xs_sock_process_cmsg for all cmsg
      flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
      !20374 [OLK 6.6]Use Hygon IBRS and IBPB rather than software-based mitigation to mitigate Retbleed and SRSO.
      !20227  Rename leapioraid to leapraid and release v2.0
      mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
      MIPS: mm: tlb-r4k: Uniquify TLB entries on init
      x86/fpu: Delay instruction pointer fixup until after warning
      ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
      ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
      x86/sev: Evict cache lines during SNP memory validation
      net: usbnet: Fix the wrong netif_carrier_on() call
      net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
      Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano
      sched,freezer: Remove unnecessary warning in __thaw_task
      freezer,sched: Clean saved_state when restoring it during thaw
      freezer,sched: Do not restore saved_state of a thawed task
      freezer,sched: Use saved_state to reduce some spurious wakeups
      sched/core: Remove ifdeffery for saved_state
      i2c: stm32f7: unmap DMA mapped buffer
      i2c: stm32f7: simplify status messages in case of errors
      i2c: stm32f7: perform most of irq job in threaded handler
      i2c: stm32f7: use dev_err_probe upon calls of devm_request_irq
      i2c: stm32f7: Use devm_clk_get_enabled()
      USB: serial: option: add Foxconn T99W709
      smb: server: Fix extension string in ksmbd_extract_shortname()
      ksmbd: fix corrupted mtime and ctime in smb2_open
      ksmbd: fix Preauh_HashValue race condition
      ksmbd: fix null pointer dereference error in generate_encryptionkey
      vsock: Do not allow binding to VMADDR_PORT_ANY
      selftests/perf_events: Add a mmap() correctness test
      smb: client: return an error if rdma_connect does not return within 5 seconds
      smb: client: let recv_done() cleanup before notifying the callers.
      smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
      smb: client: make use of common smbdirect_socket
      smb: smbdirect: add smbdirect_socket.h
      smb: client: Correct typos in multiple comments across various files
      smb: client: Use min() macro
      smb: server: let recv_done() avoid touching data_transfer after cleanup/move
      smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
      ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
      irqchip: Build IMX_MU_MSI only on ARM
      net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
      sunrpc: fix client side handling of tls alerts
      net/sched: taprio: enforce minimum value for picos_per_byte
      net: drop UFO packets in udp_rcv_segment()
      ipv6: reject malicious packets in ipv6_gso_segment()
      net/mlx5: Correctly set gso_segs when LRO is used
      netlink: specs: ethtool: fix module EEPROM input/output arguments
      net: ipa: add IPA v5.1 and v5.5 to ipa_version_string()
      phy: mscc: Fix parsing of unicast frames
      netpoll: prevent hanging NAPI when netcons gets enabled
      md/md-cluster: handle REMOVE message earlier
      NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
      NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate()
      sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up()
      pNFS/flexfiles: don't attempt pnfs on fatal DS errors
      PCI: pnv_php: Fix surprise plug detection and recovery
      powerpc/eeh: Export eeh_unfreeze_pe()
      PCI: pnv_php: Work around switches with broken presence detection
      kconfig: qconf: fix ConfigList::updateListAllforAll()
      scsi: sd: Make sd shutdown issue START STOP UNIT appropriately
      scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
      scsi: Revert "scsi: iscsi: Fix HW conn removal use after free"
      scsi: mpt3sas: Fix a fw_event memory leak
      vfio/pci: Separate SR-IOV VF dev_set
      vfio/pds: Fix missing detach_ioas op
      vfio: Prevent open_count decrement to negative
      vfio: Fix unbalanced vfio_df_close call in no-iommu mode
      f2fs: fix to calculate dirty data during has_not_enough_free_secs()
      f2fs: fix to update upper_p in __get_secs_required() correctly
      f2fs: vm_unmap_ram() may be called from an invalid context
      f2fs: fix to avoid out-of-boundary access in devs.path
      f2fs: doc: fix wrong quota mount option description
      f2fs: fix KMSAN uninit-value in extent_info usage
      rtc: rv3028: fix incorrect maximum clock rate handling
      rtc: pcf8563: fix incorrect maximum clock rate handling
      rtc: pcf85063: fix incorrect maximum clock rate handling
      rtc: nct3018y: fix incorrect maximum clock rate handling
      rtc: hym8563: fix incorrect maximum clock rate handling
      rtc: ds1307: fix incorrect maximum clock rate handling
      ucount: fix atomic_long_inc_below() argument type
      module: Restore the moduleparam prefix length check
      apparmor: fix loop detection used in conflicting attachment resolution
      apparmor: ensure WB_HISTORY_SIZE value is a power of 2
      bpf: Check netfilter ctx accesses are aligned
      bpf: Check flow_dissector ctx accesses are aligned
      vhost-scsi: Fix log flooding with target does not exist errors
      mtd: rawnand: atmel: set pmecc data setup time
      mtd: rawnand: rockchip: Add missing check after DMA map
      mtd: rawnand: atmel: Fix dma_mapping_error() address
      jfs: fix metapage reference count leak in dbAllocCtl
      crypto: qat - fix seq_file position update in adf_ring_next()
      crypto: qat - fix DMA direction for compression on GEN2 devices
      perf tools: Remove libtraceevent in .gitignore
      sh: Do not use hyphen in exported variable name
      ASoC: fsl_xcvr: get channel status data when PHY is not exists
      dmaengine: nbpfaxi: Add missing check after DMA map
      dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
      fs/orangefs: Allow 2 more characters in do_c_string()
      PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute
      soundwire: stream: restore params when prepare ports fail
      crypto: img-hash - Fix dma_unmap_sg() nents value
      crypto: keembay - Fix dma_unmap_sg() nents value
      hwrng: mtk - handle devm_pm_runtime_enable errors
      watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
      scsi: isci: Fix dma_unmap_sg() nents value
      scsi: mvsas: Fix dma_unmap_sg() nents value
      scsi: elx: efct: Fix dma_unmap_sg() nents value
      scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
      clk: sunxi-ng: v3s: Fix de clock definition
      perf tests bp_account: Fix leaked file descriptor
      kernel: trace: preemptirq_delay_test: use offstack cpu mask
      crypto: inside-secure - Fix `dma_unmap_sg()` nents value
      perf sched: Fix memory leaks in 'perf sched latency'
      perf sched: Fix memory leaks for evsel->priv in timehist
      perf sched: Free thread->priv using priv_destructor
      perf dso: Add missed dso__put to dso__load_kcore
      perf tools: Fix use-after-free in help_unknown_cmd()
      Fix dma_unmap_sg() nents value
      clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
      fanotify: sanitize handle_type values when reporting fid
      pinctrl: sunxi: Fix memory leak on krealloc failure
      PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails
      crypto: arm/aes-neonbs - work around gcc-15 warning
      power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
      power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
      clk: xilinx: vcu: unregister pll_post only if registered correctly
      media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
      mtd: fix possible integer overflow in erase_xfer()
      crypto: marvell/cesa - Fix engine load inaccuracy
      crypto: qat - use unmanaged allocation for dc_data
      crypto: sun8i-ce - fix nents passed to dma_unmap_sg()
      PCI: rockchip-host: Fix "Unexpected Completion" log message
      bpf/preload: Don't select USERMODE_DRIVER
      ipv6: annotate data-races around rt->fib6_nsiblings
      ipv6: fix possible infinite loop in fib6_info_uses_dev()
      vrf: Drop existing dst reference in vrf_ip6_input_dst
      selftests: rtnetlink.sh: remove esp4_offload after test
      net/mlx5e: Clear Read-Only port buffer size in PBMC before update
      netfilter: xt_nfacct: don't assume acct name is null-terminated
      can: kvaser_usb: Assign netdev.dev_port based on device channel index
      can: kvaser_pciefd: Store device channel index
      can: peak_usb: fix USB FD devices potential malfunction
      tools/rv: Do not skip idle in trace
      Bluetooth: hci_event: Mask data status from LE ext adv reports
      kcsan: test: Initialize dummy variable
      wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon()
      wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
      wifi: ath12k: fix endianness handling while accessing wmi service bit
      wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
      wifi: mac80211: Don't call fq_flow_idx() for management frames
      wifi: mac80211: Do not schedule stopped TXQs
      wifi: plfxlc: Fix error handling in usb driver probe
      wifi: mac80211: reject TDLS operations when station is not associated
      iommu/amd: Fix geometry.aperture_end for V2 tables
      mwl8k: Add missing check after DMA map
      wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
      tcp: call tcp_measure_rcv_mss() for ooo packets
      xen/gntdev: remove struct gntdev_copy_batch from stack
      net_sched: act_ctinfo: use atomic64_t for three counters
      net/sched: Restrict conditions for adding duplicating netems to qdisc tree
      um: rtc: Avoid shadowing err in uml_rtc_start()
      arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
      netfilter: nf_tables: adjust lockdep assertions handling
      netfilter: nf_tables: Drop dead code from fill_*_info routines
      fbcon: Fix outdated registered_fb reference in comment
      drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
      m68k: Don't unregister boot console needlessly
      drm/msm/dpu: Fill in min_prefill_lines for SC8180X
      kselftest/arm64: Fix check for setting new VLs in sve-ptrace
      net: dst: annotate data-races around dst->input
      tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
      wifi: ath11k: clear initialized flag for deinit-ed srng lists
      iwlwifi: Add missing check for alloc_ordered_workqueue
      wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
      wifi: rtl818x: Kill URBs before clearing tx status queue
      wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band
      caif: reduce stack size, again
      bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
      drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel
      net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain
      selftests/bpf: fix signedness bug in redir_partial()
      bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
      bpf, sockmap: Fix psock incorrectly pointing to sk
      drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
      staging: nvec: Fix incorrect null termination of battery manufacturer
      interconnect: qcom: sc8180x: specify num_nodes
      interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg
      soc: qcom: pmic_glink: fix OF node leak
      samples: mei: Fix building on musl libc
      cpufreq: Initialize cpufreq-based frequency-invariance later
      cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
      arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
      arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
      ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
      soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS
      arm: dts: ti: omap: Fixup pinheader typo
      usb: early: xhci-dbc: Fix early_ioremap leak
      powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
      pps: fix poll support
      staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
      spi: stm32: Check for cfg availability in stm32_spi_probe
      usb: misc: apple-mfi-fastcharge: Make power supply names unique
      usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe()
      ARM: dts: vfxxx: Correctly use two tuples for timer address
      arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely
      arm64: dts: qcom: sc7180: Expand IMEM region
      arm64: dts: qcom: sdm845: Expand IMEM region
      soc: qcom: QMI encoding/decoding for big endian
      selftests: Fix errno checking in syscall_user_dispatch test
      ASoC: mediatek: use reserved memory or enable buffer pre-allocation
      gfs2: No more self recovery
      Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
      hfs: make splice write available again
      hfsplus: make splice write available again
      ublk: use vmalloc for ublk_device's __queues
      fs_context: fix parameter name in infofc() macro
      audit,module: restore audit logging in load failure case
      ASoC: amd: yc: add DMI quirk for ASUS M6501RM
      ASoC: Intel: fix SND_SOC_SOF dependencies
      ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx
      ethernet: intel: fix building with large NR_CPUS
      ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx
      interference: Fix uninitialized ifs_clock compiling issue
      iommu/ummu: optimize log printing
      !20455 Fix compilation failure caused by PR#20174
      !20302  CVE-2026-22980
      !20142  CVE-2025-68803
      !20261  ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
      !20435  fix CVE-2026-22998
      !20433  scsi: target: Reset t_task_cdb pointer in error case
      !20432  scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
      !20431  block: Use RCU in blk_mq_[un
      !20307  tpm: Cap the number of PCR banks
      !20062  xfs: Add xfs_dir3_leaf_header_check() in leaf/leafn read
      !20157 v2  md: backport from mainline
      rcu: Protect ->defer_qs_iw_pending from data race
      platform/x86/intel/pmt: fix compilation failure caused by PR#20174
      iommu/ummu: optimize kv cache memory management
      iommu/ummu: optimize permission table management
      iommu/ummu: remove check for eid_type while del eid
      iommu/ummu: optimize the code implementation
      drivers/perf: fix ummu-pmu data reading exception
      iommu/ummu: IOMMU_DOMAIN_BLOCKED type don not sync tct
      drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
      crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
      net: unic: Notify mami of the bond ip change.
      ub: ubase: Support for UE link by ctrlq message
      ub: ubase: send a deactivate req in removing
      ub: ubase: Querying TPG/TP contexts in the chip is no longer supported after enabling safe mode.
      ub: ubase: Use an independent thread for the ctrlq workqueue.
      !20368 ubcore: fix logging and permission for route query.
      crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
      !20344  ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
      net: unic: Fix the ummu 0xa event that occurs when modifying queues and resetting concurrent scenarios
      ub: ubase: Add KABI compatibility
      ub: ubase: fixing the issue of cdma ctp_req_vl parameter configuration
      ub: ubase: add PMU IDEV interrupt supported abilities.
      ub: ubase: Delete the tid mask for eq, jfs, jfr, and jfc context
      ub: ubase: Set the completion event interrupt to auto
      net: unic: fix poll tx read old skb cause a UAF bug
      !20249 Fix CVE-2025-38489
      !20250 Fix CVE-2025-38480
      !20378 Fix CVE-2025-39838
      !20430  Fix CVE-2025-39942
      !20351 Fix CVE-2025-71149
      !20375 Fix CVE-2025-71150
      !20323 Fix CVE-2025-38730
      !20320 Fix CVE-2025-68814
      !20314 Fix CVE-2025-71072
      !20315 Fix CVE-2025-68794
      !20403  bpf: Check skb->transport_header is set in bpf_skb_check_mtu
      !20402  bpf: Do not let BPF test infra emit invalid GSO types to stack
      !20401  tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()
      !20400  netfilter: nft_ct: add seqadj extension for natted connections
      !20399  net: xfrm: Fix CVE-2025-40215
      !20398  net/sched: sch_qfq: Fix null-deref in agg_dequeue
      !20397  bpf: Reject narrower access to pointer ctx fields
      !20396  Bluetooth: eir: Fix possible crashes on eir_create_adv_data
      !20394  IB/mlx5: Fix potential deadlock in MR deregistration
      !20367 ub: cdma: cdma uaf bugfix
      net/mlx5e: Fix crash on profile change rollback failure
      net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
      PCI/AER: Fix NULL pointer access by aer_info
      gfs2: No more self recovery
      drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
      crypto: qat - flush misc workqueue during device shutdown
      !20174 Backport PMT spec 3.0 support
      !20366 [Hygon][6.6][Bugfix]: Resolve FPU state corruption between atomic and non-atomic contexts
      !19814 [OLK-6.6] Batch flushing user memory encrytion status change
      !20393 [OLK-6.6][linux-6.6.y sync] Backport 6.6.100-6.6.101 LTS Patches
      nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
      nvmet-tcp: remove boilerplate code
      scsi: target: Reset t_task_cdb pointer in error case
      scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
      block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
      ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
      ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
      smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection
      smb: server: remove separate empty_recvmsg_queue
      !20384 ub:ubus: Fix ubus link message and pool device error
      !20389  gfs2: Prevent recursive memory reclaim
      !20388  *** fix CVE-2025-38062 ***
      !20387  KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
      !20386  pinctrl: check the return value of pinmux_ops::get_function_name()
      !20385  iommu/amd/pgtbl: Fix possible race while increase page table level
      ub:ubus: Not cfg access during surprise down
      ub:hisi-ubus: Delete validate_pa err print
      PCI: cadence: Check for the existence of cdns_pcie::ops before using it
      can: netlink: can_changelink(): allow disabling of automatic restart
      Revert "selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test"
      drm/sched: Remove optimization that causes hang when killing dependent jobs
      ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
      bpf: Check skb->transport_header is set in bpf_skb_check_mtu
      bpf: Do not let BPF test infra emit invalid GSO types to stack
      tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()
      netfilter: nft_ct: add seqadj extension for natted connections
      xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
      xfrm: delete x->tunnel as we delete x
      x86/hw-vuln:Support hardware-based mitigation for Retbleed and SRSO via Hygon IBRS to avoid performance degradation caused by software-based mitigation.
      net/sched: sch_qfq: Fix null-deref in agg_dequeue
      bpf: Reject narrower access to pointer ctx fields
      Bluetooth: eir: Fix possible crashes on eir_create_adv_data
      IB/mlx5: Fix potential deadlock in MR deregistration
      ub:ubus: Fix ubus link message and pool device error
      ub:hisi-ubus: cq poller maximum handle 64 cqe per time
      ub:hisi-ubus:Fix vdm message print error
      ub:ubus:Fix ubus interrupt release issue
      wifi: mt76: mt7921: prevent decap offload config before STA initialization
      mtd: rawnand: qcom: Fix last codeword read in qcom_param_page_type_exec()
      iio: hid-sensor-prox: Restore lost scale assignments
      iio: hid-sensor-prox: Fix incorrect OFFSET calculation
      crypto: powerpc/poly1305 - add depends on BROKEN for now
      erofs: address D-cache aliasing
      drm/i915/dp: Fix 2.7 Gbps DP_LINK_BW value on g4x
      ALSA: hda: Add missing NVIDIA HDA codec IDs
      ALSA: hda/tegra: Add Tegra264 support
      comedi: comedi_test: Fix possible deletion of uninitialized timers
      usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach
      usb: typec: tcpm: allow switching to mode accessory to mux properly
      usb: typec: tcpm: allow to use sink in accessory mode
      drm/amdkfd: Don't call mmput from MMU notifier callback
      mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
      selftests: mptcp: connect: also cover checksum
      selftests: mptcp: connect: also cover alt modes
      resource: fix false warning in __request_region()
      gve: Fix stuck TX queue for DQ queue format
      e1000e: ignore uninitialized checksum word on tgp
      e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
      dpaa2-switch: Fix device reference count leak in MAC endpoint handling
      dpaa2-eth: Fix device reference count leak in MAC endpoint handling
      ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
      sprintf.h requires stdarg.h
      bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint()
      i2c: virtio: Avoid hang by using interruptible completion wait
      i2c: tegra: Fix reset error handling with ACPI
      platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots
      can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode
      can: dev: can_restart(): move debug message and stats after successful restart
      can: dev: can_restart(): reverse logic to remove need for goto
      i40e: When removing VF MAC filters, only check PF-set MAC
      i40e: report VF tx_dropped with tx_errors instead of tx_discards
      i40e: Add rx_missed_errors for buffer exhaustion
      net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch
      net/mlx5: Fix memory leak in cmd_exec()
      staging: vchiq_arm: Make vchiq_shutdown never fail
      x86/hyperv: Fix usage of cpu_online_mask to get valid cpu
      regmap: fix potential memory leak of regmap_bus
      iio: adc: ad7949: use spi_is_bpw_supported()
      interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node
      RDMA/core: Rate limit GID cache warning messages
      virtio_ring: Fix error reporting in virtqueue_resize
      !20348 [OLK-6.6][linux-6.6.y sync] Backport 6.6.99-6.6.100 LTS Patches
      !20346  tracing: Fix crash on synthetic stacktrace field usage
      vfs: Don't leak disconnected dentries on umount
      !20334 Fix CVE-2025-68780
      gfs2: Prevent recursive memory reclaim
      amd/amdkfd: enhance kfd process check in switch partition
      drm/amdkfd: allow compute partition mode switch with cgroup exclusions
      KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
      pinctrl: check the return value of pinmux_ops::get_function_name()
      iommu/amd/pgtbl: Fix possible race while increase page table level
      !19966  nvme-fc: use lock accessing port_state and rport state
      ASoC: fsl_sai: replace regmap_write with regmap_update_bits
      comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
      cifs: prevent NULL pointer dereference in UTF16 conversion
      ksmbd: Fix refcount leak when invalid session is found on session lookup
      ubcore: fix logging and permission for route query.
