[Kernel-packages] [Bug 2089052] [NEW] Oracular update: v6.11.3 upstream stable release

[Manuel Diewald]

Public bug reported:


    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.11.3 upstream stable release
       from git://git.kernel.org/

static_call: Handle module init failure correctly in static_call_del_module()
static_call: Replace pointless WARN_ON() in static_call_module_notify()
jump_label: Fix static_key_slow_dec() yet again
scsi: st: Fix input/output error on empty drive reset
scsi: pm8001: Do not overwrite PCI queue mapping
drm/i915/psr: Do not wait for PSR being idle on on Panel Replay
drm/i915/display: BMG supports UHBR13.5
drm/i915/dp: Fix AUX IO power enabling for eDP PSR
drm/amdgpu: Fix get each xcp macro
drm/amd/display: handle nulled pipe context in DCE110's set_drr()
ksmbd: fix warning: comparison of distinct pointer types lacks a cast
mailbox: ARM_MHU_V3 should depend on ARM64
UBUNTU: [Config] updateconfigs for ARM_MHU_V3
mailbox: rockchip: fix a typo in module autoloading
mailbox: bcm2835: Fix timeout during suspend mode
ceph: fix a memory leak on cap_auths in MDS client
ceph: remove the incorrect Fw reference check when dirtying pages
drm/i915/dp: Fix colorimetry detection
ieee802154: Fix build error
net: sparx5: Fix invalid timestamps
net/mlx5: Fix error path in multi-packet WQE transmit
net/mlx5: Added cond_resched() to crdump collection
net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
net/mlx5e: SHAMPO, Fix overflow of hd_per_wq
net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
selftests: netfilter: Fix nft_audit.sh for newer nft binaries
netfilter: nf_tables: prevent nf_skb_duplicated corruption
selftests: netfilter: Add missing return value
Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
Bluetooth: L2CAP: Fix uaf in l2cap_connect
Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
afs: Fix missing wire-up of afs_retry_request()
afs: Fix the setting of the server responding flag
net: dsa: improve shutdown sequence
net: Add netif_get_gro_max_size helper for GRO
net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
net: ethernet: lantiq_etop: fix memory disclosure
net: fec: Restart PPS after link state change
net: fec: Reload PTP registers after link-state change
net: avoid potential underflow in qdisc_pkt_len_init() with UFO
net: add more sanity checks to qdisc_pkt_len_init()
net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
netfs: Fix missing wakeup after issuing writes
net: test for not too small csum_start in virtio_net_hdr_to_skb()
ppp: do not assume bh is held in ppp_channel_bridge_input()
net: phy: realtek: Check the index value in led_hw_control_get
bridge: mcast: Fail MDB get request on empty entry
net/ncsi: Disable the ncsi work before freeing the associated structure
iomap: constrain the file range passed to iomap_file_unshare
dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
ASoC: topology: Fix incorrect addressing assignments
drm/panthor: Fix race when converting group handle to group object
ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is 
uninitialized
drm/connector: hdmi: Fix writing Dynamic Range Mastering infoframes
io_uring: fix memory leak when cache init fail
rust: kbuild: split up helpers.c
rust: kbuild: auto generate helper exports
rust: mutex: fix __mutex_init() usage in case of PREEMPT_RT
ALSA: mixer_oss: Remove some incorrect kfree_const() usages
ALSA: hda/realtek: Fix the push button function for the ALC257
cifs: Remove intermediate object of failed create reparse call
ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item
drm/panthor: Lock the VM resv before calling drm_gpuvm_bo_obtain_prealloc()
ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
drm/xe: Restore pci state upon resume
drm/xe/guc_submit: add missing locking in wedged_fini
drm/xe: Resume TDR after GT reset
drm/xe: Prevent null pointer access in xe_migrate_copy
cifs: Fix buffer overflow when parsing NFS reparse points
cifs: Do not convert delimiter when parsing NFS-style symlinks
gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()
tools/rtla: Fix installation from out-of-tree build
ALSA: gus: Fix some error handling paths related to get_bpos() usage
ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
drm/amd/display: Disable replay if VRR capability is false
drm/amd/display: Fix VRR cannot enable
drm/amd/display: Re-enable panel replay feature
e1000e: avoid failing the system during pm_suspend
l2tp: prevent possible tunnel refcount underflow
wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
wifi: rtw89: avoid to add interface to list twice when SER
wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
crypto: x86/sha256 - Add parentheses around macros' single arguments
crypto: octeontx - Fix authenc setkey
crypto: octeontx2 - Fix authenc setkey
ice: Adjust over allocation of memory in ice_sched_add_root_node() and 