      !20232 driver/coda: VirtCCA supports MSI device DA
      Revert "Revert "RDMA/hns: Fix mismatch exception rollback""
      !20197 ub: udma&ubase: fix a bug that caused long reboot time
      x86: Resolve FPU state corruption between atomic and non-atomic contexts
      ub: cdma: cdma uaf bugfix
      ub: cdma: jfs call trace bugfix
      !20353  x86/fpu: Clear XSTATE_BV[i
      s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
      KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls
      nvmem: layouts: u-boot-env: remove crc32 endianness conversion
      i2c: omap: fix deprecated of_property_read_bool() use
      ASoC: fsl_sai: Force a software reset when starting in consumer mode
      regulator: pwm-regulator: Manage boot-on with disabled PWM channels
      regulator: pwm-regulator: Calculate the output voltage for disabled PWMs
      i2c: omap: Handle omap_i2c_init() errors in omap_i2c_probe()
      i2c: omap: Fix an error handling path in omap_i2c_probe()
      i2c: omap: Add support for setting mux
      usb: dwc3: qcom: Don't leave BCR asserted
      usb: hub: Don't try to recover devices lost during warm reset.
      usb: hub: Fix flushing of delayed work used for post resume purposes
      usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
      usb: hub: fix detection of high tier USB3 devices behind suspended hubs
      arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
      ipv6: make addrconf_wq single threaded
      !20354 cpufreq/sched: Explicitly synchronize limits_changed flag handling
      sched/deadline: only set free_cpus for online runqueues
      x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
      cpufreq/sched: Explicitly synchronize limits_changed flag handling
      io_uring/poll: correctly handle io_poll_add() return value on update
      shmem: fix recovery on rename failures
      io_uring: fix filename leak in __io_openat_prep()
      Revert "cgroup_freezer: cgroup_freezing: Check if not frozen"
      rxrpc: Fix transmission of an abort in response to an abort
      rxrpc: Fix recv-recv race of completed call
      net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
      net: bridge: Do not offload IGMP/MLD messages
      hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf
      netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
      ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
      net/mlx5: Correctly set gso_size when LRO is used
      Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID
      Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
      Bluetooth: SMP: If an unallowed command is received consider it a failure
      Bluetooth: hci_sync: fix connectable extended advertising when using static random address
      hwmon: (corsair-cpro) Validate the size of the received input buffer
      selftests: net: increase inter-packet timeout in udpgro.sh
      wifi: cfg80211: remove scan request n_channels counted_by
      nvme: fix misaccounting of nvme-mpath inflight I/O
      net: phy: Don't register LEDs for genphy
      nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list()
      rpl: Fix use-after-free in rpl_do_srh_inline().
      block: fix kobject leak in blk_unregister_queue
      net: emaclite: Fix missing pointer increment in aligned_read()
      soundwire: amd: fix for clearing command status register
      soundwire: amd: fix for handling slave alerts after link is down
      comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
      comedi: Fix some signed shift left operations
      comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
      comedi: das6402: Fix bit shift out of bounds
      comedi: das16m1: Fix bit shift out of bounds
      comedi: aio_iiro_16: Fix bit shift out of bounds
      comedi: pcl812: Fix bit shift out of bounds
      iio: adc: stm32-adc: Fix race in installing chained IRQ handler
      iio: adc: max1363: Reorder mode_list[] entries
      iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
      iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
      soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
      soc: aspeed: lpc-snoop: Cleanup resources in stack-order
      s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
      pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
      net: libwx: properly reset Rx ring descriptor
      net: libwx: remove duplicate page_pool_put_full_page()
      mmc: sdhci_am654: Workaround for Errata i2312
      mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
      mmc: bcm2835: Fix dma_unmap_sg() nents value
      memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
      isofs: Verify inode mode when loading from disk
      dmaengine: nbpfaxi: Fix memory corruption in probe()
      af_packet: fix soft lockup issue caused by tpacket_snd()
      af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
      arm64: dts: rockchip: use cs-gpios for spi1 on ringneck
      arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on
      arm64: dts: imx8mp-venice-gw74xx: fix TPM SPI frequency
      net/mlx5: Update the list of the PCI supported devices
      phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
      io_uring/poll: fix POLLERR handling
      ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS
      drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
      tracing/osnoise: Fix crash in timerlat_dump_stack()
      spi: Add check for 8-bit transfer with 8 IO mode support
      pch_uart: Fix dma_sync_sg_for_device() nents value
      thunderbolt: Fix bit masking in tb_dp_port_set_hops()
      i2c: stm32: fix the device used for the DMA map
      tracing: Fix crash on synthetic stacktrace field usage
      usb: musb: fix gadget state on disconnect
      USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
      USB: serial: option: add Foxconn T99W640
      USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
      phy: tegra: xusb: Disable periodic tracking on Tegra234
      phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode
      phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
      ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
      fs/proc: fix uaf in proc_readdir_de()
      io_uring/net: commit partial buffers on retry
      nvme: fix admin request_queue lifetime
      fs/notify: call exportfs_encode_fid with s_umount
      iomap: adjust read range correctly for non-block-aligned positions
      fuse: fix livelock in synchronous file put from fuseblk workers
      tpm: Cap the number of PCR banks
      nfsd: provide locking for v4_end_grace
      Revert "nfsd: provide locking for v4_end_grace"
      config: enable config for PMT discovery driver
      platform/x86/intel/pmt/discovery: use valid device pointer in dev_err_probe
      platform/x86/intel/pmt: Fix kobject memory leak on init failure
      platform/x86/intel/pmt: fix a crashlog NULL pointer access
      platform/x86/intel/pmt: fix build dependency for kunit test
      platform/x86/intel/pmt/discovery: fix format string warning
      platform/x86/intel/pmt/discovery: Fix size_t specifiers for 32-bit
      platform/x86/intel/pmt: KUNIT test for PMT Enhanced Discovery API
      platform/x86/intel/pmt/telemetry: Add API to retrieve telemetry regions by feature
      platform/x86/intel/pmt/discovery: Get telemetry attributes
      platform/x86/intel/tpmi: Get OOBMSM CPU mapping from TPMI
      platform/x86/intel/vsec: Set OOBMSM to CPU mapping
      platform/x86/intel/tpmi: Relocate platform info to intel_vsec.h
      docs: Add ABI documentation for intel_pmt feature directories
      platform/x86/intel/pmt: Add PMT Discovery driver
      sysfs: Fix crash on empty group attributes array
      sysfs: Introduce a mechanism to hide static attribute_groups
      platform/x86/intel/vsec: Add new Discovery feature
      platform/x86/intel/vsec: Skip driverless features
      platform/x86/intel/vsec: Skip absent features during initialization
      platform/x86/intel/vsec: Add device links to enforce dependencies
      platform/x86/intel/vsec: Create wrapper to walk PCI config space
      platform/x86/intel/vsec: Add private data for per-device data
      MAINTAINERS: Add link to documentation of Intel PMT ABI
      platform/x86/intel/pmt: allow user offset for PMT callbacks
      driver/coda: VirtCCA supports MSI device DA
      ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
      Rename leapioraid to leapraid and release v2.0
      ub: udma: fix a bug that caused long reboot time.
      ub: ubase: Accelerate when ctrl node is shutting down
      platform/x86/intel/pmt: Use PMT callbacks
      platform/x86/intel/vsec: Add PMT read callbacks
      platform/x86/intel/vsec.h: Move to include/linux
      md: prevent incorrect update of resync/recovery offset
      md/raid1: Fix data corruption for degraded array with slow disk
      md/raid1: set max_sectors during early return from choose_slow_rdev()
      md-cluster: fix no recovery job when adding/re-adding a disk
      md-cluster: fix hanging issue while a new disk adding
      md/raid5: recheck if reshape has finished with device_lock held
      md-cluster: Constify struct md_cluster_operations
      md: Remove unneeded semicolon
      md/raid5: fix spares errors about rcu usage
      dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume
      md: pass in max_sectors for pers->sync_request()
      md: factor out helpers for different sync_action in md_do_sync()
      md: replace last_sync_action with new enum type
      md: use new helpers in md_do_sync()
      md: don't fail action_store() if sync_thread is not registered
      md: remove parameter check_seq for stop_sync_thread()
      md: replace sysfs api sync_action with new helpers
      md: factor out helper to start reshape from action_store()
      md: add new helpers for sync_action
      md: add a new enum type sync_action
      md: rearrange recovery_flags
      md/raid0: don't free conf on raid0_run failure
      md: make md_flush_request() more readable
      md: change the return value type of md_write_start to void
      md: Revert "md: Fix overflow in is_mddev_idle"
      md: don't account sync_io if iostats of the disk is disabled
      md: Fix overflow in is_mddev_idle
      md: add check for sleepers in md_wakeup_thread()
      md: add a mddev_is_dm helper
      md: add a mddev_add_trace_msg helper
      md: add a mddev_trace_remap helper
      dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape
      dm-raid: add a new helper prepare_suspend() in md_personality
      dm-raid: really frozen sync_thread during suspend
      md: add a new helper reshape_interrupted()
      md: export helper md_is_rdwr()
      md: export helpers to stop sync_thread
      md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume
      md/raid1: factor out helpers to choose the best rdev from read_balance()
      md/raid1: factor out the code to manage sequential IO
      md/raid1: factor out choose_bb_rdev() from read_balance()
      md/raid1: factor out choose_slow_rdev() from read_balance()
      md/raid1: factor out read_first_rdev() from read_balance()
      md/raid1-10: factor out a new helper raid1_should_read_first()
      md/raid1-10: add a helper raid1_check_read_range()
      md/raid1: fix choose next idle in read_balance()
      md/raid1: record nonrot rdevs while adding/removing rdevs to conf
      md/raid1: factor out helpers to add rdev to conf
      md: add a new helper rdev_has_badblock()
      md: check mddev->pers before calling md_set_readonly()
      md: clean up openers check in do_md_stop() and md_set_readonly()
      md: sync blockdev before stopping raid or setting readonly
      md: factor out a helper to sync mddev
      md: return directly before setting did_set_md_closing
      md: changed the switch of RAID_VERSION to if
      md: merge the check of capabilities into md_ioctl_valid()
      md: Don't suspend the array for interrupted reshape
      md: Don't register sync_thread for reshape directly
      md: Make sure md_do_sync() will set MD_RECOVERY_DONE
      md: Don't ignore read-only array in md_check_recovery()
      md: Don't ignore suspended array in md_check_recovery()
      md: get rdev->mddev with READ_ONCE()
      md: remove redundant md_wakeup_thread()
      md: remove redundant check of 'mddev->sync_thread'
      md: fix a suspicious RCU usage warning
      raid: Remove now superfluous sentinel element from ctl_table array
      NFSD: NFSv4 file creation neglects setting ACL
      nfsd: set security label during create operations
      xfs: Add xfs_dir3_leaf_header_check() in leaf/leafn read
      nvme-fc: use lock accessing port_state and rport state
      x86/mm: Batch flushing user memory encrytion status change
      riscv kernel upgrade to 6.6.0-136.0.0
      Fixed kernel patch conflicts.
      riscv: fix dtbs install
      !20020  ext4: fix e4b bitmap inconsistency reports
      !20308  ext4: fix stale data issue on the iomap path
      !20347  Fix exception when umount with release dev fd
      mfs: Do not release the async event immediately when read failed
      mfs: Fix wild-memory-access error when mfs event is destroy.
      !20336  memcg: avoid the warning in mem_cgroup_migrate
      !20326  KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
      !20059  net/mdiobus: Fix potential out-of-bounds read/write access
      !20057  net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
      !20056  net: phy: clear phydev->devlink when the link is deleted
      !20055  netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
      !20130  ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
      !20327  s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump
      !20324  drm/mediatek: Disable AFBC support on Mediatek DRM driver
      !20276  ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
      !20325  atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
      !20330 [OLK-6.6][linux-6.6.y sync] Backport 6.6.98-6.6.99 LTS Patches
      Input: atkbd - skip deactivate for HONOR FMB-P's internal keyboard
      kasan: use vmalloc_dump_obj() for vmalloc error reports
      HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
      btrfs: don't ignore inode missing when replaying log tree
      btrfs: fix log tree replay failure due to file with 0 links and extents
      btrfs: do not assert we found block group item when creating free space tree
      vsock: fix lock inversion in vsock_assign_transport()
      ksmbd: fix potential use-after-free in oplock/lease break ack
      kasan: remove kasan_find_vm_area() to prevent possible deadlock
      smb: client: fix potential race in cifs_put_tcon()
      selftests/bpf: adapt one more case in test_lru_map to the new target_free
      Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
      HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
      bpf: Adjust free target to avoid global starvation of LRU map
      vt: add missing notification when switching back to text mode
      btrfs: fix assertion when building free space tree
      net: mana: Record doorbell physical address in PF mode
      HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
      net: usb: qmi_wwan: add SIMCom 8230C composition
      ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
      ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
      io_uring: make fallocate be hashed work
      um: vector: Reduce stack usage in vector_eth_configure()
      atm: idt77252: Add missing `dma_map_error()`
      ublk: sanity check add_dev input for underflow
      net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
      can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
      net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
      ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
      net: appletalk: Fix device refcount leak in atrtr_create()
      drm/tegra: nvdec: Fix dma_alloc_coherent error check
      wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
      cifs: all initializations for tcon should happen in tcon_info_alloc
      smb: client: fix DFS interlink failover
      smb: client: avoid unnecessary reconnects when refreshing referrals
      usb: dwc3: Abort suspend on soft disconnect failure
      usb: cdnsp: Fix issue with CV Bad Descriptor test
      usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
      usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
      btrfs: fix inode lookup error handling during log replay
      btrfs: return a btrfs_inode from btrfs_iget_logging()
      btrfs: remove redundant root argument from fixup_inode_link_count()
      btrfs: remove redundant root argument from btrfs_update_inode_fallback()
      btrfs: remove noinline from btrfs_update_inode()
      erofs: fix to add missing tracepoint in erofs_read_folio()
      ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
      smb: server: make use of rdma_destroy_qp()
      x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
      mm/vmalloc: leave lazy MMU mode on PTE mapping error
      scripts/gdb: fix interrupts.py after maple tree conversion
      scripts/gdb: de-reference per-CPU MCE interrupts
      scripts/gdb: fix interrupts display after MCP on x86
      mm: fix the inaccurate memory statistics issue for users
      maple_tree: fix mt_destroy_walk() on root leaf node
      Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
      drm/gem: Fix race in drm_gem_handle_create_tail()
      drm/ttm: fix error handling in ttm_buffer_object_transfer
      memcg: avoid the warning in mem_cgroup_migrate
      !17578 perf mem/c2c: Add load store event mapping for Hygon
      !19670 [OLK-6.6] Fix CVE-2025-39833
      !19669 [OLK-6.6] Fix CVE-2025-39743
      !19668 [OLK-6.6] Fix CVE-2025-38681
      !18606 [0LK-6.6] Fix CVE-2025-38699
      !20332 Fix CVE-2025-68371
      !19666 [OLK-6.6] Fix CVE-2025-38650
      !19665 [OLK-6.6] Fix CVE-2025-38578
      !19649 [olk 6.6] 主线补丁同步，hugememory&khugepaged
      !20317 Fix CVE-2025-71108
      scsi: smartpqi: Fix device resources accessed after device removal
      !20037 [Intel-SIG] DMR new CPU model support
      wifi: prevent A-MSDU attacks in mesh networks
      KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
      KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
      x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
      x86/mce: Don't remove sysfs if thresholding sysfs init fails
      x86/mce/amd: Fix threshold limit reset
      x86/mce/amd: Add default names for MCA banks and blocks
      rxrpc: Fix oops due to non-existence of prealloc backlog struct
      Bluetooth: HCI: Set extended advertising data synchronously
      perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation
      maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
      rxrpc: Fix bug due to prealloc collision
      atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
      atm: clip: Fix infinite recursive call of clip_push().
      atm: clip: Fix memory leak of struct clip_vcc.
      atm: clip: Fix potential null-ptr-deref in to_atmarpd().
      net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
      net: phy: smsc: Force predictable MDI-X state on LAN87xx
      net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
      net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
      vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
      !19995  net: netpoll: fix incorrect refcount handling causing incorrect cleanup
      vsock: Fix transport_* TOCTOU
      !19994  ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
      vsock: Fix transport_{g2h,h2g} TOCTOU
      !19993  net: ipv6: fix field-spanning memcpy warning in AH output
      vsock: fix `vsock_proto` declaration
      !19988  udp_tunnel: use netdev_warn() instead of netdev_WARN()
      fix proc_sys_compare() handling of in-lookup dentries
      pinctrl: amd: Clear GPIO debounce for suspend
      Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
      Bluetooth: hci_sync: Fix not disabling advertising instance
      ASoC: cs35l56: probe() should fail if the device ID is not recognized
      ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
      !19146 Backport uncore freq driver fixes and support for agent_types and die_id sysfs attributes
      !20036 Backport CWF cstate PMU for 6.6
      !20304 [OLK-6.6][linux-6.6.y sync] Backport 6.6.96-6.6.98 LTS Patches
      s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump
      !20303 ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
      KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
      atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
      drm/mediatek: Disable AFBC support on Mediatek DRM driver
      !20295  CVE-2025-68296
      usb: typec: ucsi: Handle incorrect num_connectors capability
      Input: xpad - set correct controller type for Acer NGR200
      f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page()
      smb: client: remove redundant lstrp update in negotiate protocol
      igc: fix disabling L1.2 PCI-E link substate on I226 on init
      platform/x86: Fix initialization order for firmware_attributes_class
      RDMA/mlx5: Fix vport loopback forcing for MPV device
      ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
      ext4: fix stale data issue on the iomap path
      !20046  drm/sysfb: Do not dereference NULL pointer in plane reset
      !20045  binfmt_misc: restore write access before closing files opened by open_exec()
      f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault
      powerpc/kernel: Fix ppc_save_regs inclusion in build
      platform/x86: think-lmi: Fix sysfs group cleanup
      platform/x86: think-lmi: Fix kobject cleanup
      platform/x86: think-lmi: Create ksets consecutively
      powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
      iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU
      Logitech C-270 even more broken
      dma-buf: fix timeout handling in dma_resv_wait_timeout v2
      smb: client: fix readdir returning wrong type with POSIX extensions
      usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
      usb: cdnsp: do not disable slot for disabled slot
      Input: iqs7222 - explicitly define number of external channels
      Input: xpad - support Acer NGR 200 Controller
      xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
      xhci: dbc: Flush queued requests before stopping dbc
      xhci: dbctty: disable ECHO flag by default
      usb: xhci: quirk for data loss in ISOC transfers
      NFSv4/flexfiles: Fix handling of NFS level errors in I/O
      module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper
      platform/x86: hp-bioscfg: Fix class device unregistration
      platform/x86: hp-bioscfg: Directly use firmware_attributes_class
      rcu: Return early if callback is not specified
      wifi: mac80211: drop invalid source address OCB frames
      aoe: defer rexmit timer downdev work to workqueue
      regulator: fan53555: add enable_time support and soft-start times
      ASoC: amd: yc: update quirk data for HP Victus
      powerpc: Fix struct termio related ioctl macros
      platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list
      ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic
      ata: pata_cs5536: fix build on 32-bit UML
      ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled
      ALSA: sb: Force to disable DMAs once when DMA mode is changed
      ALSA: sb: Don't allow changing the DMA mode during operations
      drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read
      drm/simpledrm: Do not upcast in release helpers
      scsi: ufs: core: Fix clk scaling to be conditional in reset and restore
      scsi: ufs: core: Add OPP support for scaling clocks and regulators
      scsi: ufs: core: Fix abnormal scale up after last cmd finish
      f2fs: fix to zero post-eof page
      f2fs: convert f2fs_vm_page_mkwrite() to use folio
      f2fs: prevent writing without fallocate() for pinned files
      f2fs: add tracepoint for f2fs_vm_page_mkwrite()
      x86/traps: Initialize DR6 by writing its architectural reset value
      wifi: mac80211: finish link init before RCU publish
      wifi: mac80211: Add link iteration macro for link data
      wifi: mac80211: chan: chandef is non-NULL for reserved
      smb: client: remove 	 from TP_printk statements
      btrfs: fix qgroup reservation leak on failure to allocate ordered extent
      smb: client: fix race condition in negotiate timeout by using more precise timing
      amd-xgbe: do not double read link status
      nui: Fix dma_mapping_error() check
      enic: fix incorrect MTU comparison in enic_change_mtu()
      amd-xgbe: align CL37 AN sequence as per databook
      lib: test_objagg: Set error message in check_expect_hints_stats()
      igc: disable L1.2 PCI-E link substate to avoid performance issue
      drm/i915/gsc: mei interrupt top half should be in irq disabled context
      drm/i915/gt: Fix timeline left held on VMA alloc error
      platform/mellanox: mlxreg-lc: Fix logic error in power state check
      platform/x86: dell-wmi-sysman: Fix class device unregistration
      platform/x86: dell-sysman: Directly use firmware_attributes_class
      platform/x86: think-lmi: Fix class device unregistration
      platform/x86: think-lmi: Directly use firmware_attributes_class
      platform/x86: firmware_attributes_class: Simplify API
      platform/x86: firmware_attributes_class: Move include linux/device/class.h
      platform/x86: make fw_attr_class constant
      arm64: dts: qcom: sm8550: add UART14 nodes
      drm/i915/selftests: Change mock_request() to return error pointers
      spi: spi-fsl-dspi: Clear completion counter before initiating transfer
      drm/exynos: fimd: Guard display clock control with runtime PM calls
      dpaa2-eth: fix xdp_rxq_info leak
      ethernet: atl1: Add missing DMA mapping error checks and count errors
      btrfs: use btrfs_record_snapshot_destroy() during rmdir
      btrfs: propagate last_unlink_trans earlier when doing a rmdir
      btrfs: rename err to ret in btrfs_rmdir()
      btrfs: fix iteration of extrefs during log replay
      btrfs: fix missing error handling when searching for inode refs during log replay
      Bluetooth: Prevent unintended pause by checking if advertising is active
      platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
      RDMA/mlx5: Fix vport loopback for MPV device
      RDMA/mlx5: Fix CC counters query for MPV
      RDMA/mlx5: Fix HW counters query for non-representor devices
      scsi: ufs: core: Fix spelling of a sysfs attribute name
      scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
      scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
      platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
      arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
      mtk-sd: reset host->mrq on prepare_data() error
      mtk-sd: Prevent memory corruption from DMA map failure
      mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
      Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
      Bluetooth: MGMT: set_mesh: update LE scan interval and window
      Bluetooth: hci_sync: revert some mesh modifications
      mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
      mmc: sdhci: Add a helper function for dump register in dynamic debug mode
      vsock/vmci: Clear the vmci transport packet properly when initializing it
      s390/pci: Do not try re-enabling load/store if device is disabled
      rtc: cmos: use spin_lock_irqsave in cmos_interrupt
      rtc: pcf2127: fix SPI command byte for PCF2131
      rtc: pcf2127: add missing semicolon after statement
      !20296 [OLK-6.6][linux-6.6.y sync] Backport 6.6.95-6.6.96 LTS Patches
      !20298  cifs: Fix memory and information leak in smb3_reconfigure()
      !20042  RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
      !20041  Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
      !19820  usbnet: Prevents free active kevent
      !20268 urma: fix dereference of null_ptr for uobj
      Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1"
      kallsyms: fix build without execinfo
      drm/bridge: ti-sn65dsi86: Remove extra semicolon in ti_sn_bridge_probe()
      Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
      usb: typec: displayport: Fix potential deadlock
      NFSv4.2: another fix for listxattr
      ARM: 9354/1: ptrace: Use bitfield helpers
      firmware: arm_scmi: Ensure that the message-id supports fastchannel
      firmware: arm_scmi: Add a common helper to check if a message is supported
      nvme: always punt polled uring_cmd end_io work to task_work
      Revert "ipv6: save dontfrag in cork"
      x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c
      Kunit to check the longest symbol length
      s390/entry: Fix last breaking event handling in case of stack corruption
      media: uvcvideo: Rollback non processed entities on error
      ksmbd: remove unsafe_memcpy use in session setup
      ksmbd: Use unsafe_memcpy() for ntlm_negotiate
      drm/amdgpu: switch job hw_fence to amdgpu_fence
      drm/amdgpu: Add kicker device detection
      drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1
      drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram
      drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
      drm/bridge: cdns-dsi: Check return value when getting default PHY config
      drm/bridge: cdns-dsi: Fix connecting to next bridge
      drm/bridge: cdns-dsi: Fix phy de-init and flag it so
      drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
      drm/amdkfd: Fix race in GWS queue scheduling
      drm/msm/gpu: Fix crash when throttling GPU immediately during boot
      drm/udl: Unregister device before cleaning up on disconnect
      drm/tegra: Assign plane type before registration
      drm/etnaviv: Protect the scheduler's pending list with its lock
      drm/cirrus-qemu: Fix pitch programming
      drm/ast: Fix comment on modeset lock
      HID: wacom: fix kobject reference count leak
      HID: wacom: fix memory leak on sysfs attribute creation failure
      HID: wacom: fix memory leak on kobject creation failure
      HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
      net: libwx: fix the creation of page_pool
      btrfs: update superblock's device bytes_used when dropping chunk
      btrfs: fix a race between renames and directory logging
      dm-raid: fix variable in journal device check
      Bluetooth: L2CAP: Fix L2CAP MTU negotiation
      serial: imx: Restore original RXTL for console to fix data loss
      dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
      staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
      EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs
      drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type
      drm/bridge: ti-sn65dsi86: make use of debugfs_init callback
      drm/i915: fix build error some more
      net: selftests: fix TCP packet checksum
      ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
      net: enetc: Correct endianness handling in _enetc_rd_reg64
      libbpf: Fix possible use-after-free for externs
      um: ubd: Add missing error check in start_io_thread()
      vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
      af_unix: Don't set -ECONNRESET for consumed OOB skb.
      wifi: mac80211: fix beacon interval calculation overflow
      attach_recursive_mnt(): do not lock the covering tree when sliding something under it
      ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
      lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly()
      s390/pkey: Prevent overflow in size calculation for memdup_user()
      ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15
      i2c: robotfuzz-osif: disable zero-length read messages
      i2c: tiny-usb: disable zero-length read messages
      af_unix: Don't leave consecutive consumed OOB skbs.
      af_unix: Don't call skb_get() for OOB skb.
      af_unix: Define locking order for U_RECVQ_LOCK_EMBRYO in unix_collect_skb().
      af_unix: Define locking order for U_LOCK_SECOND in unix_state_double_lock().
      af_unix: Define locking order for unix_table_double_lock().
      platform/x86: ideapad-laptop: use usleep_range() for EC polling
      platform/x86: ideapad-laptop: move ACPI helpers from header to source file
      platform/x86: ideapad-laptop: move ymc_trigger_ec from lenovo-ymc
      platform/x86: ideapad-laptop: introduce a generic notification chain
      dummycon: Trigger redraw when switching consoles with deferred takeover
      tty: vt: make consw::con_switch() return a bool
      tty: vt: sanitize arguments of consw::con_clear()
      tty: vt: make init parameter of consw::con_init() a bool
      PCI: apple: Set only available ports up
      PCI: apple: Use helper function for_each_child_of_node_scoped()
      !20288  memcg: avoid dead loop when setting memory.max
      cifs: Fix memory and information leak in smb3_reconfigure()
      !19975  Bluetooth: MGMT: cancel mesh send timer when hdev removed
      !19976  net/mlx5: Clean up only new IRQ glue on request_irq() failure
      !19977  net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
      !19978  net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ
      uio_hv_generic: Query the ringbuffer size for device
      Drivers: hv: vmbus: Add utility function for querying ring size
      f2fs: don't over-report free space or inodes in statvfs
      btrfs: handle csum tree error with rescue=ibadroots correctly
      ovl: Check for NULL d_inode() in ovl_dentry_upper()
      scsi: ufs: core: Don't perform UFS clkscaling during host async scan
      ceph: fix possible integer overflow in ceph_zero_objects()
      ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock
      ALSA: hda: Add new pci id for AMD GPU display HD audio controller
      ALSA: hda: Ignore unsol events for cards being shut down
      usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set
      usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
      usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
      usb: Add checks for snprintf() calls in usb_alloc_dev()
      usb: common: usb-conn-gpio: use a unique name for usb connector device
      usb: potential integer overflow in usbg_make_tpg()
      misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()
      iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos
      usb: dwc2: also exit clock_gating when stopping udc while suspended
      coresight: Only check bottom two claim bits
      um: use proper care when taking mmap lock during segfault
      um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
      iio: pressure: zpa2326: Use aligned_s64 for the timestamp
      bcache: fix NULL pointer in cache_set_flush()
      amd/amdkfd: fix a kfd_process ref leak
      md/md-bitmap: fix dm-raid max_write_behind setting
      PCI: apple: Fix missing OF node reference in apple_pcie_setup_port
      PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane
      dmaengine: xilinx_dma: Set dma_device directions
      rust: module: place cleanup_module() in .exit.text section
      ksmbd: provide zero as a unique ID to the Mac client
      ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension
      hwmon: (pmbus/max34440) Fix support for max34451
      NFSv4: xattr handlers should check for absent nfs filehandles
      cxl/region: Add a dev_err() on missing target list entries
      fuse: fix race between concurrent setattrs from multiple nodes
      leds: multicolor: Fix intensity setting while SW blinking
      sunrpc: don't immediately retransmit on seqno miss
      mfd: max14577: Fix wakeup source leaks on device unbind
      mailbox: Not protect module_put with spin_lock_irqsave
      NFSv4.2: fix listxattr to return selinux security label
      NFSv4: Always set NLINK even if the server doesn't support it
      cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode
      cifs: Fix cifs_query_path_info() for Windows NT servers
      cifs: Correctly set SMB1 SessionKey field in Session Setup Request
      !20282 [OLK-6.6][linux-6.6.y sync] Backport 6.6.94-6.6.95 LTS Patches
      drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup
      drm/fbdev-helper: Set and clear VGA switcheroo client from fb_info
      Revert "gpio: mlxbf3: only get IRQ for device instance 0"
      smb: client: fix warning when reconnecting channel
      wifi: ath11k: Add missing platform IDs for quirk table
      power: supply: bq27xxx: restrict no-battery detection to bq27000
      power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
      cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus()
      Revert "ACPI: battery: negate current when discharging"
      Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
      cifs: Remove duplicate fattr->cf_dtype assignment from wsl_to_fattr() function
      gpio: mlxbf3: only get IRQ for device instance 0
      perf evsel: Missed close() when probing hybrid core PMUs
      RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs
      RISC-V: KVM: Fix the size parameter check in SBI SFENCE calls
      scsi: elx: efct: Fix memory leak in efct_hw_parse_filter()
      perf: Fix cgroup state vs ERROR
      s390/pci: Fix __pcilg_mio_inuser() inline assembly
      platform/loongarch: laptop: Add backlight power control support
      smb: client: fix first command failure during re-negotiation
      Revert "cpufreq: tegra186: Share policy per cluster"
      ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
      ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
      platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys
      serial: sh-sci: Increment the runtime usage counter for the earlycon device
      net: make for_each_netdev_dump() a little more bug-proof
      smb: Log an error when close_all_cached_dirs fails
      dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties
      EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh
      net: atm: fix /proc/net/atm/lec handling
      net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()
      net: microchip: lan743x: Reduce PTP timeout on HW failure
      tcp: fix passive TFO socket having invalid NAPI ID
      tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
      ptp: allow reading of currently dialed frequency to succeed on free-running clocks
      e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13
      net: ice: Perform accurate aRFS flow match
      pldmfw: Select CRC32 when PLDMFW is selected
      hwmon: (occ) fix unaligned accesses
      hwmon: (occ) Rework attribute registration for stack usage
      memcg: avoid dead loop when setting memory.max
      drm/nouveau/bl: increase buffer size to avoid truncate warning
      ionic: Prevent driver/fw getting out of sync on devcmd(s)
      drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate
      drm/msm/disp: Correct porch timing for SDM845
      smb: fix secondary channel creation issue with kerberos by populating hostname when adding channels
      erofs: remove unused trace event erofs_destroy_inode
      bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
      net: Fix checksum update for ILA adj-transport
      iio: accel: fxls8962af: Fix temperature calculation
      ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
      ALSA: hda/intel: Add Thinkpad E15 to PM deny list
      ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card
      wifi: rtw89: pci: use DBI function for 8852AE/8852BE/8851BE
      Input: sparcspkr - avoid unannotated fall-through
      platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL
      selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
      selftests/x86: Add a test to detect infinite SIGTRAP handler loop
      udmabuf: use sgtable-based scatterlist wrappers
      net_sched: sch_sfq: reject invalid perturb period
      scsi: s390: zfcp: Ensure synchronous unit_add
      scsi: storvsc: Increase the timeouts to storvsc_timeout
      smb: improve directory cache reuse for readdir operations
      cifs: do not disable interface polling on failure
      cifs: serialize other channels when query server interfaces is pending
      cifs: deal with the channel loading lag while picking channels
      LoongArch: Avoid using $r0/$r1 as "mask" for csrxchg
      platform/loongarch: laptop: Unregister generic_sub_drivers on exit
      platform/loongarch: laptop: Get brightness setting from EC on probe
      io_uring: fix task leak issue in io_wq_create()
      Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older
      powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
      powerpc/vdso: Fix build of VDSO32 with pcrel
      platform/x86: dell_rbu: Stop overwriting data buffer
      Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
      tee: Prevent size calculation wraparound on 32-bit kernels
      ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
      bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
      watchdog: da9052_wdt: respect TWDMIN
      wifi: ath12k: Pass correct values of center freq1 and center freq2 for 160 MHz
      wifi: ath12k: fix incorrect CE addresses
      wifi: ath12k: fix link valid field initialization in the monitor Rx
      wifi: ath11k: determine PM policy based on machine model
      octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer()
      bpf, sockmap: Fix data lost during EAGAIN retries
      f2fs: fix to set atomic write status more clear
      usbnet: asix AX88772: leave the carrier control to phylink
      ice: fix check for existing switch rule
      sock: Correct error checking condition for (assign|release)_proto_idx()
      wifi: ath12k: fix failed to set mhi state error during reboot with hardware grouping
      pinctrl: mcp23s08: Reset all pins to input at probe
      net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER
      vxlan: Do not treat dst cache initialization errors as fatal
      net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions
      net: bridge: mcast: update multicast contex when vlan state is changed
      wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
      wifi: mac80211: VLAN traffic in multicast path
      wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled
      wifi: iwlwifi: pcie: make sure to lock rxq->read
      iommu/amd: Ensure GA log notifier callbacks finish running before module unload
      scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands
      libbpf: Add identical pointer detection to btf_dedup_is_equiv()
      clk: rockchip: rk3036: mark ddrphy as critical
      wifi: mac80211: do not offer a mesh path if forwarding is disabled
      wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn()
      net: vertexcom: mse102x: Return code for mse102x_rx_pkt_spi
      net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
      pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
      pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction()
      pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction()
      pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
      net: atlantic: generate software timestamp just before the doorbell
      ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
      tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
      tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
      wifi: rtw89: leave idle mode when setting WEP encryption for AP mode
      wifi: ath11k: Fix QMI memory reuse logic
      wifi: ath12k: fix a possible dead lock caused by ab->base_lock
      wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
      net: dlink: add synchronization for stats update
      i2c: npcm: Add clock toggle recovery
      cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs
      sctp: Do not wake readers in __sctp_write_space()
      wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
      wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
      emulex/benet: correct command version selection in be_cmd_get_stats()
      wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
      i2c: designware: Invoke runtime suspend on quick slave re-registration
      f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx
      tipc: use kfree_sensitive() for aead cleanup
      net: macb: Check return value of dma_set_mask_and_coherent()
      ACPI: battery: negate current when discharging
      PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
      gpiolib: of: Add polarity quirk for s5m8767
      ASoC: tegra210_ahub: Add check to of_device_get_match_data()
      ACPICA: utilities: Fix overflow check in vsnprintf()
      power: supply: bq27xxx: Retrieve again when busy
      ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case
      ACPI: bus: Bail out if acpi_kobj registration fails
      ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
      ACPICA: Avoid sequence overread in call to strncmp()
      mmc: Add quirk to disable DDR50 tuning
      power: supply: collie: Fix wakeup source leaks on device unbind
      clocksource: Fix the CPUs' choice in the watchdog per CPU verification
      ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
      iio: adc: ad7606_spi: fix reg write value mask
      iio: imu: inv_icm42600: Fix temperature calculation
      iio: accel: fxls8962af: Fix temperature scan element sign
      PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit()
      PCI: Fix lock symmetry in pci_slot_unlock()
      PCI: cadence-ep: Correct PBA offset in .set_msix() callback
      uio_hv_generic: Use correct size for interrupt and monitor pages
      Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary
      cifs: dns resolution is needed only for primary channel
      cifs: update dstaddr whenever channel iface is updated
      cifs: reset connections for all channels when reconnect requested
      remoteproc: core: Release rproc->clean_table after rproc_attach() fails
      remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()
      regulator: max14577: Add error check for max14577_read_reg()
      mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
      staging: iio: ad5933: Correct settling cycles encoding per datasheet
      KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY
      phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property()
      mtd: rawnand: qcom: Fix read len for onfi param page
      dm-verity: fix a memory leak if some arguments are specified multiple times
      dm-mirror: fix a tiny race condition
      KVM: VMX: Flush shadow VMCS on emergency reboot
      KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs
      mtd: nand: sunxi: Add randomizer configuration before randomizer enable
      mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk
      mm: fix ratelimit_pages update error in dirty_ratio_handler()
      clk: meson-g12a: add missing fclk_div2 to spicc
      parisc: fix building with gcc-15
      vgacon: Add check for vc_origin address range in vgacon_scroll()
      parisc/unaligned: Fix hex output to show 8 hex chars
      EDAC/altera: Use correct write width with the INTTEST register
      fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var
      net: ftgmac100: select FIXED_PHY
      Input: gpio-keys - fix possible concurrent access in gpio_keys_irq_timer()
      ext4: ensure i_size is smaller than maxbytes
      ext4: factor out ext4_get_maxbytes()
      ext4: fix calculation of credits for extent tree modification
      bus: fsl-mc: fix GET/SET_TAILDROP command ids
      bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
      cgroup,freezer: fix incomplete freezing when attaching tasks
      ceph: set superblock s_magic for IMA fsmagic matching
      can: tcan4x5x: fix power regulator retrieval during probe
      bus: mhi: host: Fix conflict between power_up and SYSERR
      bus: mhi: ep: Update read pointer only after buffer is written
      ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
      ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
      arm64/mm: Close theoretical race where stale TLB entry remains valid
      media: uvcvideo: Fix deferred probing error
      media: uvcvideo: Send control events for partial succeeds
      media: uvcvideo: Return the number of processed controls
      media: imx-jpeg: Reset slot data pointers when freed
      media: imx-jpeg: Drop the first error frames
      media: videobuf2: use sgtable-based scatterlist wrappers
      media: venus: Fix probe error handling
      media: v4l2-dev: fix error handling in __video_register_device()
      media: omap3isp: use sgtable-based scatterlist wrappers
      media: mediatek: vcodec: Correct vsi_core framebuffer size
      media: gspca: Add error handling for stv06xx_read_sensor()
      media: davinci: vpif: Fix memory leak in probe error path
      media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case
      media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div
      media: ccs-pll: Start OP pre-PLL multiplier search from correct value
      media: ccs-pll: Start VT pre-PLL multiplier search from correct value
      media: i2c: ds90ub913: Fix returned fmt from .set_fmt()
      media: nxp: imx8-isi: better handle the m2m usage_count
      media: ov5675: suppress probe deferral errors
      media: ov8856: suppress probe deferral errors
      wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
      wifi: rtw88: usb: Reduce control message timeout to 500 ms
      wifi: ath12k: fix ring-buffer corruption
      SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls
      wifi: ath11k: fix ring-buffer corruption
      wifi: ath11k: fix rx completion meta data corruption
      net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
      net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr()
      regulator: max20086: Change enable gpio to optional
      regulator: max20086: Fix MAX200086 chip id
      powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states
      io_uring/kbuf: account ring io_buffer_list memory
      io_uring: account drain memory to cgroup
      ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
      ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
      gfs2: move msleep to sleepable context
      crypto: marvell/cesa - Do not chain submitted requests
      configfs: Do not override creating attribute file failure in populate_attrs()
      !19787  ima: Handle error code returned by ima_filter_rule_match()
      !20207  *** fix CVE-2025-37800 ***
      !20248  sched/fair: Track idle balance interval with idle_stamp in balance_fair
      !20179 v3  oenetcls: add a switch to enable/disable checking NIC ntuple feature
      ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
      !20263 Fix CVE-2025-40311
      urma: fix dereference of null_ptr for uobj
      !19549  NFSD: free copynotify stateid in nfs4_free_ol_stateid()
      !20147  fuse: fix readahead reclaim deadlock
      !20146  fuse: fix io-uring list corruption for terminated non-committed requests
      !20145  fuse: missing copy_finish in fuse-over-io-uring argument copies
      !20144  fsnotify: do not generate ACCESS/MODIFY events on child for special files
      !19482  NFSD: Define a proc_layoutcommit for the FlexFiles layout type
      !19483  ksmbd: fix refcount leak causing resource not released
      !19484  NFSD: fix race between nfsd registration and exports_proc
      accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
      !19989  proc: fix missing pde_set_flags() for net proc files
      sched/fair: Track idle balance interval with idle_stamp in balance_fair
      !19990  Fix SDEI state machine issue during reboot process
      !20024 [OLK-6.6] backport irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI from upstream linux-6.16.rc1
      !20217 [OLK-6.6][linux-6.6.y sync] Backport 6.6.93-6.6.94 LTS Patches
      !20070 [OLK-6.6] Merge continuous pages into a large range when notifying range enc status changes
      ACPI: CPPC: Perform fast check switch only for online CPUs
      arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator
      serial: sh-sci: Check that the DMA cookie is valid
      thunderbolt: Fix wake on connect at runtime
      bonding: set random address only when slaves already exist
      drm/mediatek: Fix device use-after-free on unbind
      rtc: Optimize calculations in rtc_time64_to_tm()
      !20170  perf/x86/amd: Check event before enable to avoid GPF
      !20069 ub: cdma: jfs 64K page table memory adaptation
      !20224  crypto: af_alg - zero initialize memory allocated via sock_kmalloc
      !20027 [OLK-6.6]Enhance CMA memory usage reporting for CSV3
      crypto: af_alg - zero initialize memory allocated via sock_kmalloc
      drm/meson: Use 1000ULL when operating with mode->clock
      regulator: dt-bindings: mt6357: Drop fixed compatible requirement
      xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
      usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
      usb: Flush altsetting 0 endpoints before reinitializating them after reset.