ice_sched_add_node()
wifi: iwlwifi: mvm: Fix a race in scan abort flow
wifi: iwlwifi: mvm: drop wrong STA selection in TX
wifi: cfg80211: Set correct chandef when starting CAC
net/xen-netback: prevent UAF in xenvif_flush_hash()
net: hisilicon: hip04: fix OF node leak in probe()
net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
net: hisilicon: hns_mdio: fix OF node leak in probe()
ACPI: PAD: fix crash in exit_round_robin()
ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
exec: don't WARN for racy path_noexec check
fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB
wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
net: sched: consistently use rcu_replace_pointer() in taprio_change()
Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
ACPI: CPPC: Add support for setting EPP register in FFH
blk_iocost: fix more out of bound shifts
btrfs: don't readahead the relocation inode on RST
wifi: ath12k: fix array out-of-bound access in SoC stats
wifi: ath11k: fix array out-of-bound access in SoC stats
wifi: rtw88: select WANT_DEV_COREDUMP
l2tp: free sessions using rcu
l2tp: use rcu list add/del when updating lists
ACPI: EC: Do not release locks during operation region accesses
ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in 
acpi_db_convert_to_package()
tipc: guard against string buffer overrun
net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs
net: mvpp2: Increase size of queue_name buffer
bnxt_en: Extend maximum length of version string by 1 byte
ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
wifi: rtw89: correct base HT rate mask for firmware
netfilter: nf_tables: do not remove elements if set backend implements .abort
ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
nvme-keyring: restrict match length for version '1' identifiers
nvme-tcp: sanitize TLS key handling
nvme-tcp: check for invalidated or revoked key
net: atlantic: Avoid warning about potential string truncation
crypto: simd - Do not call crypto_alloc_tfm during registration
netpoll: Ensure clean state on setup failures
tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
wifi: iwlwifi: mvm: use correct key iteration
wifi: iwlwifi: allow only CN mcc from WRDD
wifi: iwlwifi: mvm: avoid NULL pointer dereference
virt: sev-guest: Ensure the SNP guest messages do not exceed a page
wifi: mac80211: fix RCU list iterations
ACPICA: iasl: handle empty connection_node
proc: add config & param to block forcing mem writes
UBUNTU: [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE
vfs: use RCU in ilookup
drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
nvme: fix metadata handling in nvme-passthrough
can: netlink: avoid call to do_set_data_bittiming callback with stale 
can_priv::ctrlmode
netdev-genl: Set extack and fix error on napi-get
wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume
block: fix integer overflow in BLKSECDISCARD
cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()
arm64: trans_pgd: mark PTEs entries as valid to avoid dead kexec()
net: phy: Check for read errors in SIOCGMIIREG
wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
x86/bugs: Add missing NO_SSB flag
x86/bugs: Fix handling when SRSO mitigation is disabled
net: napi: Prevent overflow of napi_defer_hard_irqs
crypto: hisilicon - fix missed error branch
wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
wifi: mwifiex: Fix memcpy() field-spanning write warning in 
mwifiex_cmd_802_11_scan_ext()
netfs: Cancel dirty folios that have no storage destination
nfp: Use IRQF_NO_AUTOEN flag in request_irq()
ALSA: usb-audio: Add input value sanity checks for standard types
x86/ioapic: Handle allocation failures gracefully
x86/apic: Remove logical destination mode for 64-bit
ALSA: usb-audio: Define macros for quirk table entries
ALSA: usb-audio: Replace complex quirk lines with macros
ALSA: usb-audio: Add quirk for RME Digiface USB
ALSA: usb-audio: Add mixer quirk for RME Digiface USB
ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init
ALSA: usb-audio: Add logitech Audio profile quirk
ASoC: codecs: wsa883x: Handle reading version failure
ALSA: control: Take power_ref lock primarily
tools/x86/kcpuid: Protect against faulty "max subleaf" values
x86/pkeys: Add PKRU as a parameter in signal handling functions
x86/pkeys: Restore altstack access in sigreturn()
x86/kexec: Add EFI config table identity mapping for kexec kernel
x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
ALSA: asihpi: Fix potential OOB array access
ALSA: hdsp: Break infinite MIDI input flush loop
tools/nolibc: powerpc: limit stack-protector workaround to GCC
selftests/nolibc: avoid passing NULL to printf("%s")
x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
ASoC: Intel: boards: always check the result of acpi_dev_get_first_match_dev()
rcu-tasks: Fix access non-existent percpu rtpcp variable in 
rcu_tasks_need_gpcb()
hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
fbdev: efifb: Register sysfs groups through driver core
fbdev: pxafb: Fix possible use after free in pxafb_task()
pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set()
pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs
rcuscale: Provide clear error when async specified without primitives
power: reset: brcmstb: Do not go into infinite loop if reset fails
iommu/arm-smmu-v3: Match Stall behaviour for S2
iommu/vt-d: Always reserve a domain ID for identity setup
iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
iommu/vt-d: Unconditionally flush device TLB for pasid table updates
iommu/arm-smmu-v3: Do not use devm for the cd table allocations
drm/stm: Avoid use-after-free issues with crtc and plane
drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
drm/amd/display: Check null pointers before using them
drm/amd/display: Check null pointers before used
drm/amd/display: Check null pointers before multiple uses
drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
drm/amd/display: Add null check for head_pipe in 
dcn201_acquire_free_pipe_for_layer
drm/amd/display: Add null check for head_pipe in 
dcn32_acquire_idle_pipe_for_head_pipe_in_layer
drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn401_init_hw
drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
drm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe
drm/amd/display: Add null check for top_pipe_to_program in 
commit_planes_for_stream
drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces
ata: pata_serverworks: Do not use the term blacklist
ata: sata_sil: Rename sil_blacklist to sil_quirks
selftests/bpf: fix uprobe.path leak in bpf_testmod
scsi: smartpqi: Add new controller PCI IDs
HID: Ignore battery for all ELAN I2C-HID devices
drm/amd/display: Underflow Seen on DCN401 eGPU
drm/amd/display: Handle null 'stream_status' in 
'planes_changed_for_existing_stream'
drm/amd/display: Add NULL check for function pointer in 
dcn20_set_output_transfer_func
drm/amd/display: Add NULL check for function pointer in 
dcn401_set_output_transfer_func
drm/amd/display: Add NULL check for function pointer in 
dcn32_set_output_transfer_func
drm/amd/display: fix a UBSAN warning in DML2.1
drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
drm/amd/display: Check null pointers before using dc->clk_mgr
drm/amd/display: Check null pointer before try to access it
drm/amd/display: Add null check for 'afb' in 
amdgpu_dm_plane_handle_cursor_update (v2)
drm/xe: Name and document Wa_14019789679
drm/amd/display: fix double free issue during amdgpu module unload
drm/amdgpu: add list empty check to avoid null pointer issue
jfs: UBSAN: shift-out-of-bounds in dbFindBits
jfs: Fix uaf in dbFreeBits
jfs: check if leafidx greater than num leaves per dmap tree
scsi: smartpqi: correct stream detection
scsi: smartpqi: add new controller PCI IDs
drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
jfs: Fix uninit-value access of new_ea in ea_buffer
drm/amdgpu: add raven1 gfxoff quirk
drm/amdgpu: enable gfxoff quirk on HP 705G4
drm/amdkfd: Fix resource leak in criu restore queue
HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
platform/x86: touchscreen_dmi: add nanote-next quirk
platform/x86/amd: pmf: Add quirk for TUF Gaming A14
drm/stm: ltdc: reset plane transparency after plane disable
drm/amd/display: Initialize denominators' default to 1
drm/amd/display: Check null-initialized variables
drm/amd/display: Check phantom_stream before it is used
drm/amd/display: Check stream before comparing them
drm/amd/display: Deallocate DML memory if allocation fails
drm/amd/display: Increase array size of dummy_boolean
drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format 
translation
drm/amd/display: Fix index out of bounds in degamma hardware format translation
drm/amd/display: Implement bounds check for stream encoder creation in DCN401
drm/amd/display: Fix index out of bounds in DCN30 color transformation
drm/amdgpu/gfx12: properly handle error ints on all pipes
drm/amdgpu/gfx9: properly handle error ints on all pipes
drm/amd/display: Fix possible overflow in integer multiplication
drm/amd/display: Check stream_status before it is used
drm/amd/display: Avoid overflow assignment in link_dp_cts
drm/amd/display: Initialize get_bytes_per_element's default to 1
drm/printer: Allow NULL data in devcoredump printer
perf,x86: avoid missing caller address in stack traces captured in uprobe
scsi: aacraid: Rearrange order of struct aac_srb_unit
scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached 
topology
scsi: lpfc: Update PRLO handling in direct attached topology
drm/amd/display: Force enable 3DLUT DMA check for dcn401 in DML
drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
drm/amdgpu: fix unchecked return value warning for amdgpu_atombios
perf: Fix event_function_call() locking
scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
drm/amd/display: Unlock Pipes Based On DET Allocation
drm/amdgpu: fix ptr check warning in gfx9 ip_dump
drm/amdgpu: fix ptr check warning in gfx10 ip_dump
drm/amdgpu: fix ptr check warning in gfx11 ip_dump
drm/amdgpu: Block MMR_READ IOCTL in reset
drm/amdgpu/gfx9: use rlc safe mode for soft recovery
drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL
drm/xe: Use topology to determine page fault queue size
drm/amd/pm: ensure the fw_info is not null before using it
drm/amdkfd: Check int source id for utcl2 poison event
of/irq: Refer to actual buffer size in of_irq_parse_one()
drm/amd/display: guard write a 0 post_divider value to HW
powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
ovl: fsync after metadata copy-up
drm/amdgpu/gfx12: use rlc safe mode for soft recovery
drm/amdgpu/gfx11: use rlc safe mode for soft recovery
drm/amdgpu/gfx10: use rlc safe mode for soft recovery
platform/x86: lenovo-ymc: Ignore the 0x0 state
tools/hv: Add memory allocation check in hv_fcopy_start
HID: i2c-hid: ensure various commands do not interfere with each other
ksmbd: add refcnt to ksmbd_conn struct
platform/mellanox: mlxbf-pmc: fix lockdep warning
platform/x86: x86-android-tablets: Adjust Xiaomi Pad 2 bottom bezel touch 
buttons LED
ext4: filesystems without casefold feature cannot be mounted with siphash
bpf: Make the pointer returned by iter next method valid
ext4: ext4_search_dir should return a proper error
ext4: avoid use-after-free in ext4_ext_show_leaf()
ext4: fix i_data_sem unlock order in ext4_ind_migrate()
bpftool: Fix undefined behavior caused by shifting into the sign bit
iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release
bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
bpf: Fix a sdiv overflow issue
EINJ, CXL: Fix CXL device SBDF calculation
spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
spi: spi-cadence: Fix missing spi_controller_is_target() check
selftest: hid: add missing run-hid-tools-tests.sh
spi: s3c64xx: fix timeout counters in flush_fifo
kselftest/devices/probe: Fix SyntaxWarning in regex strings for Python3
selftests: breakpoints: use remaining time to check if suspend succeed
accel/ivpu: Add missing MODULE_FIRMWARE metadata
spi: rpc-if: Add missing MODULE_DEVICE_TABLE
ALSA: control: Fix power_ref lock order for compat code, too
perf callchain: Fix stitch LBR memory leaks
perf: Really fix event_function_call() locking
drm/xe: fixup xe_alloc_pf_queue
drm/xe: Fix memory leak on xe_alloc_pf_queue failure
selftests: vDSO: fix vDSO name for powerpc
selftests: vDSO: fix vdso_config for powerpc
selftests: vDSO: fix vDSO symbols lookup for powerpc64
ext4: fix error message when rejecting the default hash
selftests/mm: fix charge_reserved_hugetlb.sh test
nvme-tcp: fix link failure for TCP auth
f2fs: add write priority option based on zone UFS
f2fs: fix to don't panic system for no free segment fault injection
powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
selftests: vDSO: fix ELF hash table entry size for s390x
selftests: vDSO: fix vdso_config for s390
f2fs: make BG GC more aggressive for zoned devices
f2fs: introduce migration_window_granularity
f2fs: increase BG GC migration window granularity when boosted for zoned devices
f2fs: do FG_GC when GC boosting is required for zoned devices
f2fs: forcibly migrate to secure space for zoned device file pinning
Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
platform/x86: x86-android-tablets: Fix use after free on 
platform_device_register() errors
platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
KVM: arm64: Fix kvm_has_feat*() handling of negative features
i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
i2c: xiic: Wait for TX empty to avoid missed TX NAKs
media: i2c: ar0521: Use cansleep version of gpiod_set_value()
i2c: core: Lock address during client device instantiation
i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
i2c: synquacer: Deal with optional PCLK correctly
rust: sync: require `T: Sync` for `LockedBy::access`
ovl: fail if trusted xattrs are needed but caller lacks permission
firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
memory: tegra186-emc: drop unused to_tegra186_emc()
dt-bindings: clock: exynos7885: Fix duplicated binding
spi: bcm63xx: Fix module autoloading
spi: bcm63xx: Fix missing pm_runtime_disable()
power: supply: hwmon: Fix missing temp1_max_alarm attribute
mm, slub: avoid zeroing kmalloc redzone
power: supply: Drop use_cnt check from power_supply_property_is_writeable()
perf/core: Fix small negative period being ignored
drm/v3d: Prevent out of bounds access in performance query extensions
parisc: Fix itlb miss handler for 64-bit programs
drm/mediatek: ovl_adaptor: Add missing of_node_put()
drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