      usb: cdnsp: Fix issue with detecting USB 3.2 speed
      usb: cdnsp: Fix issue with detecting command completion event
      kbuild: Disable -Wdefault-const-init-unsafe
      Revert "io_uring: ensure deferred completions are posted for multishot"
      io_uring/rw: fix wrong NOWAIT check in io_rw_init_file()
      io_uring/rw: allow pollable non-blocking attempts for !FMODE_NOWAIT
      io_uring: add io_file_can_poll() helper
      ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1
      tools/resolve_btfids: Fix build when cross compiling kernel with clang.
      block: Fix bvec_set_folio() for very large folios
      bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP
      perf: Ensure bpf_perf_link path is properly serialized
      nvmet-fcloop: access fcpreq only when holding reqlock
      fs/filesystems: Fix potential unsigned integer underflow in fs_name()
      net_sched: tbf: fix a race in tbf_change()
      net/mlx5e: Fix leak of Geneve TLV option object
      net/mlx5: Fix return value when searching for existing flow group
      net/mlx5: Ensure fw pages are always allocated on same NUMA
      Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance
      Bluetooth: Fix NULL pointer deference on eir_get_service_data
      net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
      net/mdiobus: Fix potential out-of-bounds read/write access
      macsec: MACsec SCI assignment for ES = 0
      ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
      i40e: retry VFLR handling if there is ongoing VF reset
      i40e: return false from i40e_reset_vf if reset is in progress
      drm/meson: fix more rounding issues with 59.94Hz modes
      drm/meson: use vclk_freq instead of pixel_freq in debug print
      drm/meson: fix debug log statement when setting the HDMI clocks
      drm/meson: use unsigned long long / Hz for frequency types
      scsi: iscsi: Fix incorrect error path labels for flashnode operations
      pinctrl: qcom: pinctrl-qcm2290: Add missing pins
      wifi: ath11k: validate ath11k_crypto_mode on top of ath11k_core_qmi_firmware_ready
      wifi: ath11k: don't wait when there is no vdev started
      wifi: ath11k: don't use static variables in ath11k_debugfs_fw_stats_process()
      wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request()
      wifi: ath11k: convert timeouts to secs_to_jiffies()
      wifi: ath11k: fix soc_dp_stats debugfs file permission
      ath10k: snoc: fix unbalanced IRQ enable in crash recovery
      Bluetooth: hci_core: fix list_for_each_entry_rcu usage
      serial: sh-sci: Clean sci_ports[0] after at earlycon exit
      serial: sh-sci: Move runtime PM enable to sci_probe_single()
      serial: sh-sci: Check if TX data was written to device in .tx_empty()
      arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators
      arm64: dts: ti: k3-j721e-sk: Add support for multiple CAN instances
      arm64: dts: ti: k3-j721e-sk: Model CSI2RX connector mux
      arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
      arm64: dts: ti: k3-am65-main: Fix sdhci node properties
      kasan: use unchecked __memset internally
      Input: synaptics-rmi - fix crash with unsupported versions of F34
      pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
      ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init
      ASoC: Intel: avs: Verify content returned by parse_int_array()
      ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX
      ASoC: codecs: hda: Fix RPM usage count underflow
      scsi: ufs: qcom: Prevent calling phy_exit() before phy_init()
      wireguard: device: enable threaded NAPI
      net: dsa: b53: allow RGMII for bcm63xx RGMII ports
      net: dsa: b53: do not enable RGMII delay on bcm63xx
      netfilter: nf_nat: also check reverse tuple to obtain clashing entry
      gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
      vmxnet3: correctly report gso type for UDP tunnels
      net: wwan: t7xx: Fix napi rx poll issue
      net: dsa: tag_brcm: legacy: fix pskb_may_pull length
      ice: fix rebuilding the Tx scheduler tree for large queue counts
      ice: create new Tx scheduler nodes for new queues only
      Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
      spi: bcm63xx-hsspi: fix shared reset
      spi: bcm63xx-spi: fix shared reset
      net: lan966x: Make sure to insert the vlan tags also in host mode
      net/mlx4_en: Prevent potential integer overflow calculating Hz
      driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
      gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
      net: stmmac: platform: guarantee uniqueness of bus_id
      vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
      coresight: prevent deactivate active config while enabling the config
      counter: interrupt-cnt: Protect enable/disable OPs with mutex
      MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
      iio: adc: ad7124: Fix 3dB filter frequency reading
      iio: filter: admv8818: Support frequencies >= 2^32
      iio: filter: admv8818: fix range calculation
      iio: filter: admv8818: fix integer overflow
      iio: filter: admv8818: fix band 4, state 15
      thunderbolt: Fix a logic error in wake on connect
      rtc: loongson: Add missing alarm notifications for ACPI RTC events
      PCI/DPC: Initialize aer_err_info before using it
      PCI: apple: Use gpiod_set_value_cansleep in probe flow
      PCI: cadence: Fix runtime atomic count underflow
      PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus()
      rtc: sh: assign correct interrupts with DT
      cifs: Fix validation of SMB1 query reparse point response
      perf trace: Always print return value for syscalls returning a pid
      perf record: Fix incorrect --user-regs comments
      perf tests switch-tracking: Fix timestamp comparison
      mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
      mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove()
      rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
      remoteproc: k3-r5: Drop check performed in k3_r5_rproc_{mbox_callback/kick}
      remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe
      perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3
      perf intel-pt: Fix PEBS-via-PT data_src
      perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids()
      dm-flakey: make corrupting read bios work
      dm-flakey: error all IOs when num_features is absent
      mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
      dm: free table mempools if not used in __bind
      dm: don't change md if dm_table_set_restrictions() fails
      perf ui browser hists: Set actions->thread before calling do_zoom_thread()
      perf build: Warn when libdebuginfod devel files are not available
      randstruct: gcc-plugin: Fix attribute addition
      randstruct: gcc-plugin: Remove bogus void member
      soc: aspeed: lpc: Fix impossible judgment condition
      ARM: aspeed: Don't select SRAM
      arm64: dts: mt6359: Rename RTC node to match binding expectations
      arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups
      arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou
      arm64: defconfig: mediatek: enable PHY drivers
      ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device
      ARM: dts: qcom: apq8064: add missing clocks to the timer node
      dt-bindings: vendor-prefixes: Add Liontron name
      nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
      nilfs2: add pointer check for nilfs_direct_propagate()
      ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery
      arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E
      arm64: tegra: Drop remaining serial clock-names and reset-names
      arm64: dts: rockchip: Update eMMC for NanoPi R5 series
      arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning
      arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply
      arm64: dts: mt6359: Add missing 'compatible' property to regulators node
      arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles
      arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI audio
      arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI audio
      arm64: dts: imx8mp-beacon: Fix RTC capacitive load
      arm64: dts: imx8mn-beacon: Fix RTC capacitive load
      arm64: dts: imx8mm-beacon: Fix RTC capacitive load
      arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect GPIO
      arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains
      ARM: dts: at91: at91sam9263: fix NAND chip selects
      ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
      arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies
      arm64: dts: qcom: sm8250: Fix CPU7 opp table
      arm64: dts: qcom: sm8350: Reenable crypto & cryptobam
      arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios
      arm64: dts: qcom: sdm845-starqltechn: refactor node order
      arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake
      arm64: dts: qcom: sdm845-starqltechn: remove wifi
      f2fs: fix to correct check conditions in f2fs_cross_rename
      f2fs: use d_inode(dentry) cleanup dentry->d_inode
      net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
      octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback
      net: phy: mscc: Fix memory leak when using one step timestamping
      net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
      net: phy: fix up const issues in to_mdio_device() and to_phy_device()
      net: phy: clear phydev->devlink when the link is deleted
      net: lan966x: Fix 1-step timestamping over ipv4 or ipv6
      RISC-V: KVM: lock the correct mp_state during reset
      netfilter: nft_tunnel: fix geneve_opt dump
      Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach()
      vfio/type1: Fix error unwind in migration dirty bitmap allocation
      netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
      wifi: mt76: mt7996: fix RX buffer size of MCU event
      wifi: mt76: mt7996: set EHT max ampdu length capability
      scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort()
      wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event
      iommu: remove duplicate selection of DMAR_TABLE
      s390/bpf: Store backchain even for leaf progs
      clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
      libbpf: Use proper errno value in nlattr
      ktls, sockmap: Fix missing uncharge operation
      tracing: Fix error handling in event_trigger_parse()
      tracing: Rename event_trigger_alloc() to trigger_data_alloc()
      efi/libstub: Describe missing 'out' parameter in efi_load_initrd
      clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs
      clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs
      clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs
      clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs
      bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ
      RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
      netfilter: nft_quota: match correctly when the quota just depleted
      netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it
      libbpf: Use proper errno value in linker
      f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed()
      f2fs: clean up w/ fscrypt_is_bounce_page()
      bonding: assign random address if device address is same as bond
      iommu: Protect against overflow in iommu_pgsize()
      Use thread-safe function pointer in libbpf_print
      libbpf: Remove sample_period init in perf_buffer
      wifi: ath12k: Add MSDU length validation for TKIP MIC error
      wifi: rtw88: do not ignore hardware read error during DPK
      wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally
      wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT
      xfrm: Use xdo.dev instead of xdo.real_dev
      libbpf: Fix buffer overflow in bpf_object__init_prog
      net: ncsi: Fix GCPS 64-bit member variables
      wifi: ath12k: Fix WMI tag for EHT rate in peer assoc
      selftests/bpf: Fix bpf_nf selftest failure
      IB/cm: use rwlock for MAD agent lock
      drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err
      drm/mediatek: Fix kobject put for component sub-drivers
      drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr
      scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
      x86/cpu: Rename and move CPU model entry for Diamond Rapids
      x86/cpu: Add two Intel CPU model numbers
      !20099 v2  xsched: Add XSched manual
      firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
      drm/tegra: rgb: Fix the unbound reference count
      drm/vkms: Adjust vkms_state->active_planes allocation type
      drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
      selftests/seccomp: fix syscall_restart test for arm compat
      arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX
      firmware: psci: Fix refcount leak in psci_dt_init
      m68k: mac: Fix macintosh_config for Mac II
      watchdog: exar: Shorten identity name to fit correctly
      drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe()
      arm64/fpsimd: Fix merging of FPSIMD state during signal return
      arm64/fpsimd: Avoid RES0 bits in the SME trap handler
      media: rkvdec: Fix frame size enumeration
      drm/vc4: tests: Use return instead of assert
      drm/vmwgfx: Add seqno waiter for sync_files
      ASoC: apple: mca: Constrain channels according to TDM mask
      spi: sh-msiof: Fix maximum DMA transfer size
      ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
      PM: sleep: Print PM debug messages during hibernation
      x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
      PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks()
      ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type
      power: reset: at91-reset: Optimize at91_reset()
      spi: tegra210-quad: modify chip select (CS) deactivation
      spi: tegra210-quad: remove redundant error handling code
      !20076  smb3: fix for slab out of bounds on mount to ksmbd
      spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers
      ASoC: tas2764: Enable main IRQs
      ACPICA: exserial: don't forget to handle FFixedHW opregions for reading
      kunit: Fix wrong parameter to kunit_deactivate_static_stub()
      crypto: sun8i-ce - move fallback ahash_request to the end of the struct
      crypto: xts - Only add ecb if it is not already there
      crypto: lrw - Only add ecb if it is not already there
      rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture
      btrfs: scrub: fix a wrong error type when metadata bytenr mismatches
      btrfs: scrub: update device stats when an error is detected
      crypto: marvell/cesa - Avoid empty transfer descriptor
      x86/cpu: Sanitize CPUID(0x80000000) output
      x86/microcode/AMD: Do not return error when microcode update is not necessary
      powerpc: do not build ppc_save_regs.o always
      crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
      perf/core: Fix broken throttling when max_samples_per_tick=1
      gfs2: gfs2_create_inode error handling fix
      crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run()
      tools/x86/kcpuid: Fix error handling
      dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt property
      dt-bindings: usb: cypress,hx3: Add support for all variants
      usb: usbtmc: Fix timeout value in get_stb
      Bluetooth: hci_qca: move the SoC type check to the right place
      usb: typec: ucsi: fix Clang -Wsign-conversion warning
      USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB
      usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
      usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
      rtc: Fix offset calculation for .start_secs < 0
      rtc: Make rtc_time64_to_tm() support dates before 1970
      pinctrl: armada-37xx: set GPIO output value before setting direction
      pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
      !18475 [OLK-6.6] x86/kvm: expose CPUID 0xC000_0000 for Zhaoxin "Shanghai" vendor
      driver core: fix potential NULL pointer dereference in dev_uevent()
      Revert "Revert "Revert "driver core: Fix uevent_show() vs driver detach race"""
      !19893  nbd: defer config unlock in nbd_genl_connect
      !19892  nbd: defer config put in recv_work
      !19890  md: fix rcu protection in md_wakeup_thread
      !19889  nvme-multipath: fix lockdep WARN due to partition scan work
      !19835  blk-cgroup: fix possible deadlock while configuring policy
      !19815  scsi: sg: Do not sleep in atomic context
      !20162  tracing: Fix enabling of tracing on file release
      !20110  macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
      !20164  powerpc/kexec: Enable SMT before waking offline CPUs
      !20149  tracing: Do not register unsupported perf events
      !20153  iavf: fix off-by-one issues in iavf_config_rss_reg()
      !20152  e1000: fix OOB in e1000_tbi_should_accept()
      !20140  mlxsw: spectrum_router: Fix neighbour use-after-free
      !20139  mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
      !20118 [OLK-6.6][linux-6.6.y sync] Backport 6.6.92-6.6.93 LTS Patches
      !19756  erofs: avoid infinite loops due to corrupted subpage compact indexes
      !19107 mptcp: Fix proto fallback detection with BPF
      !20128  NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
      !20000  cifs: fix memory leak in smb3_fs_context_parse_param error path
      !20001  smb: client: fix memory leak in cifs_construct_tcon()
      !20002  CVE-2025-40328
      !19999  smb: client: fix potential cfid UAF in smb2_query_info_compound
      !19998  cifs: client: fix memory leak in smb3_fs_context_parse_param
      !20094  CVE-2025-40099
      !20089  smb: client: Fix refcount leak for cifs_sb_tlink
      !20088  ceph: fix race condition validating r_parent before applying state
      !20086  smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
      !20081  CVE-2025-39798
      !20078  NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
      !20077  NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
      !20075  smb: client: fix potential deadlock when reconnecting channels
      !20074  smb: client: add NULL check in automount_fullpath
      !20071  smb: client: Avoid race in open_cached_dir with lease breaks
      !19945  fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
      !19021  memcg: enable asynchronous reclaim for cgroup-v2
      net/oenetcls: add a switch to enable/disable checking NIC ntuple feature
      net/oenetcls: Balancing softirq to improve performance
      perf/x86/amd: Check event before enable to avoid GPF
      af_unix: Initialise scc_index in unix_add_edge().
      wifi: rtw89: avoid circular locking dependency in ser_state_run()
      Revert "leds: trigger: netdev: Configure LED blink interval for HW offload"
      ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
      Revert "cpuidle: menu: Avoid discarding useful information"
      cpuidle: governors: menu: Avoid using invalid recent intervals data
      ASoC: ops: dynamically allocate struct snd_ctl_elem_value
      cpufreq: tegra186: Set target frequency for all cpus in policy
      Revert "mmc: sdhci: Disable SD card clock before changing parameters"
      soc: qcom: smp2p: Fix fallback to qcom,ipc parse
      rpmsg: qcom_smd: Fix fallback to qcom,ipc parse
      Revert "SUNRPC: Don't allow waiting for exiting tasks"
      nvmem: imx-ocotp: fix MAC address byte length
      phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe()
      ksmbd: use list_first_entry_or_null for opinfo_get_list()
      net: ethernet: ti: am65-cpsw: Lower random mac address error print to info
      platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys
      NFS: Avoid flushing data while holding directory locks in nfs_rename()
      nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro
      spi: spi-sun4i: fix early activation
      phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure
      drm/amd/display: fix link_set_dpms_off multi-display MST corner case
      um: let 'make clean' properly clean underlying SUBARCH as well
      platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS
      nfs: don't share pNFS DS connections between net namespaces
      HID: quirks: Add ADATA XPG alpha wireless mouse support
      dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open
      coredump: fix error handling for replace_fd()
      perf/arm-cmn: Initialise cmn->cpu earlier
      perf/arm-cmn: Fix REQ2/SNP2 mixup
      arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy
      arm64: dts: qcom: sm8550: Add missing properties for cryptobam
      arm64: dts: qcom: sm8450: Add missing properties for cryptobam
      arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node
      arm64: dts: qcom: ipq9574: Add missing properties for cryptobam
      af_unix: Fix uninit-value in __unix_walk_scc()
      af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS
      af_unix: Add dead flag to struct scm_fp_list.
      af_unix: Don't access successor in unix_del_edges() during GC.
      af_unix: Try not to hold unix_gc_lock during accept().
      af_unix: Remove lock dance in unix_peek_fds().
      af_unix: Replace garbage collection algorithm.
      af_unix: Detect dead SCC.
      af_unix: Assign a unique index to SCC.
      af_unix: Avoid Tarjan's algorithm if unnecessary.
      af_unix: Skip GC if no cycle exists.
      af_unix: Save O(n) setup of Tarjan's algo.
      af_unix: Fix up unix_edge.successor for embryo socket.
      af_unix: Save listener for embryo socket.
      af_unix: Detect Strongly Connected Components.
      af_unix: Iterate all vertices by DFS.
      af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb.
      af_unix: Link struct unix_edge when queuing skb.
      af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd.
      af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd.
      af_unix: Remove CONFIG_UNIX_SCM.
      af_unix: Remove io_uring code for GC.
      af_unix: Replace BUG_ON() with WARN_ON_ONCE().
      af_unix: Try to run GC async.
      af_unix: Run GC on only one CPU.
      af_unix: Return struct unix_sock from unix_get_socket().
      can: kvaser_pciefd: Force IRQ edge in case of nested IRQ
      drm/gem: Internally test import_attach for imported objects
      x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers
      i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work()
      pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()
      watchdog: aspeed: fix 64-bit division
      serial: sh-sci: Save and restore more registers
      highmem: add folio_test_partial_kmap()
      spi: spi-fsl-dspi: Reset SR flags before sending a new message
      spi: spi-fsl-dspi: Halt the module after a new message transfer
      spi: spi-fsl-dspi: restrict register range for regmap access
      Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection"
      Input: xpad - add more controllers
      smb: client: Reset all search buffer pointers when releasing buffer
      arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
      smb: client: Fix use-after-free in cifs_fill_dirent
      drm/edid: fixed the bug that hdr metadata was not reset
      thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature
      can: kvaser_pciefd: Continue parsing DMA buf after dropped RX
      llc: fix data loss when reading from a socket in llc_ui_recvmsg()
      ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10
      ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction
      ASoc: SOF: topology: connect DAI to a single DAI link
      ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext
      can: slcan: allow reception of short error messages
      clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe()
      octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG
      octeontx2-af: Set LMT_ENA bit for APR table entries
      octeontx2-pf: Add AF_XDP non-zero copy support
      io_uring: fix overflow resched cqe reordering
      net: lan743x: Restore SGMII CTRL register on resume
      net: dwmac-sun8i: Use parsed internal PHY address instead of 1
      pinctrl: qcom: switch to devm_register_sys_off_handler()
      pinctrl: qcom/msm: Convert to platform remove callback returning void
      ice: Fix LACP bonds without SRIOV environment
      ice: fix vf->num_mac count with port representors
      bridge: netfilter: Fix forwarding of fragmented packets
      Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling
      dmaengine: fsl-edma: Fix return code for unhandled interrupts
      dmaengine: idxd: Fix ->poll() return value
      xfrm: Sanitize marks before insert
      clk: sunxi-ng: d1: Add missing divider for MMC mod clocks
      remoteproc: qcom_wcnss: Fix on platforms without fallback regulators
      dmaengine: idxd: Fix allowing write() from different address spaces
      soundwire: bus: Fix race on the creation of the IRQ domain
      xenbus: Allow PVH dom0 a non-local xenstore
      wifi: iwlwifi: add support for Killer on MTL
      tools: ynl-gen: validate 0 len strings from kernel
      cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function
      cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info()
      io_uring/fdinfo: annotate racy sq/cq head/tail reads
      nvme-pci: add quirks for WDC Blue SN550 15b7:5009
      nvme-pci: add quirks for device 126f:1001
      ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx
      ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013
      ASoC: cs42l43: Disable headphone clamps during type detection
      pinctrl: meson: define the pull up/down resistor value as 60 kOhm
      book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n
      ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of()
      drm: Add valid clones check
      drm/panel-edp: Add Starry 116KHD024006
      drm/atomic: clarify the rules around drm_atomic_state->allow_modeset
      drm: bridge: adv7511: fill stream capabilities
      wifi: ath12k: Fix end offset bit definition in monitor ring descriptor
      wifi: ath9k: return by of_get_mac_address
      accel/qaic: Mask out SR-IOV PCI resources
      wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override
      regulator: ad5398: Add device tree support
      spi: zynqmp-gqspi: Always acknowledge interrupts
      wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet
      wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate
      wifi: rtl8xxxu: retry firmware download on error
      perf/amd/ibs: Fix ->config to sample period calculation for OP PMU
      perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt
      firmware: arm_scmi: Relax duplicate name constraint across protocol ids
      bpftool: Fix readlink usage in get_fd_type
      drm/ast: Find VBIOS mode from regular display size
      ASoC: rt722-sdca: Add some missing readable registers
      ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode
      arm64: zynqmp: add clock-output-names property in clock nodes
      HID: usbkbd: Fix the bit shift number for LED_KANA
      wifi: ath12k: Avoid napi_sync() before napi_enable()
      scsi: st: Restore some drive settings after reset
      scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine
      net/mana: fix warning in the writer of client oob
      ice: count combined queues using Rx/Tx count
      rcu: fix header guard for rcu_all_qs()
      rcu: handle unstable rdp in rcu_read_unlock_strict()
      rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y
      ice: treat dyn_allowed only as suggestion
      bridge: mdb: Allow replace of a host-joined group
      r8169: don't scan PHY addresses > 0
      ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only
      vxlan: Annotate FDB data races
      media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available
      f2fs: introduce f2fs_base_attr for global sysfs entries
      hwmon: (xgene-hwmon) use appropriate type for the latency value
      clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs
      wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU
      wifi: rtw88: Fix download_firmware_validate() for RTL8814AU
      ext4: remove writable userspace mappings before truncating page cache
      ext4: don't write back data before punch hole in nojournal mode
      leds: trigger: netdev: Configure LED blink interval for HW offload
      pstore: Change kmsg_bytes storage size to u32
      r8152: add vendor/device ID pair for Dell Alienware AW1022z
      ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure().
      arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src
      powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory
      net: fec: Refactor MAC reset to function
      wifi: mac80211: remove misplaced drv_mgd_complete_tx() call
      wifi: mac80211: don't unconditionally call drv_mgd_complete_tx()
      drm/v3d: Add clock handling
      net/mlx5e: reduce the max log mpwrq sz for ECPF and reps
      net/mlx5e: reduce rep rxq depth to 256 for ECPF
      net/mlx5e: set the tx_queue_len for pfifo_fast
      net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB
      scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr()
      drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer()
      drm/amdgpu: enlarge the VBIOS binary size limit
      drm/amd/display: Initial psr_version with correct setting
      drm/amd/display: Update CR AUX RD interval interpretation
      drm/amdgpu: reset psp->cmd to NULL after releasing the buffer
      drm/amd/display: Don't try AUX transactions on disconnected link
      drm/amdgpu: Set snoop bit for SDMA for MI series
      soundwire: amd: change the soundwire wake enable/disable sequence
      phy: core: don't require set_mode() callback for phy_get_mode() to work
      serial: sh-sci: Update the suspend/resume support
      sched: Reduce the default slice to avoid tasks getting an extra tick
      x86/traps: Cleanup and robustify decode_bug()
      clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate
      clk: qcom: ipq5018: allow it to be bulid on arm32
      net/mlx4_core: Avoid impossible mlx4_db_alloc() order value
      media: v4l: Memset argument to 0 before calling get_mbus_config pad op
      media: i2c: imx219: Correct the minimum vblanking value
      kunit: tool: Use qboot on QEMU x86_64
      smack: Revert "smackfs: Added check catlen"
      smack: recognize ipv4 CIPSO w/o categories
      pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map
      ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot()
      ASoC: tas2764: Power up/down amp on mute ops
      ASoC: tas2764: Mark SW_RESET as volatile
      ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG
      ASoC: ops: Enforce platform maximum on initial value
      firmware: arm_ffa: Reject higher major version as incompatible
      net/mlx5: Apply rate-limiting to high temperature warning
      net/mlx5: Modify LSB bitmask in temperature event to include only the first bit
      media: test-drivers: vivid: don't call schedule in loop
      vxlan: Join / leave MC group after remote changes
      PCI: Fix old_size lower bound in calculate_iosize() too
      eth: mlx4: don't try to complete XDP frames in netpoll
      bpf: don't do clean_live_states when state->loop_entry->branches > 0
      can: c_can: Use of_property_present() to test existence of DT property
      pmdomain: imx: gpcv2: use proper helper for property detection
      RDMA/core: Fix best page size finding when it can cross SG entries
      drm/amd/display: Add support for disconnected eDP streams
      i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA)
      EDAC/ie31200: work around false positive build warning
      wifi: rtw89: fw: propagate error code from rtw89_h2c_tx()
      wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31
      wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU
      wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU
      scsi: mpt3sas: Send a diag reset if target reset fails
      clocksource: mips-gic-timer: Enable counter when CPUs start
      MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core
      MIPS: Use arch specific syscall name match function
      crypto: skcipher - Zap type in crypto_alloc_sync_skcipher
      x86/kaslr: Reduce KASLR entropy on most x86 systems
      net/mlx5: Change POOL_NEXT_SIZE define value and make it global
      libbpf: Fix out-of-bound read
      media: tc358746: improve calculation of the D-PHY timing registers
      media: adv7180: Disable test-pattern control on adv7180
      cpuidle: menu: Avoid discarding useful information
      vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines
      vhost-scsi: Return queue full for page alloc failures during copy
      x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus()
      ASoC: mediatek: mt8188: Add reference for dmic clocks
      ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile
      drm/amd/display: handle max_downscale_src_width fail check
      x86/build: Fix broken copy command in genimage.sh when making isoimage
      Octeontx2-af: RPM: Register driver with PCI subsys IDs
      soc: ti: k3-socinfo: Do not use syscon helper to build regmap
      wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band
      bonding: report duplicate MAC address in all situations
      net: xgene-v2: remove incorrect ACPI_PTR annotation
      net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only
      leds: pwm-multicolor: Add check for fwnode_property_read_u32
      drm/amdkfd: KFD release_work possible circular locking
      selftests/net: have `gro.sh -t` return a correct exit code
      net/mlx5: Avoid report two health errors on same syndrome
      firmware: arm_ffa: Set dma_mask for ffa devices
      PCI: brcmstb: Add a softdep to MIP MSI-X driver
      PCI: brcmstb: Expand inbound window size up to 64GB
      wifi: ath12k: Report proper tx completion status to mac80211
      soc: apple: rtkit: Implement OSLog buffers properly
      soc: apple: rtkit: Use high prio work queue
      fpga: altera-cvp: Increase credit timeout
      drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence
      ARM: at91: pm: fix at91_suspend_finish for ZQ calibration
      hwmon: (gpio-fan) Add missing mutex locks
      x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2
      clk: imx8mp: inform CCF of maximum frequency of clocks
      media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value
      media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map
      drm/rockchip: vop2: Add uv swap for cluster window
      ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config().
      ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7
      perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type
      net: pktgen: fix mpls maximum labels list parsing
      net: ethernet: ti: cpsw_new: populate netdev of_node
      pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned"
      drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination
      drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c
      remoteproc: qcom_wcnss: Handle platforms with only single power domain
      net: phylink: use pl->link_interface in phylink_expects_phy()
      drm/gem: Fix kabi-breakage for drm
      powerpc/kexec: Enable SMT before waking offline CPUs
      tracing: Fix enabling of tracing on file release
      iavf: fix off-by-one issues in iavf_config_rss_reg()
      e1000: fix OOB in e1000_tbi_should_accept()
      tracing: Do not register unsupported perf events
      fuse: fix readahead reclaim deadlock
      fuse: fix io-uring list corruption for terminated non-committed requests
      fuse: missing copy_finish in fuse-over-io-uring argument copies
      fsnotify: do not generate ACCESS/MODIFY events on child for special files
      mlxsw: spectrum_router: Fix neighbour use-after-free
      mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
      drm/gem: Test for imported GEM buffers with helper
      ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
      NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
      media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe()
      ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114
      ieee802154: ca8210: Use proper setters and getters for bitwise types
      rtc: ds1307: stop disabling alarms on probe
      tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()
      ALSA: seq: Improve data consistency at polling
      powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7
      arm64: tegra: Resize aperture for the IGX PCIe C5 slot
      arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator
      drm/amdkfd: Set per-process flags only once cik/vi
      watchdog: aspeed: Update bootstatus handling
      cpufreq: tegra186: Share policy per cluster
      iommu/amd/pgtbl_v2: Improve error handling
      ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup()
      auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common"
      gfs2: Check for empty queue in run_queue
      drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch
      drm/amd/display: calculate the remain segments for all pipes
      drm/amd/display: remove minimum Dispclk and apply oem panel timing.
      ipv6: save dontfrag in cork
      printk: Check CON_SUSPEND when unblanking a console
      hwmon: (dell-smm) Increment the number of fans
      usb: xhci: Don't change the status of stalled TDs on failed Stop EP
      mmc: sdhci: Disable SD card clock before changing parameters
      mmc: dw_mmc: add exynos7870 DW MMC support
      arm64/mm: Check PUD_TYPE_TABLE in pud_bad()
      netfilter: conntrack: Bound nf_conntrack sysctl writes
      timer_list: Don't use %pK through printk()
      posix-timers: Add cond_resched() to posix_timer_add() search loop
      RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject()
      ext4: do not convert the unwritten extents if data writeback fails
      ext4: reject the 'data_err=abort' option in nojournal mode
      ASoC: sun4i-codec: support hp-det-gpios property
      drm/amdgpu: Update SRIOV video codec caps
      mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check
      pinctrl-tegra: Restore SFSEL bit when freeing pins
      xen: Add support for XenServer 6.1 platform device
      net/smc: use the correct ndev to find pnetid by pnetid table
      dm: restrict dm device size to 2^63-512 bytes
      crypto: octeontx2 - suppress auth failure screaming due to negative tests
      kbuild: fix argument parsing in scripts/config
      ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect
      thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer
      objtool: Fix error handling inconsistencies in check()
      rtc: rv3032: fix EERD location
      tcp: reorganize tcp_in_ack_event() and tcp_count_delivered()
      jbd2: do not try to recover wiped journal
      bpf: Return prog btf_id without capable check
      vfio/pci: Handle INTx IRQ_NOTCONNECTED
      scsi: st: ERASE does not change tape location
      scsi: st: Tighten the page format heuristics with MODE SELECT
      hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure
      ext4: reorder capability check last
      um: Update min_low_pfn to match changes in uml_reserved
      um: Store full CSGSFS and SS register from mcontext
      dlm: make tcp still work in multi-link env
      i3c: master: svc: Fix missing STOP for master request
      drm/amd/display: Guard against setting dispclk low for dcn31x
      btrfs: send: return -ENAMETOOLONG when attempting a path that is too long
      btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work()
      btrfs: fix non-empty delayed iputs list on unmount due to async workers
      btrfs: run btrfs_error_commit_super() early
      btrfs: avoid linker error in btrfs_find_create_tree_block()
      btrfs: make btrfs_discard_workfn() block_group ref explicit
      i2c: pxa: fix call balance of i2c->clk handling routines
      i2c: qup: Vote for interconnect bandwidth to DRAM
      x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP
      wifi: mt76: mt7996: revise TXS size
      wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2
      mmc: host: Wait for Vdd to settle on card power off
      ext4: on a remount, only log the ro or r/w state when it has changed
      PCI: vmd: Disable MSI remapping bypass under Xen
      pNFS/flexfiles: Report ENETDOWN as a connection error
      tools/build: Don't pass test log files to linker
      PCI: dwc: ep: Ensure proper iteration over outbound map windows
      objtool: Properly disable uaccess validation
      lockdep: Fix wait context check on softirq for PREEMPT_RT
      dql: Fix dql->limit value when reset.
      thermal/drivers/qoriq: Power down TMU on system suspend
      SUNRPC: rpcbind should never reset the port to the value '0'
      SUNRPC: rpc_clnt_set_transport() must not change the autobind setting
      NFSv4: Treat ENETUNREACH errors as fatal for state recovery
      cifs: Fix establishing NetBIOS session for SMB2+ connection
      cifs: add validation check for the fields in smb_aces
      fbdev: core: tileblit: Implement missing margin clearing for tileblit
      fbcon: Use correct erase colour for clearing in fbcon
      fbdev: fsl-diu-fb: add missing device_remove_file()
      riscv: Allow NOMMU kernels to access all of RAM
      mailbox: use error ret code of of_parse_phandle_with_args()
      ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list
      tracing: Mark binary printing functions with __printf() attribute
      SUNRPC: Don't allow waiting for exiting tasks
      NFS: Don't allow waiting for exiting tasks
      NFSv4: Check for delegation validity in nfs_start_delegation_return_locked()
      fuse: Return EPERM rather than ENOSYS from link()
      cifs: Fix negotiate retry functionality
      cifs: Fix querying and creating MF symlinks over SMB1
      cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES
      s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log
      kconfig: merge_config: use an empty file as initfile
      samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora
      bpf: fix possible endless loop in BPF map iteration
      selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure
      drm/amdgpu: Allow P2P access through XGMI
      ima: process_measurement() needlessly takes inode_lock() on MAY_READ
      net: enetc: refactor bulk flipping of RX buffers to separate function
      scsi: mpi3mr: Add level check to control event logging
      cgroup: Fix compilation issue due to cgroup_mutex not being exported
      dma-mapping: avoid potential unused data compilation warning
      intel_th: avoid using deprecated page->mapping, index fields
      scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices
      nvmem: qfprom: switch to 4-byte aligned reads
      nvmem: core: update raw_len if the bit reading is required
      nvmem: core: verify cell's raw_len
      nvmem: rockchip-otp: add rk3576 variant data
      nvmem: rockchip-otp: Move read-offset into variant-data
      cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist
      phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off
      phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data
      phy: renesas: rcar-gen3-usb2: Move IRQ request in probe
      phy: renesas: rcar-gen3-usb2: Add support to initialize the bus
      i2c: designware: Fix an error handling path in i2c_dw_pci_probe()
      i2c: designware: Use temporary variable for struct device
      i2c: designware: Remove ->disable() callback
      i2c: designware: Uniform initialization flow for polling mode
      gpio: pca953x: fix IRQ storm on system wake up
      gpio: pca953x: Simplify code with cleanup helpers
      gpio: pca953x: Split pca953x_restore_context() and pca953x_save_context()
      macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
      xsched: Add XSched manual
      x86/sev: merge continuous pages into a large range when notifying range enc status changes
      cifs: parse_dfs_referrals: prevent oob on malformed input
      smb: client: fix return value of parse_dfs_referrals()
      smb: client: Fix refcount leak for cifs_sb_tlink
      ceph: fix race condition validating r_parent before applying state
      smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
      NFSv4: Don't clear capabilities that won't be reset
      NFS: Fix the setting of capabilities when automounting a new filesystem
      NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
      NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
      smb3: fix for slab out of bounds on mount to ksmbd
      smb: client: fix potential deadlock when reconnecting channels
      smb: client: add NULL check in automount_fullpath
      smb: client: Avoid race in open_cached_dir with lease breaks
      ub: cdma: jfs 64K page table memory adaptation
      ub: cdma: ELR code refactoring
      ub: cdma: add some log print
      net/mdiobus: Fix potential out-of-bounds read/write access
      net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
      net: phy: clear phydev->devlink when the link is deleted
      netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
      drm/sysfb: Do not dereference NULL pointer in plane reset
      binfmt_misc: restore write access before closing files opened by open_exec()
      RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
      Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
      perf/x86/intel/cstate: Add Clearwater Forest support
      perf/x86/intel/cstate: Add pkg C2 residency counter for Sierra Forest
      perf/x86/intel: Add missing MODULE_DESCRIPTION() lines
      perf/x86/intel/cstate: Switch to new Intel CPU model defines
      irqchip/gic-v4.1: Use local 4_1 ITS to generate VSGI
      ext4: fix e4b bitmap inconsistency reports
      x86/csv: Enhance CMA memory usage reporting for CSV3
      smb: client: fix incomplete backport in cfids_invalidation_worker()
      smb: client: fix potential UAF in smb2_close_cached_fid()
      smb: client: fix memory leak in cifs_construct_tcon()
      cifs: fix memory leak in smb3_fs_context_parse_param error path
      smb: client: fix potential cfid UAF in smb2_query_info_compound
      cifs: client: fix memory leak in smb3_fs_context_parse_param
      net: netpoll: fix incorrect refcount handling causing incorrect cleanup
      ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
      net: ipv6: fix field-spanning memcpy warning in AH output
      Fix SDEI state machine issue during reboot process
      Add sdei interface to check event status
      proc: fix type confusion in pde_set_flags()
      proc: fix missing pde_set_flags() for net proc files
      udp_tunnel: use netdev_warn() instead of netdev_WARN()
      net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ
      net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead
      net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
      net/mlx5: Clean up only new IRQ glue on request_irq() failure
      Bluetooth: MGMT: cancel mesh send timer when hdev removed
      fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
      nbd: defer config unlock in nbd_genl_connect
      nbd: defer config put in recv_work
      md: fix rcu protection in md_wakeup_thread
      nvme-multipath: fix lockdep WARN due to partition scan work
      blk-cgroup: fix possible deadlock while configuring policy
      usbnet: Prevents free active kevent
      scsi: sg: Do not sleep in atomic context
      ima: Handle error code returned by ima_filter_rule_match()
      erofs: avoid infinite loops due to corrupted subpage compact indexes
      scsi: bfa: Double-free fix
      mISDN: hfcpci: Fix warning when deleting uninitialized timer
      jfs: truncate good inode pages when hard link is 0
      mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
      hfsplus: remove mutex_lock check in hfsplus_free_extents
      f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
      mm/khugepaged: use KMEM_CACHE()
      mm/ksm: cleanup mm_slot_entry() invocation
      mm/khugepaged: remove definition of struct khugepaged_mm_slot
      mm/ksm: get mm_slot by mm_slot_entry() when slot is !NULL
      mm/khugepaged: use list_xxx() helper to improve readability
      khugepaged: simplify the allocation of slab caches
      mm/khugepaged: fix comment for default scan sleep duration
      NFSD: free copynotify stateid in nfs4_free_ol_stateid()
      NFSD: fix race between nfsd registration and exports_proc
      ksmbd: fix refcount leak causing resource not released
      NFSD: Define a proc_layoutcommit for the FlexFiles layout type
      platform/x86: intel-uncore-freq: fix all header kernel-doc warnings
      platform/x86/intel: power-domains: Fix error code in tpmi_init()
      platform/x86/intel-uncore-freq: Present unique domain ID per package
      platform/x86/intel-uncore-freq: Fix warning in partitioned system
      platform/x86/intel-uncore-freq: avoid non-literal format string
      Documentation: admin-guide: pm: Add documentation for die_id
      platform/x86/intel-uncore-freq: Add attributes to show die_id
      platform/x86/intel: power-domains: Add interface to get Linux die ID
      Documentation: admin-guide: pm: Add documentation for agent_types
      platform/x86/intel-uncore-freq: Add attributes to show agent types
      mptcp: Fix proto fallback detection with BPF
      memcg: enable asynchronous reclaim for cgroup-v2
      memcg: change CONFIG_MEMCG_V1_RECLAIM to CONFIG_MEMCG_QOS
      x86/kvm: expose CPUID 0xC000_0000 for Zhaoxin "Shanghai" vendor
      perf mem/c2c: Add load store event mapping for Hygon
      riscv kernel upgrade to 6.6.0-135.0.0
      Revert "mango pci hack:broadcast when no MSI source known"
      serial: 8250_core: Remove unneeded ->iotype assignment
      riscv: openeuler_defconfig: Enable PCIE_EDR
      iommu/riscv: Fix inconsistencies with the latest spec revision V2
      Enable gade when iommu has AMO_HWAD cap
      riscv: openeuler_defconfig: Enable more ACPI_APEI configs
      Optimize uaccess for riscv
      Fix k1 boot failed with mmc error
      Add SDHCI and GMAC support for Spacemit K3
      !19710 [OLK-6.6] Batch BAR sizing operations
      !19952  mfs: Add prefetch demo
      !20138 net:nebula-matrix:add protection of consecutive write regs
      !20033  ceph: fix crash in process_v2_sparse_read() for encrypted directories
      !20032  net: atlantic: fix fragment overflow handling in RX path
      !20031  Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
      !20014  xfs: do not propagate ENODATA disk errors into xattr code
      !20015  Fix CVE-2025-40242
      !19960  wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
      !20005  cifs: Fix establishing NetBIOS session for SMB2+ connection
      !20009  ftrace: Fix BPF fexit with livepatch
      !19983  regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
      !19968  EEVDF null pointer
      !19773  bpf, arm64: Do not audit capability check in do_jit()
      !19997  mfs: remove FAROUND event for mfsd demo
      !19942 [virtCCA Live Migration 1]virtcca secure cvm supports live migration
      !20160 v3  CVE-2025-68304
      !20141 urma: Fix the bug of exposing devices fails for host network
      !20148 ubcore: fix route query for container loopback.
      !20120 urma: fix urma_admin agg del eid failed.
      !20028 release urma source when the ub device is removed
      !20017  kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
      !20115  KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
      !20109 uvb: change cis call default poll timeout
      urma: fix the bug for container.
      !20154 merge fix_is_err into OLK-6.6
      Bluetooth: hci_core: lookup hci_conn on RX path on protocol side
      Bluetooth: ISO: don't leak skb in ISO_CONT RX
      Bluetooth: ISO: free rx_skb if not consumed
      Bluetooth: ISO: Use kref to track lifetime of iso_conn
      Bluetooth: SCO: fix sco_conn refcounting on sco_conn_ready
      Bluetooth: SCO: remove the redundant sco_conn_put
      Bluetooth: SCO: Use kref to track lifetime of sco_conn
      Bluetooth: hci_core: Fix not checking skb length on hci_scodata_packet
      urma: fix ubcore_cock NULL pointer check.
      ubcore: fix route query for container loopback.
      net:nebula-matrix:add protection of consecutive write regs
      urma: fix urma_admin agg del eid failed.
      KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer
      !20100 merge OLK-6.6-v6.6.92-backport into OLK-6.6
      uvb: change cis call default poll timeout
      dmaengine: idxd: Fix double free in idxd_setup_wqs()
      dmaengine: idxd: Fix refcount underflow on module unload
      dmaengine: idxd: Remove improper idxd_free
      fs/xattr.c: fix simple_xattr_list()
      firmware: arm_scmi: Account for failed debug initialization
      drm/amdgpu: fix pm notifier handling
      LoongArch: Explicitly specify code model in Makefile
      usb: typec: ucsi: displayport: Fix deadlock
      mm/page_alloc: fix race condition in unaccepted memory handling
      dmaengine: idxd: Refactor remove call with idxd_cleanup() helper
      dmaengine: idxd: fix memory leak in error handling path of idxd_pci_probe
      dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove call
      dmaengine: idxd: Add missing cleanups in cleanup internals
      dmaengine: idxd: Add missing cleanup for early error out in idxd_setup_internals
      dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups
      dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines
      dmaengine: idxd: fix memory leak in error handling path of idxd_setup_wqs
      dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy
      net: qede: Initialize qede_ll_ops with designated initializer
      smb: client: fix memory leak during error handling for POSIX mkdir
      scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer
      phy: renesas: rcar-gen3-usb2: Set timing registers only once
      phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind
      phy: Fix error handling in tegra_xusb_port_init
      phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking
      tracing: samples: Initialize trace_array_printk() with the correct function
      Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer()
      Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges
      hv_netvsc: Remove rmsg_pgcnt
      hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages
      ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera
      ALSA: usb-audio: Add sample rate quirk for Audioengine D1
      ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2()
      drm/amd/display: Avoid flooding unnecessary info messages
      drm/amd/display: Correct the reply value when AUX write incomplete
      LoongArch: Fix MAX_REG_OFFSET calculation
      udf: Make sure i_lenExtents is uptodate on inode eviction
      NFSv4/pnfs: Reset the layout state after a layoutreturn
      tsnep: fix timestamping with a stacked DSA driver
      tsnep: Inline small fragments within TX descriptor
      octeontx2-af: Fix CGX Receive counters
      net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW capability
      octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy
      qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd()
      ALSA: sh: SND_AICA should depend on SH_DMA_API
      nvme-pci: make nvme_pci_npages_prp() __always_inline
      net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING
      ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info
      ALSA: seq: Fix delivery of UMP events to group ports
      net: mctp: Ensure keys maintain only one ref to corresponding dev
      tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing
      tools: ynl: ethtool.py: Output timestamping statistics from tsinfo-get operation
      Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags
      spi: loopback-test: Do not split 1024-byte hexdumps
      HID: thrustmaster: fix memory leak in thrustmaster_interrupts()
      iio: chemical: sps30: use aligned_s64 for timestamp
      iio: adc: ad7768-1: Fix insufficient alignment of timestamp.
      Revert "drm/amd: Stop evicting resources on APUs in suspend"
      drm/amd: Add Suspend/Hibernate notification callback support
      drm/amdgpu: trigger flr_work if reading pf2vf data failed
      drm/amdgpu: Fix the runtime resume failure issue
      drm/amd: Stop evicting resources on APUs in suspend
      iio: adc: ad7266: Fix potential timestamp alignment issue.
      firmware: arm_scmi: Fix timeout checks on polling path
      firmware: arm_scmi: Track basic SCMI communication debug metrics
      firmware: arm_scmi: Add support for debug metrics at the interface
      firmware: arm_scmi: Add message dump traces for bad and unexpected replies
      firmware: arm_scmi: Add helper to trace bad messages
      tpm: tis: Double the timeout B to 4s
      cgroup/cpuset: Extend kthread_is_per_cpu() check to all PF_NO_SETAFFINITY tasks
      platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection
      platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie 14XA (GX4HRXL)
      binfmt_elf: Move brk for static PIE even if ASLR disabled
      binfmt_elf: Honor PT_LOAD alignment for static PIE
      binfmt_elf: Calculate total_size earlier
      selftests/exec: Build both static and non-static load_address tests
      binfmt_elf: Leave a gap between .bss and brk
      selftests/exec: load_address: conform test to TAP format output
      binfmt_elf: elf_bss no longer used by load_elf_binary()
      binfmt_elf: Support segments with 0 filesz and misaligned starts
      fs/xattr.c: fix simple_xattr_list to always include security.* xattrs
      !20080 merge OLK-6.6 into OLK-6.6
      ubcore: fix netdev size limit error.
      !19254 merge refs/pull/19254/head into OLK-6.6
      drivers/ub/sentry: release urma source when the ub device is removed
      ceph: fix crash in process_v2_sparse_read() for encrypted directories
      net: atlantic: fix fragment overflow handling in RX path
      Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
      kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
      gfs2: Fix unlikely race in gdlm_put_lock
      gfs2: Add proper lockspace locking
      xfs: do not propagate ENODATA disk errors into xattr code
      ftrace: Fix BPF fexit with livepatch
      cifs: Fix establishing NetBIOS session for SMB2+ connection
      mfs: remove FAROUND event for mfsd demo
      [virtCCA Live Migration 1]virtcca secure cvm supports live migration
      regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
      sched: Fix kabi breakage of struct cfs_rq for zero_vruntime
      sched/eevdf: Fix min_vruntime vs avg_vruntime
      sched/core: Add comment explaining force-idle vruntime snapshots
      sched/fair: Forfeit vruntime on yield
      Revert "sched/fair: Only increment deadline once on yield"
      sched: Fix kabi breakage of struct cfs_rq for min_vruntime_copy
      sched/eevdf: Remove min_vruntime_copy
      sched: Fix kabi breakage of struct sched_entity for on_rq and rel_deadline
      sched/fair: Avoid re-setting virtual deadline on 'migrations'
      sched/balancing: Change comment formatting to not overlap Git conflict marker lines
      wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
      mfs: Add prefetch demo
      bpf, arm64: Do not audit capability check in do_jit()
      PCI: Batch BAR sizing operations
      bpf: Do not audit capability check in do_jit()
      usb: usbtmc: Fix read_stb function and get_stb ioctl
      staging: axis-fifo: fix TX handling on copy_from_user() failure
      staging: axis-fifo: flush RX FIFO on read errors
      staging: axis-fifo: fix maximum TX packet length check
      ksmbd: fix stream write failure
      netfilter: ipset: Remove unused htable_bits in macro ahash_region
      Documentation: x86/bugs/its: Add ITS documentation
      x86/speculation: Remove the extra #ifdef around CALL_NOSPEC
      x86/speculation: Add a conditional CS prefix to CALL_NOSPEC
      x86/speculation: Simplify and make CALL_NOSPEC consistent
      x86/bhi: Do not set BHI_DIS_S in 32-bit mode
      x86/bpf: Add IBHF call at end of classic BPF
      x86/bpf: Call branch history clearing sequence on exit
      io_uring: ensure deferred completions are posted for multishot
      io_uring: always arm linked timeouts prior to issue
      do_umount(): add missing barrier before refcount checks in sync case
      drm/panel: simple: Update timings for AUO G101EVN010
      MIPS: Fix MAX_REG_OFFSET
      iio: adc: dln2: Use aligned_s64 for timestamp
      iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64
      types: Complement the aligned types with signed 64-bit one
      iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer.
      iio: accel: adxl367: fix setting odr for activity time update
      usb: usbtmc: Fix erroneous generic_read ioctl return
      usb: usbtmc: Fix erroneous wait_srq ioctl return
      usb: usbtmc: Fix erroneous get_stb ioctl error returns
      USB: usbtmc: use interruptible sleep in usbtmc_read
      usb: typec: ucsi: displayport: Fix NULL pointer access
      usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
      usb: host: tegra: Prevent host controller crash when OTG port is used
      usb: gadget: Use get_status callback to set remote wakeup capability
      usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
      usb: gadget: f_ecm: Add get_status callback
      usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version
      usb: cdnsp: Fix issue with resuming from L1
      ocfs2: stop quota recovery before disabling quotas
      ocfs2: implement handshaking with ocfs2 recovery thread
      ocfs2: switch osb->disable_recovery to enum
      clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
      xenbus: Use kref to track req lifetime
      xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it
      smb: client: Avoid race in open_cached_dir with lease breaks
      usb: uhci-platform: Make the clock really optional
      drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush
      drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush
      drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush
      drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush
      drm/amd/display: Copy AUX read reply data whenever length > 0
      drm/amd/display: Fix wrong handling for AUX_DEFER case
      drm/amd/display: Remove incorrect checking in dmub aux handler
      drm/amd/display: Fix the checking condition in dmub aux handling
      iio: adis16201: Correct inclinometer channel resolution
      iio: adc: rockchip: Fix clock initialization sequence
      iio: adc: ad7606: fix serial register access
      drm/amd/display: Shift DMUB AUX reply command if necessary
      staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
      staging: axis-fifo: Remove hardware resets for user errors
      staging: iio: adc: ad7816: Correct conditional logic for store mode
      Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
      Input: synaptics - enable SMBus for HP Elitebook 850 G1
      Input: synaptics - enable InterTouch on Dell Precision M3800
      Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
      Input: synaptics - enable InterTouch on Dynabook Portege X30-D
      Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller
      Input: xpad - fix Share button on Xbox One controllers
      Input: mtk-pmic-keys - fix possible null pointer dereference
      Input: cyttsp5 - fix power control issue on wakeup
      Input: cyttsp5 - ensure minimum reset pulse width
      net: dsa: b53: fix learning on VLAN unaware bridges
      net: dsa: b53: always rejoin default untagged VLAN on bridge leave
      net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
      net: dsa: b53: fix flushing old pvid VLAN on pvid change
      net: dsa: b53: fix clearing PVID of a port
      net: dsa: b53: allow leaky reserved multicast
      netfilter: ipset: fix region locking in hash types
      can: gw: fix RCU/BH usage in cgw_create_job()
      can: mcp251xfd: fix TDC setting for low data bit rates
      net: ethernet: mtk_eth_soc: reset all TX queues on DMA free
      netdevice: add netdev_tx_reset_subqueue() shorthand
      sch_htb: make htb_deactivate() idempotent
      ksmbd: prevent out-of-bounds stream writes by validating *pos
      can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
      wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
      can: mcan: m_can_class_unregister(): fix order of unregistration calls
      arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2
      dm: add missing unlock on in dm_keyslot_evict()
      !20054 merge topo_kernel_merge_1_1 into OLK-6.6
      !19916 merge OLK-6.6_new into OLK-6.6
      !20030 merge topo_kernel_merge into OLK-6.6
      urma: ubcore support expose/unexpose dev and eid set commands.
      urma: support uvs query chip_id.
      urma: add create, delete agg_dev and get name of agg_dev.
      urma: adapt to new topo info for ubcore/ubagg.
      !19992 merge patch-1767753584 into OLK-6.6
      !19763 merge patch-1766378735 into OLK-6.6
      Revert "NFS: fix up nfs_release_folio() to try to release the page"
      !19697 merge refs/pull/19697/head into OLK-6.6
      !19844 merge patch-1766802317 into OLK-6.6
      !19712 merge refs/pull/19712/head into OLK-6.6
      !19653 merge refs/pull/19653/head into OLK-6.6
      !19650 merge refs/pull/19650/head into OLK-6.6
      !19809 merge patch-1766626818 into OLK-6.6
      !19839 merge patch-1766740817 into OLK-6.6
      !19924 merge patch-1767513707 into OLK-6.6
      !19925 merge patch-1767513733 into OLK-6.6
      !18476 merge refs/pull/18476/head into OLK-6.6
      !19871 merge patch-1766998564 into OLK-6.6
      !19870 merge patch-1766998524 into OLK-6.6
      !19868 merge patch-1766998223 into OLK-6.6
      !19831 merge patch-1766714417 into OLK-6.6
      !19830 merge patch-1766713816 into OLK-6.6
      !19829 merge patch-1766713004 into OLK-6.6
      !19828 merge patch-1766712979 into OLK-6.6
      !19827 merge patch-1766712955 into OLK-6.6
      !19826 merge patch-1766712919 into OLK-6.6
      !19711 merge refs/pull/19711/head into OLK-6.6
      !19810 merge patch-1766626870 into OLK-6.6
      !19843 merge patch-1766799391 into OLK-6.6
      !19909 merge patch-1767491328 into OLK-6.6
      !19799 merge patch-1766495417 into OLK-6.6
      !19807 merge patch-1766567019 into OLK-6.6
      !19895 merge patch-1767085921 into OLK-6.6
      !19926 merge patch-1767515451 into OLK-6.6
      !19656 merge refs/pull/19656/head into OLK-6.6
      !19923 merge patch-1767513671 into OLK-6.6
      !19928 merge patch-1767515719 into OLK-6.6
      !19859 merge patch-1766977633 into OLK-6.6
      !19860 merge patch-1766977668 into OLK-6.6
      !19884 merge patch-1767076134 into OLK-6.6
      !19913 merge patch-1767493335 into OLK-6.6
      !19914 merge patch-1767493378 into OLK-6.6
      !19915 merge patch-1767493397 into OLK-6.6
      mfs: Avoid UAF on cache object when anon_file is release
      mfs: avoid deadlock when the cache layer is modified
      mfs: remove FAROUND event to avoid context switch during map_pages
      !19612 merge refs/pull/19612/head into OLK-6.6
      !19733 merge refs/pull/19733/head into OLK-6.6
      !19729 merge refs/pull/19729/head into OLK-6.6
      !19720 merge refs/pull/19720/head into OLK-6.6
      usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer
      nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
      bpf: Free special fields when update [lru_,]percpu_hash maps
      !19846 merge patch-1766818825 into OLK-6.6
      !19904 merge patch-1767162173 into OLK-6.6
      !19845 merge patch-1766818524 into OLK-6.6
      !19797 merge patch-1766494034 into OLK-6.6
      !19796 merge patch-1766494001 into OLK-6.6
      !19800 merge patch-1766541023 into OLK-6.6
      !19847 merge patch-1766820323 into OLK-6.6
      !19875 merge patch-1767010708 into OLK-6.6
      !19761 merge patch-1766371001 into OLK-6.6
      !19619 merge refs/pull/19619/head into OLK-6.6
      !19912 merge patch-1767493281 into OLK-6.6
      net_sched: prio: fix a race in prio_tune()
      can: j1939: add missing calls in NETDEV_UNREGISTER notification handler
      can: j1939: implement NETDEV_UNREGISTER notification handler
      Bluetooth: hci_core: Disable works on hci_unregister_dev
      iomap: fix dirty range tracking in iomap_folio_mkwrite_iter
      mm: mem_reliable: prevent excessive direct reclaim loops
      mm: mem_reliable: use percise count during limit check
      mm: mem_reliable: fix task reliable counter during fork
      !19793 merge patch-1766492701 into OLK-6.6
      !19823 merge tmp into OLK-6.6
      !19888 merge ubase into OLK-6.6
      !19898 merge OLK_6.6_velinux_1 into OLK-6.6
      !19901 merge OLK-6.6 into OLK-6.6
      NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
      obmm: Register resource for every memdev
      !19822 merge master into OLK-6.6
      !19811 merge OLK-6.6 into OLK-6.6
      !19818 merge OLK-6.6 into OLK-6.6
      !19854 merge OLK-6.6 into OLK-6.6
      !19886 merge OLK-6.6 into OLK-6.6
      ub: ubase: fix ubase activate/deactivate resp timeout
      urma inclusion category: bugfix bugzilla: https://gitee.com/openeuler/release-management/issues/ID3WJX
      bpf: Fix stackmap overflow check in __bpf_get_stackid()
      bpf: Refactor stack map trace depth calculation into helper function
      net: unic: Fix ethtool configuration error issue.
      ub: ubase: Resolve mailbox timeout issue.
      scsi: qla2xxx: Clear cmds after chip reset
      ub: udma: bugfix related to rx close.
      isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
      !19763 ub: udma: bugfix related to spin lock.
      futex: Don't leak robust_list pointer on exec race
      Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
      ub: udma: bugfix related to spin lock.
      Bluetooth: hci_event: validate skb length for unknown CC opcode
      x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
      tracing: Fix memory leaks in create_field_var()
      ub: udma: Bugfix related to 2M hugepage.
      ppp: fix race conditions in ppp_fill_forward_path
      scsi: qla2xxx: Fix improper freeing of purex item
      coresight: ETR: Fix ETR buffer use-after-free issue
      arm-spe: Fix typos in the arm_spe_to_htpg()
      mm/shmem: Fix order passing error in the shmem_alloc_folio()
      arm64/mpam: Synchronize MPAM Partid to kernel mode
      !19477 iommu: set the default iommu-dma mode as non-strict
      ext4: xattr: fix null pointer deref in ext4_raw_inode()
      jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted
      fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
      ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
      ext4: refresh inline data size before write operations
      hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
      ub:ubfi:skipped address of subtable 0 in ubrt
      ub:ubus delete undefined class code
      !19760 ub:ubfi:skipped address of subtable 0 in ubrt
      !19758 ub: udma: bugfix related to rx close.
      !19759 ub: ubase: fix ubase activate/deactivate resp timeout
      ub:ubfi:skipped address of subtable 0 in ubrt
      ub: cdma: add ioctl logs and error codes
      ub: ubase: fix ubase activate/deactivate resp timeout
      ub:ubus: fix ub_get_bus_controller getting null
      ub:ubus: Move the decoder's queue operations to hisi-ubus
      ub:ubus: hi_msg_sync_wait first pull cq
      ub: udma: bugfix related to rx close.
      !19752 Repair driver reset work-q uaf
      perf/x86/intel: Fix KASAN global-out-of-bounds warning
      mm: migrate: add dma copy offloading for hugetlb
      !19755 obmm: Register resource for every memdev
      !19756 ub:ubus delete undefined class code
      !19754 ub:ubus: Move the decoder's queue operations to hisi-ubus
      !19757 ub: cdma: add ioctl logs and error codes
      !19750 ub: udma: Bugfix related to 2M hugepage.
      !19749 ub: unic & ubase: Fix ethtool configuration error issue and resolve mailbox timeout
      !19697  iomap: fix dirty range tracking in iomap_folio_mkwrite_iter
      nvmet-fc: avoid scheduling association deletion twice
      ub: cdma: add ioctl logs and error codes
      ub:ubus delete undefined class code
      obmm: Register resource for every memdev
      Repair driver reset work-q uaf
      bpf: Fix invalid prog->stats access when update_effective_progs fails
      ub:ubus: fix ub_get_bus_controller getting null
      ub:ubus: Move the decoder's queue operations to hisi-ubus
      ftrace: Fix softlockup in ftrace_module_enable
      ub:ubus: hi_msg_sync_wait first pull cq
      bpf: account for current allocated stack depth in widen_imprecise_scalars()
      bpf: Add bpf_prog_run_data_pointers()
      iommu: set the default iommu-dma mode as non-strict
      ub: udma: Bugfix related to 2M hugepage.
      net: unic: Fix ethtool configuration error issue.
      ub: ubase: Resolve mailbox timeout issue.
      删除文件 .本项目已经正式迁移至AtomGit平台/README.md
      update README.
      timers: Fix NULL function pointer race in timer_shutdown_sync()
      x86/fpu: Ensure XFD state on signal delivery
      add migrate not
      usb: storage: Fix memory leak in USB bulk transport
      scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
      nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
      nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
      usb: storage: sddr55: Reject out-of-bound new_pba
      usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget
      wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
      be2net: pass wrb_params in case of OS2BMC
      driver/coda: Fix possible NULL pointer dereference error.
      VirtCCA supports Ascend 310P in CoDA scenarios
      NFSD: Fix crash in nfsd4_read_release()
      iommu: set the default iommu-dma mode as non-strict
      configs: Add bus lock detect config in openeuler_config
      x86/split_lock: Add support for Zhaoxin
      x86/split_lock: Simplify reenabling
      x86/split_lock: Fix the delayed detection logic
      x86/split_lock: Move Split and Bus lock code to a dedicated file
      !19763 ub: udma: bugfix related to spin lock.
      ub: udma: bugfix related to spin lock.
      !21886 urma: fix peer reconnection notification after ubagg failover
      urma: fix peer reconnection notification after ubagg failover
      urma: add configurable retransmission count limit
      urma: fix tjetty creation anomaly in the first connection creation
      !21879 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-147.0.0 to 6.6.0-148.0.0
      urma: fix kernel irq profiling
      xSched: remove redundant lookup in alloc_ctx_from_vstream to enforce allocation semantics
      xSched/cgroup: prevent to init xse when xcu cgroup is disabled
      urma: fix the panic issue caused by ipourma abnormal exit
      net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
      net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume
      net: macb: Introduce gem_init_rx_ring()
      net: macb: queue tie-off or disable during WOL suspend
      net: macb: Shuffle the tx ring before enabling tx
      net: macb: Fix tx/rx malfunction after phy link down and up
      hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race
      net: openvswitch: Avoid releasing netdev before teardown completes
      ext4: fix error message when rejecting the default hash
      ext4: filesystems without casefold feature cannot be mounted with siphash
      Revert "iommu/amd: Skip enabling command/event buffers for kdump"
      firmware: arm_scmi: Fix unused notifier-block in unregister
      tty: fix tty_port_tty_*hangup() kernel-doc
      pwm: stm32: Always program polarity
      virtio_console: fix order of fields cols and rows
      mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result()
      mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs()
      mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration()
      mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions()
      mm/damon/tests/core-kunit: handle alloc failures on damos_test_filter_out()
      mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate()
      mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of()
      mm/damon/tests/core-kunit: handle memory failure from damon_test_target()
      mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two()
      mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of()
      mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at()
      mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions()
      mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter()
      mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ()
      net: Allow to use SMP threads for backlog NAPI.
      net: Remove conditional threaded-NAPI wakeup based on task state.
      sched/fair: Small cleanup to sched_balance_newidle()
      mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions()
      mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail()
      media: mediatek: vcodec: Use spinlock for context list protection lock
      media: amphion: Remove vpu_vb_is_codecconfig
      media: amphion: Make some vpu_v4l2 functions static
      media: amphion: Add a frame flush mode for decoder
      KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit
      powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages
      mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize()
      mm/balloon_compaction: we cannot have isolated pages in the balloon list
      media: verisilicon: Fix CPU stalls on G2 bus error
      media: verisilicon: g2: Use common helpers to compute chroma and mv offsets
      media: verisilicon: Store chroma and motion vectors offset
      f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes()
      f2fs: use global inline_xattr_slab instead of per-sb slab cache
      f2fs: fix to propagate error from f2fs_enable_checkpoint()
      f2fs: fix to avoid updating compression context during writeback
      f2fs: drop inode from the donation list when the last file is closed
      f2fs: keep POSIX_FADV_NOREUSE ranges
      f2fs: remove unused GC_FAILURE_PIN
      ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
      powerpc/64s/radix/kfence: map __kfence_pool at page granularity
      drm/mediatek: Fix probe resource leaks
      drm/mediatek: Fix probe memory leak
      drm/amdgpu: Forward VMID reservation errors
      net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration
      pmdomain: imx: Fix reference count leak in imx_gpc_probe()
      pmdomain: Use device_get_match_data()
      wifi: mac80211: Discard Beacon frames to non-broadcast address
      lockd: fix vfs_test_lock() calls
      mptcp: fallback earlier on simult connection
      PCI: brcmstb: Fix disabling L0s capability
      ARM: dts: microchip: sama7g5: fix uart fifo size to 32
      gpiolib: acpi: Add quirk for Dell Precision 7780
      NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap
      scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error
      usb: ohci-nxp: fix device leak on probe failure
      usb: ohci-nxp: Use helper function devm_clk_get_enabled()
      mm/ksm: fix exec/fork inheritance support for prctl
      wifi: mt76: Fix DTS power-limits on little endian systems
      btrfs: don't rewrite ret from inode_permission
      gfs2: fix freeze error handling
      jbd2: fix the inconsistency between checksum and data in memory for journal sb
      ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
      ALSA: wavefront: Clear substream pointers on close
      ALSA: wavefront: Use guard() for spin locks
      ALSA: wavefront: Fix integer overflow in sample size validation
      ALSA: wavefront: Use standard print API
      drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb
      drm/msm/dpu: Add missing NULL pointer check for pingpong interface
      drm/mgag200: Fix big-endian support
      drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse()
      drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg()
      drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers
      drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma
      net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open()
      net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
      net: usb: sr9700: fix incorrect command used to write single register
      nfsd: Drop the client reference in client_states_open()
      LoongArch: BPF: Zero-extend bpf_tail_call() index
      fjes: Add missing iounmap in fjes_hw_init()
      samples/ftrace: Adjust LoongArch register restore order in direct calls
      tools/mm/page_owner_sort: fix timestamp comparison for stable sorting
      idr: fix idr_alloc() returning an ID out of range
      kasan: refactor pcpu kasan vmalloc unpoison
      compiler_types.h: add "auto" as a macro for "__auto_type"
      LoongArch: Use unsigned long for _end and _text
      LoongArch: Use __pmd()/__pte() for swap entry conversions
      LoongArch: Fix build errors for CONFIG_RANDSTRUCT
      LoongArch: Add new PCI ID for pci_fixup_vgadev()
      media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init()
      media: i2c: adv7842: Remove redundant cancel_delayed_work in probe
      media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe
      media: amphion: Cancel message work before releasing the VPU core
      media: vpif_display: fix section mismatch
      media: vpif_capture: fix section mismatch
      media: videobuf2: Fix device reference leak in vb2_dc_alloc error path
      media: verisilicon: Protect G2 HEVC decoder against invalid DPB index
      media: TDA1997x: Remove redundant cancel_delayed_work in probe
      media: samsung: exynos4-is: fix potential ABBA deadlock on init
      media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled
      media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread()
      media: cec: Fix debugfs leak on bus_register() failure
      fbdev: tcx.c fix mem_map to correct smem_start offset
      fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing
      fbdev: gbefb: fix to use physical address instead of dma address
      dm-bufio: align write boundary on physical block size
      dm-ebs: Mark full buffer dirty even on partial write
      firmware: stratix10-svc: Add mutex in stratix10 memory management
      media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()
      powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION
      parisc: entry: set W bit for !compat tasks in syscall_restore_rfi()
      parisc: entry.S: fix space adjustment on interruption for 64-bit userspace
      media: rc: st_rc: Fix reset control resource leak
      mfd: max77620: Fix potential IRQ chip conflict when probing two devices
      mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup
      clk: samsung: exynos-clkout: Assign .num before accessing .hws
      leds: leds-lp50xx: Enable chip before any communication
      leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs
      leds: leds-lp50xx: Allow LED 0 to be added to module bank
      powerpc, mm: Fix mprotect on book3s 32-bit
      PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths
      HID: logitech-dj: Remove duplicate error logging
      iommu: disable SVA when CONFIG_X86 is set
      iommu/tegra: fix device leak on probe_device()
      iommu/sun50i: fix device leak on of_xlate()
      iommu/qcom: fix device leak on of_xlate()
      iommu/omap: fix device leaks on probe_device()
      iommu/mediatek: fix device leak on of_xlate()
      iommu/mediatek-v1: fix device leaks on probe()
      iommu/mediatek-v1: fix device leak on probe_device()
      iommu/ipmmu-vmsa: fix device leak on of_xlate()
      iommu/exynos: fix device leak on of_xlate()
      iommu/apple-dart: fix device leak on of_xlate()
      iommu/amd: Fix pci_segment memleak in alloc_pci_segment()
      ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment.
      ASoC: qcom: q6adm: the the copp device only during last instance
      ASoC: qcom: q6asm-dai: perform correct state check before closing
      ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr
      ASoC: stm32: sai: fix OF node leak on probe
      ASoC: stm32: sai: fix clk prepare imbalance on probe failure
      ASoC: stm32: sai: fix device leak on probe
      ntfs: Do not overwrite uptodate pages
      selftests/ftrace: traceonoff_triggers: strip off names
      RDMA/bnxt_re: fix dma_free_coherent() pointer
      RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation
      ksmbd: Fix memory leak in get_file_all_info()
      RDMA/bnxt_re: Fix to use correct page size for PDE table
      RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send
      RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db()
      RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr()
      RDMA/efa: Remove possible negative shift
      RDMA/irdma: avoid invalid read in irdma_net_event
      net: rose: fix invalid array index in rose_kill_by_device()
      net: stmmac: fix the crash issue for zero copy XDP_TX action
      octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"
      platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing
      net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct
      net: dsa: b53: skip multicast entries for fdb_dump()
      firewire: nosy: Fix dma_free_coherent() size
      genalloc.h: fix htmldocs warning
      selftests: net: fix "buffer overflow detected" for tap.c
      amd-xgbe: reset retries and mode on RX adapt failures
      platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic
      platform/x86: msi-laptop: add missing sysfs_remove_group()
      net: openvswitch: Avoid needlessly taking the RTNL on vport destroy
      net: mdio: aspeed: add dummy read to avoid read-after-write issue
      Bluetooth: btusb: revert use of devm_kzalloc in btusb
      i40e: fix scheduling in set_rx_mode
      wifi: mac80211: do not use old MBSSID elements
      iommu/mediatek: fix use-after-free on probe deferral
      ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32
      hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU
      hwmon: (w83791d) Convert macros to functions to avoid TOCTOU
      hwmon: (max16065) Use local variable to avoid TOCTOU
      i2c: amd-mp2: fix reference leak in MP2 PCI device
      platform/x86: intel: chtwc_int33fe: don't dereference swnode args
      rpmsg: glink: fix rpmsg device leak
      ub: udma: fix a bug related to get tp list.
      perf/core: Fix race between perf_event_exit_task and perf_pending_task
      userfaultfd: fix kabi breakage due to struct userfaultfd_ctx
      mm/mremap: fix WARN with uffd that has remap events disabled
      mm: clear uffd-wp PTE/PMD state on mremap()
      userfaultfd: move userfaultfd_ctx struct to header file
      urma: add timeout mechanism for TP state waiting loop
      ub: udma: bugfix related to stars jfc db.
      net: usb: kaweth: validate USB endpoints
      arm64: mm: fix pass user prot to ioremap_prot in generic_access_phys
      RDMA/hns: Support setting GSI QP SL
      RDMA/hns: Fix warning in poll cq direct mode
      RDMA/hns: Fix missing CQE when UD QP use different SL
      ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz
      xsk: introduce helper to determine rxq->frag_size
      drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse()
      urma: fix log implementation in urma kmod
      urma: fix deactivate tp failure under RM share TP mode
      net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
      smb: client: fix krb5 mount with username option
      io_uring/poll: fix multishot recv missing EOF on wakeup race
      io_uring/poll: improve readability of poll reference decrementing
      LoongArch: efi: avoid double calling set_virtual_map()
      LoongArch: Fix the improper handling of the set_virtual_map's return value
      LoongArch: Disable instrumentation for setup_ptwalker()
      LoongArch: Remove some code if kasan_arch_is_ready() is false
      LoongArch: entry: Migrate ret_from_fork() to C
      LoongArch: Clarify 3 MSG interrupt features
      LoongArch: Always select HAVE_VIRT_CPU_ACCOUNTING_GEN
      drivers/amdgpu: amd rx550 should emit 10 fences after run a command
      LoongArch: Fix AP booting issue in VM mode
      LoongArch: Increase COMMAND_LINE_SIZE up to 4096
      LoongArch: Relax memory ordering for atomic operations
      pci/quirks: 2k3000: set discrete GPU as default boot device if present
      drm/amdgpu: Make eleven EOP packet for GFX10_0/GFX11_0 have real content
      urma: fix of adapt to bondp_import
      ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
      ACPI: APEI: GHES: Don't send SIGBUS to kernel threads on ARM HW errors
      netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
      net/sched: teql: Fix double-free in teql_master_xmit
      netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
      netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()
      netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()
      udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
      ipv6: add NULL checks for idev in SRv6 paths
      net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
      sunrpc: fix cache_request leak in cache_release
      urma: fix psn exchange anomaly when import jfr
      mfs: fix race condition issue in try_hook_fd()
      drivers/loongson-pwm: sync master patch to fix pwm driver
      LoongArch:stmmac:fix mdc too high issues.
      LoongArch: gpio: read/write mode to 8bit in BIT_CTRL_MODE
      drivers/pwm: export symbol for pwm_add_table
      LoongArch: config: Revert CONFIG_RTC_DRV_EFI back to 'm'
      urma: fix psn exchange anomaly under share_tp mode
      RNP: NET: Update driver to 1.0.0
      RNPGBE: NET: Update driver to 1.0.0
      net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown
      intel_th: fix device leak on output open()
      usb: gadget: lpc32xx_udc: fix clock imbalance in error path
      Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
      efi/cper: Fix cper_bits_to_str buffer handling and return value
      soc: amlogic: canvas: fix device leak on lookup
      soc: qcom: ocmem: fix device leak on lookup
      tracing: Fix fixed array of synthetic event
      amba: tegra-ahb: Fix device leak on SMMU enable
      crypto: caam - Add check for kcalloc() in test_len()
      selftests: openvswitch: Fix escape chars in regexp.
      drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
      s390/ipl: Clear SBP flag when bootprog is set
      btrfs: don't log conflicting inode if it's a dir moved in the current transaction
      svcrdma: return 0 on success from svc_rdma_copy_inline_range
      nfsd: Mark variable __maybe_unused to avoid W=1 build break
      net/handshake: restore destructor on submit failure
      r8169: fix RTL8117 Wake-on-Lan in DASH mode
      xfs: fix a memory leak in xfs_buf_item_init()
      KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits
      KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN)
      KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN
      KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation
      KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN
      KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE
      KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn()
      KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0
      parisc: Do not reprogram affinitiy on ASP chip
      scs: fix a wrong parameter in __scs_magic
      platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver
      KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI)
      ocfs2: fix kernel BUG in ocfs2_find_victim_chain
      media: vidtv: initialize local pointers upon transfer of memory ownership
      tools/testing/nvdimm: Use per-DIMM device handle
      f2fs: fix return value of f2fs_recover_fsync_data()
      f2fs: fix age extent cache insertion skip on counter overflow
      f2fs: invalidate dentry cache on failed whiteout creation
      f2fs: fix to avoid updating zero-sized extent in extent cache
      f2fs: ensure node page reads complete before f2fs_put_super() finishes
      NFSD: use correct reservation type in nfsd4_scsi_fence_client
      scsi: aic94xx: fix use-after-free in device removal path
      cpufreq: nforce2: fix reference count leak in nforce2
      cpuidle: governors: teo: Drop misguided target residency check
      intel_th: Fix error handling in intel_th_output_open
      char: applicom: fix NULL pointer dereference in ac_ioctl
      usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc()
      usb: dwc3: keep susphy enabled during exit to avoid controller faults
      usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe
      usb: phy: isp1301: fix non-OF device reference imbalance
      usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal
      USB: lpc32xx_udc: Fix error handling in probe
      phy: broadcom: bcm63xx-usbh: fix section mismatches
      media: pvrusb2: Fix incorrect variable used in trace message
      usb: usb-storage: Maintain minimal modifications to the bcdDevice range.
      media: v4l2-mem2mem: Fix outdated documentation
      jbd2: use a weaker annotation in journal handling
      jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key
      ext4: fix incorrect group number assertion in mb_check_buddy
      ktest.pl: Fix uninitialized var in config-bisect.pl
      kallsyms: Fix wrong "big" kernel symbol type read from procfs
      floppy: fix for PAGE_SIZE != 4KB
      block: rate-limit capacity change info log
      s390/dasd: Fix gendisk parent after copy pair swap
      lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit
      mmc: sdhci-msm: Avoid early clock doubling during HS400 transition
      vhost/vsock: improve RCU read sections around vhost_vsock_get()
      block: rnbd-clt: Fix signedness bug in init_dev()
      platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks
      nvme-fc: don't hold rport lock when putting ctrl
      i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware
      libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map
      serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
      usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive.
      usb: xhci: limit run_graceperiod for only usb 3.0 devices
      iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains
      usbip: Fix locking bug in RT-enabled kernels
      exfat: fix remount failure in different process environments
      reset: fix BIT macro reference
      via_wdt: fix critical boot hang due to unnamed resource allocation
      fuse: Invalidate the page cache after FOPEN_DIRECT_IO write
      fuse: Always flush the page cache before FOPEN_DIRECT_IO write
      scsi: qla2xxx: Use reinit_completion on mbx_intr_comp
      scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive
      scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled
      powerpc/addnote: Fix overflow on 32-bit builds
      clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4
      ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
      firmware: imx: scu-irq: Init workqueue before request mbox channel
      ipmi: Fix __scan_channels() failing to rescan channels
      ipmi: Fix the race between __scan_channels() and deliver_response()
      ALSA: usb-mixer: us16x08: validate meter packet indices
      ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path
      ALSA: vxpocket: Fix resource leak in vxpocket_probe error path
      net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
      dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml
      mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig
      spi: fsl-cpm: Check length parity before switching to 16 bit mode
      can: gs_usb: gs_can_open(): fix error handling
      Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table
      Input: ti_am335x_tsc - fix off-by-one error in wire_order validation
      HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
      ksmbd: fix buffer validation by including null terminator size in EA length
      ksmbd: skip lock-range check on equal size to avoid size==0 underflow
      block: rnbd-clt: Fix leaked ID in init_dev()
      spi: cadence-quadspi: Fix clock disable on probe failure path
      x86/xen: Fix sparse warning in enlighten_pv.c
      x86/xen: Move Xen upcall handler
      drm/panel: sony-td4353-jdi: Enable prepare_prev_first
      MIPS: Fix a reference leak bug in ip22_check_gio()
      hwmon: (tmp401) fix overflow caused by default conversion rate value
      hwmon: (ibmpex) fix use-after-free in high/low store
      net: enetc: do not transmit redirected XDP frames when the link is down
      net/handshake: duplicate handshake cancellations leak socket
      net/mlx5: Serialize firmware reset with devlink
      net/mlx5: Skip HotPlug check on sync reset using hot reset
      net/mlx5: fw_tracer, Handle escaped percent properly
      net/mlx5: Drain firmware reset in shutdown callback
      net/mlx5: fw reset, clear reset requested on drain_fw_reset
      iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
      netfilter: nf_tables: pass context structure to nft_parse_register_load
      nfc: pn533: Fix error code in pn533_acr122_poweron_rdr()
      caif: fix integer underflow in cffrml_receive()
      broadcom: b44: prevent uninitialized value usage
      mlxsw: spectrum_router: Fix possible neighbour reference count leak
      ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2()
      netrom: Fix memory leak in nr_sendmsg()
      net: fec: ERR007885 Workaround for XDP TX path
      Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
      Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
      ksmbd: vfs: fix race on m_flags in vfs_cache
      gfs2: fix remote evict for read-only filesystems
      btrfs: scrub: always update btrfs_scrub_progress::last_physical
      wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet
      hfsplus: fix volume corruption issue for generic/073
      hfsplus: Verify inode mode when loading from disk
      hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
      hfsplus: fix volume corruption issue for generic/070
      ntfs: set dummy blocksize to read boot_block when mounting
      kbuild: Use objtree for module signing key path
      fs/ntfs3: Support timestamps prior to epoch
      livepatch: Match old_sympos 0 and 1 in klp_find_func()
      cpuidle: menu: Use residency threshold in polling state override decisions
      cpufreq: s5pv210: fix refcount leak
      cpufreq: dt-platdev: Add JH7110S SOC to the allowlist
      ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only
      x86/ptrace: Always inline trivial accessors
      iomap: account for unaligned end offsets when truncating read range
      btrfs: fix memory leak of fs_devices in degraded seed device path
      btrfs: fix a potential path leak in print_data_reloc_error()
      btrfs: do not skip logging new dentries when logging a new name
      ALSA: dice: fix buffer overflow in detect_stream_formats()
      usb: phy: Initialize struct usb_phy list_head
      usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
      net: lan743x: Allocate rings outside ZONE_DMA
      ocfs2: fix memory leak in ocfs2_merge_rec_left()
      irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
      efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
      efi/cper: Adjust infopfx size to accept an extra space
      efi/cper: Add a new helper function to print bitmasks
      dm log-writes: Add missing set_freezable() for freezable kthread
      dm-raid: fix possible NULL dereference with undefined raid type
      ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad()
      ALSA: firewire-motu: add bounds check in put_user loop for DSP events
      rtc: gamecube: Check the return value of ioremap()
      ALSA: uapi: Fix typo in asound.h comment
      dma/pool: eliminate alloc_pages warning in atomic_pool_expand
      ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
      nvme-auth: use kvfree() for memory allocated with kvcalloc()
      ASoC: ak5558: Disable regulator when error happens
      ASoC: ak4458: Disable regulator when error happens
      ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure()
      platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
      fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
      NFS: Fix inheritance of the block sizes when automounting
      Expand the type of nfs_fattr->valid
      Revert "nfs: clear SB_RDONLY before getting superblock"
      Revert "nfs: ignore SB_RDONLY when remounting nfs"
      NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
      NFS: Initialise verifiers for visible dentries in readdir and lookup
      fs/nls: Fix utf16 to utf8 conversion
      NFS: Avoid changing nlink when file removes and attribute updates race
      9p: fix cache/debug options printing in v9fs_show_options
      fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
      pinctrl: single: Fix incorrect type for error return variable
      pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
      perf tools: Fix split kallsyms DSO counting
      net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
      clk: keystone: fix compile testing
      md/raid5: fix IO hang when array is broken with IO inflight
      remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
      mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
      selftests: bonding: add delay before each xvlan_over_bond connectivity check
      selftests: bonding: add ipvlan over bond testing
      nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
      NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
      hisi-cca-da: Fix compile warnings when CONFIG_HISI_CCA=n.
      ub: cdma: cdma code format issue bugfix
      i3c: master: Inherit DMA masks and parameters from parent device
      urma: bugfix ubagg get physical dev info acquisition
      !21874 urma: add software reliability for create and destroy connection
      urma: add software reliability for create and destroy connection
      !21961 urma: use user-specified ue_idx for bonding import exchange
      udma：fix ub udma set dev name style
      ub: udma: Delete the mailbox memory allocation and release in UDMA
      ub: ubase: Release the MAILBOX memory when AE is received
      urma: check driver and wq duration for conn_err
      urma: rate-limit error logs across ubcore
      urma: fix ubcore_get_device_by_eid without put.
      urma: use user-specified ue_idx for bonding import exchange
      urma: fix double put ubagg_dev.
      urma: fix ubcore_get_device_by_eid uaf.
      urma: Fix UAF risk in the ubagg_dev_exists function
      urma: Add rate limiting to log within ubcore_get_tp_list and
      urma: switch to acalloc for large memory allocation
      urma: fix wk-jetty send implementation
      !22093 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-148.0.0 to 6.6.0-149.0.0
      gpio: rockchip: Stop calling pinctrl for set_direction
      gpio: rockchip: mark the GPIO controller as sleeping
      ext4: fix error message when rejecting the default hash
      ext4: filesystems without casefold feature cannot be mounted with siphash
      userfaultfd: fix kabi breakage due to struct userfaultfd_ctx
      mm/mremap: fix WARN with uffd that has remap events disabled
      mm: clear uffd-wp PTE/PMD state on mremap()
      userfaultfd: move userfaultfd_ctx struct to header file
      spi: fix statistics allocation
      Revert "hwmon: (ibmpex) fix use-after-free in high/low store"
      hwmon: (ibmpex) fix use-after-free in high/low store
      icmp: fix NULL pointer dereference in icmp_tag_validation()
      net/sched: act_ife: Fix metalist update behavior
      net/sched: act_ife: avoid possible NULL deref
      apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
      spi: fix use-after-free on controller registration failure
      PM: runtime: Fix a race condition related to device removal
      apparmor: fix side-effect bug in match_char() macro usage
      urma: Kernel-mode file for bugfix to move hashtable from alloc to active
      ipv6: avoid overflows in ip6_datagram_send_ctl()
      netfilter: nfnetlink_log: account for netlink header size
      netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
      netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
      bpf: Fix incorrect pruning due to atomic fetch precision tracking
      bpf: reject direct access to nullable PTR_TO_BUF pointers
      bpf: Reject sleepable kprobe_multi programs at attach time
      ub: udma: fix a bug related to free rcu mem
      ub: ubase: Add a soft dependency declaration for the ubase driver
      ub: ubase: Rectify the problem that the shutdown process ends and logs are printed
      ub: ubase: Verify the length of ctrlq rq msg
      ub: ubase: debugfs supports tpg context query
      perf: Make sure to use pmu_ctx->pmu for groups
      perf: Fix kabi breakage of perf_output_handle
      perf: Avoid the read if the count is already updated
      perf: Extract a few helpers
      irqchip/mbigen: hardcode gicr_base for HIP12
      irqchip/mbigen: add HIP12 support for vtimer irq bypass
      irqchip/gic-v3-its: Read ITS_VERSION with vendor checking
      KVM: arm64: fix mbigen vtimer interrupt loss in save/restore
      irqchip/mbigen: add check for GICv4.1 before enabling vtimer
      gpio: rockchip: Stop calling pinctrl for set_direction
      gpio: pca953x: fix wrong error probe return value
      scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
      ASoC: fsl_sai: Add missing registers to cache default
      ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
      ALSA: usb-audio: Update for native DSD support quirks
      can: j1939: make j1939_session_activate() fail if device is no longer registered
      drm/amd/display: Fix DP no audio issue
      powercap: fix sscanf() error return value handling
      powercap: fix race condition in register_control_type()
      NFS: trace: show TIMEDOUT instead of 0x6e
      ALSA: ac97: fix a double free in snd_ac97_controller_register()
      ALSA: ac97bus: Use guard() for mutex locks
      HID: quirks: work around VID/PID conflict for appledisplay
      net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
      net/mlx5e: Don't print error message due to invalid module
      netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
      inet: ping: Fix icmp out counting
      net: mscc: ocelot: Fix crash when adding interface under a lag
      bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
      net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
      netfilter: nf_tables: fix memory leak in nf_tables_newrule()
      gpio: pca953x: handle short interrupt pulses on PCAL devices
      gpio: pca953x: Add support for level-triggered interrupts
      gpio: pca953x: Utilise temporary variable for struct device
      gpio: pca953x: Utilise dev_err_probe() where it makes sense
      netfilter: nft_synproxy: avoid possible data-race on update operation
      arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM
      ARM: dts: imx6q-ba16: fix RTC interrupt level
      arm64: dts: add off-on-delay-us for usdhc2 regulator
      scsi: ufs: core: Fix EH failure after W-LUN resume error
      scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
      smb/client: fix NT_STATUS_NO_DATA_DETECTED value
      smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
      smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
      NFS: Fix up the automount fs_context to use the correct cred
      NFSv4: ensure the open stateid seqid doesn't go backwards
      dm-snapshot: fix 'scheduling while atomic' on real-time kernels
      alpha: don't reference obsolete termio struct for TC* constants
      ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
      csky: fix csky_cmpxchg_fixup not working
      nfsd: convert to new timestamp accessors
      pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
      gpio: rockchip: mark the GPIO controller as sleeping
      drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
      drm/pl111: Fix error handling in pl111_amba_probe
      counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
      counter: 104-quad-8: Fix incorrect return value in IRQ handler
      lib/crypto: aes: Fix missing MMU protection for AES S-box
      mei: me: add nova lake point S DID
      btrfs: always detect conflicting inodes when logging inode refs
      net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
      atm: Fix dma_free_coherent() size
      NFSD: Fix permission check for read access to executable-only files
      LoongArch: Add cpuhotplug hooks to fix high cpu usage of vCPU threads
      cpufreq: loongson3-acpi-cpufreq: Expand cpu id field for 3C6000
      LoongArch: Adapt upstream backport for openEuler
      urma: add rate limit for high-frequency error logs in ubmad and ubcm
      ub:hisi-ubus: add soft dep of ummu for hisi_ubus
      kprobes: avoid crash when rmmod/insmod after ftrace killed
      bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN
      sched/fair: Clear rel_deadline when initializing forked entities
      ub/ubmempfd: Fix issues from AI
      ub/ubdevshm: Optimize print format
      ub/ubdevshm: Fix issues from AI.
      ub/ubdevshm: Bugfix for multi-Ops with same va.
      ub/ubdevshm: Optimize functions to improve readability.
      media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex
      sched/ebpf: Fix bpf_sched_set_task_prefer_nid()
      LoongArch: KVM: Clear LLBCTL if secondary mmu mapping is changed
      LoongArch: KVM: rename extioi to eiointc
      LoongArch: KVM: Remove duplicated cache attribute setting
      LoongArch: KVM: Set page with write attribute if dirty track disabled
      LoongArch: KVM: Simplify kvm_deliver_intr()
      LoongArch: KVM: Rework kvm_send_pv_ipi()
      LoongArch: KVM: Restore guest PMU if it is enabled
      LoongArch: KVM: Add delay until timer interrupt injected
      LoongArch: KVM: Move kvm_iocsr tracepoint out of generic code
      LoongArch: KVM: Add PTW feature detection on new hardware
      LoongArch: KVM: Remove unused returns and semicolons
      LoongArch: KVM: Add tracepoints for CPUCFG and CSR emulation exits
      LoongArch: KVM: Add ecode parameter for exception handlers
      LoongArch: KVM: Fully clear some CSRs when VM reboot
      LoongArch: KVM: Fix multiple typos of KVM code
      LoongArch: KVM: Add stub for kvm_arch_vcpu_preempted_in_kernel()
      LoongArch: KVM: Remove unnecessary header include path
      LoongArch: KVM: Set host with kernel mode when switch to VM mode
      LoongArch: KVM: Fix typo issue about GCFG feature detection
      LoongArch: KVM: Protect kvm_check_requests() with SRCU
      LoongArch: KVM: Fix GPA size issue about VM
      LoongArch: KVM: Adapt pch_pic alignment check
      LoongArch: KVM: Use kvm_get_vcpu_by_id() instead of kvm_get_vcpu()
      LoongArch: KVM: Adapt send_ipi_data() stack protector fix
      LoongArch: KVM: Make function kvm_own_lbt() robust
      erofs: add GFP_NOIO in the bio completion if needed
      mm/rmap: fix incorrect pte restoration for lazyfree folios
      mm: introduce FPB_RESPECT_WRITE for PTE batching infrastructure
      mm: remove boolean output parameters from folio_pte_batch_ext()
      mm: split folio_pte_batch() into folio_pte_batch() and folio_pte_batch_flags()
      mm: smaller folio_pte_batch() improvements
      mm: convert FPB_IGNORE_* into FPB_RESPECT_*
      mm: fix folio_pte_batch() on XEN PV
      148 CVE-2026-31431
      crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
      crypto: authencesn - Fix src offset when decrypting in-place
      crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
      crypto: authenc - use memcpy_sglist() instead of null skcipher
      crypto: algif_aead - snapshot IV for async AEAD requests
      crypto: algif_aead - Revert to operating out-of-place
      crypto: algif_aead - use memcpy_sglist() instead of null skcipher
      crypto: scatterwalk - Backport memcpy_sglist()
      crypto: algif_aead - Fix minimum RX size check for decryption
      !22175 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-149.0.0 to 6.6.0-151.0.0
      dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
      netfilter: conntrack: add missing netlink policy validations
      netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
      net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
      bridge: mrp: reject zero test interval to avoid OOM panic
      netfilter: ipset: drop logically empty buckets in mtype_del
      xfrm: prevent policy_hthresh.work from racing with netns teardown
      netfilter: nft_ct: fix use-after-free in timeout object destroy
      KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION
      x86/platform/uv: Handle deconfigured sockets
      x86/CPU: Fix FPDSS on Zen1
      can: raw: fix ro->uniq use-after-free in raw_rcv()
      net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption
      net: skb: fix cross-cache free of KFENCE-allocated skb head
      iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()
      PCI: endpoint: pci-epf-vntb: Stop cmd_handler work in epf_ntb_epc_cleanup
      bfq: Lock when clearing the q->elevator entry
      ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
      ext4: publish jinode after initialization
      ext4: validate p_idx bounds in ext4_ext_correct_indexes
      ext4: prevent partial update of the extents path
      ext4: refactor ext4_ext_rm_idx() to index 'path'
      ext4: reject mount if bigalloc with s_first_data_block != 0
      ext4: fix use-after-free in update_super_work when racing with umount
      ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
      platform/x86/amd/pmc: Add support for Van Gogh SoC
      team: Move team device type change at the end of team_port_add
      perf/x86: Fix potential bad container_of in intel_pmu_hw_config
      x86/topo: Fix SNC topology mess
      x86/topo: Replace x86_has_numa_in_package
      x86/topo: Add topology_num_nodes_per_package()
      x86/numa: Store extra copy of numa_nodes_parsed
      x86/smpboot: avoid SMT domain attach/destroy if SMT is not enabled
      x86/smpboot: moves x86_topology to static initialize and truncate
      x86/smpboot: remove redundant CONFIG_SCHED_SMT
      smpboot: introduce SDTL_INIT() helper to tidy sched topology setup
      sched: Move sched domain name out of CONFIG_SCHED_DEBUG
      x86/topology: Remove x86_smt_flags and use cpu_smt_flags directly
      x86/mm: Don't print out SRAT table information
      powerpc/smp: Dynamically build Powerpc topology
      powerpc/smp: Avoid asym packing within thread_group of a core
      powerpc/smp: Add __ro_after_init attribute
      powerpc/smp: Disable MC domain for shared processor
      powerpc/smp: Enable Asym packing for cores on shared processor
      drm/i915/gt: Check set_default_submission() before deferencing
      urma: change kzalloc into vzalloc for ubcore
      ALSA: ctxfi: Limit PTP to a single page
      Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
      Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
      Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb
      Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
      Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop
      ext4: convert inline data to extents when truncate exceeds inline size
      af_unix: read UNIX_DIAG_VFS data under unix_state_lock
      netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
      net: ipv6: flowlabel: defer exclusive option free until RCU teardown
      bridge: br_nd_send: linearize skb before parsing ND options
      net: bonding: fix NULL deref in bond_debug_rlb_hash_show
      can: gw: fix OOB heap access in cgw_csum_crc8_rel()
      netfilter: ctnetlink: use netlink policy range checks
      netfilter: nf_conntrack_expect: skip expectations in other netns via proc
      mmc: vub300: fix NULL-deref on disconnect
      X.509: Fix out-of-bounds access when parsing extensions
      net: fix fanout UAF in packet_release() via NETDEV_UP race
      af_key: validate families in pfkey_send_migrate()
      openvswitch: defer tunnel netdev_put to RCU release
      Bluetooth: hci_sync: fix double unlock in hci_discovery_filter_clear()
      crypto: af_alg - limit RX SG extraction by receive buffer budget
      perf/x86/intel: Add missing branch counters constraint apply
      ub/ubdevshm: Remove KABI for compatible with Ubuntu x86, add version verification interface.
      urma: move variable initialization before use in error branch
      !22247 sync pr 22246: Revert efi/cper ARM CPER type alignment
      Revert "efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs"
      !22435 sync OLK-6.6 CVE bugfix LTS from tag 6.6.0-151.0.0 to 6.6.0-152.0.0
      HID: core: Mitigate potential OOB by removing bogus memset()
      HID: core: Add printk_ratelimited variants to hid_warn() etc
      HID: multitouch: Check to ensure report responses match the request
      Bluetooth: MGMT: validate LTK enc_size on load
      ceph: fix i_nlink underrun during async unlink
      hwmon: (pmbus/core) Protect regulator operations with mutex
      hwmon: (pmbus/core) Declare regulator notification function as void
      dmaengine: idxd: Fix not releasing workqueue on .release()
      driver/core: Fix kabi broken of platform_device/bus_type/device
      driver core: platform: use generic driver_override infrastructure
      hwmon: axi-fan: don't use driver_override as IRQ name
      driver core: generalize driver_override in struct device
      ceph: fix memory leaks in ceph_mdsc_build_path()
      ceph: supply snapshot context in ceph_zero_partial_object()
      Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
      Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
      Bluetooth: SMP: derive legacy responder STK authentication from MITM state
      Bluetooth: MGMT: validate mesh send advertising payload length
      Bluetooth: hci_event: move wake reason storage into validated event handlers
      ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
      ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4()
      KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()
      KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
      KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject
      HID: core: clamp report_size in s32ton() to avoid undefined shift
      HID: alps: fix NULL pointer dereference in alps_raw_event()
      Input: uinput - fix circular locking dependency with ff-core
      HID: apple: avoid memory leak in apple_report_fixup()
      HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
      mm/userfaultfd: fix hugetlb fault mutex hash calculation
      rxrpc: proc: size address buffers for %pISpc output
      dmaengine: idxd: Fix memory leak when a wq is reset
      net/mlx5: lag: Check for LAG device before creating debugfs
      crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
      crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
      blk-iocost: fix busy_level reset when no IOs complete
      block: use min() instead of min_t()
      blk-throttle: fix lower bps rate by throtl_trim_slice()
      block: flush all throttled bios when deleting the cgroup
      jbd2: increase IO priority of checkpoint
      blk-throttle: don't take carryover for prioritized processing of metadata
      blk-throttle: support prioritized processing of metadata
      blk-throttle: fix lower control under super low iops limit
      gfs2: fiemap page fault fix
      x86/apic: Disable x2apic on resume if the kernel expects so
      USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
      USB: usbcore: Introduce usb_bulk_msg_killable()
      dmaengine: idxd: Fix possible invalid memory access after FLR
      drm/ioc32: stop speculation on the drm_compat_ioctl path
      Revert "cpufreq: Fix re-boost issue after hotplugging a CPU"
      drivers/ub/sentry: change the ub_mem_ras_handler function to always return 0
      virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false
      libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
      urma: fix potential parameter overflow in initialization
      mm/numa_remote: avoid numa_remote lock when onlining pre-onlined memory
      crypto: af-alg - fix NULL pointer dereference in scatterwalk
      tracing: Fix soft lockup when lseeking trace file
      urma: query resource options by id.
      bonding: remove unused bond_is_first_slave and bond_is_last_slave macros
      net: bonding: fix use-after-free in bond_xmit_broadcast()
      bonding: do not set usable_slaves for broadcast mode
      net: bonding: update the slave array for broadcast mode
      crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
      net/sched: cls_flow: fix NULL pointer dereference on shared blocks
      net: sched: act_csum: validate nested VLAN headers
      netfilter: ip6t_eui64: reject invalid MAC header for all packets
      wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()
      xfrm: esp: avoid in-place decrypt on shared skb frags(CVE-2026-43284)
      net/sched: sch_netem: fix out-of-bounds access in packet corruption
      esp: fix skb leak with espintcp and async crypto
      xfrm: Fix the usage of skb->sk
      net/sched: cls_fw: fix NULL dereference of "old" filters before change()
      net/sched: cls_fw: fix NULL pointer dereference on shared blocks
      mm: memcontrol: don't throttle dying tasks on memory.high
      futex: Clear stale exiting pointer in futex_lock_pi() retry path
      drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
      EDAC/mc: Fix error path ordering in edac_mc_alloc()
      perf/x86/intel/uncore: Skip discovery table for offline dies
      spi: use generic driver_override infrastructure