ALSA: core: add isascii() check to card ID generator
ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
ALSA: usb-audio: Add native DSD support for Luxman D-08u
ALSA: line6: add hw monitor volume control to POD HD500X
ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8
ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
ext4: no need to continue when the number of entries is 1
ext4: correct encrypted dentry name hash when not casefolded
ext4: fix slab-use-after-free in ext4_split_extent_at()
ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
ext4: dax: fix overflowing extents beyond inode size when partially writing
ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
ext4: aovid use-after-free in ext4_ext_insert_extent()
ext4: fix double brelse() the buffer of the extents path
ext4: fix timer use-after-free on failed mount
ext4: fix access to uninitialised lock in fc replay path
ext4: update orig_path in ext4_find_extent()
ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
ext4: fix fast commit inode enqueueing during a full journal commit
ext4: use handle to mark fc as ineligible in __track_dentry_update()
ext4: mark fc as ineligible using an handle in ext4_xattr_set()
ext4: fix off by one issue in alloc_flex_gd()
parisc: Fix 64-bit userspace syscall path
parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
drm/rockchip: vop: clear DMA stop bit on RK3066
of: address: Report error on resource bounds overflow
of/irq: Support #msi-cells=<0> in of_msi_get_domain
drm: omapdrm: Add missing check for alloc_ordered_workqueue
resource: fix region_intersects() vs add_memory_driver_managed()
lib/buildid: harden build ID parsing logic
jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
mm: krealloc: consider spare memory for __GFP_ZERO
ocfs2: fix the la space leak when unmounting an ocfs2 volume
ocfs2: fix uninit-value in ocfs2_get_block()
ocfs2: reserve space for inline xattr before attaching reflink tree
ocfs2: cancel dqi_sync_work before freeing oinfo
ocfs2: remove unreasonable unlock in ocfs2_read_blocks
ocfs2: fix null-ptr-deref when journal load failed.
ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
scripts/gdb: fix timerlist parsing issue
scripts/gdb: add iteration function for rbtree
scripts/gdb: fix lx-mounts command error
arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
drm/xe: fix UAF around queue destruction
drm/xe/oa: Don't reset OAC_CONTEXT_ENABLE on OA stream close
sched/deadline: Comment sched_dl_entity::dl_server variable
sched/core: Add clearing of ->dl_server in put_prev_task_balance()
sched/core: Clear prev->dl_server in CFS pick fast path
sched: psi: fix bogus pressure spikes from aggregation race
riscv: define ILLEGAL_POINTER_VALUE for 64bit
UBUNTU: [Config] updateconfigs for ILLEGAL_POINTER_VALUE on riscv
exfat: fix memory leak in exfat_load_bitmap()
perf python: Disable -Wno-cast-function-type-mismatch if present on clang
perf hist: Update hist symbol when updating maps
nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
nfsd: map the EBADMSG to nfserr_io to avoid warning
NFSD: Fix NFSv4's PUTPUBFH operation
i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due 
to Race Condition
sysctl: avoid spurious permanent empty tables
RDMA/mana_ib: use the correct page table index based on hardware page size
RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
drivers/perf: riscv: Align errno for unsupported perf event
riscv: Fix kernel stack size when KASAN is enabled
aoe: fix the potential use-after-free problem in more places
media: imx335: Fix reset-gpio handling
clk: rockchip: fix error for unknown clocks
leds: pca9532: Remove irrelevant blink configuration error message
remoteproc: k3-r5: Fix error handling when power-up failed
gfs2: fix double destroy_workqueue error
media: videobuf2: Drop minimum allocation requirement of 2 buffers
clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
media: sun4i_csi: Implement link validate for sun4i_csi subdev
clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x
clk: qcom: clk-rpmh: Fix overflow in BCM vote
clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
media: venus: fix use after free bug in venus_remove due to race condition
clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
clk: qcom: gcc-sc8180x: Add GPLL9 support
clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
drm/amd/display: avoid set dispclk to 0
smb: client: use actual path when queryfs
smb3: fix incorrect mode displayed for read-only files
iio: magnetometer: ak8975: Fix reading for ak099xx sensors
iio: pressure: bmp280: Fix regmap for BMP280 device
iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
net: gso: fix tcp fraglist segmentation after pull from frag_list
gso: fix udp gso fraglist segmentation after pull from frag_list
tomoyo: fallback to realpath if symlink's pathname does not exist
kselftests: mm: fix wrong __NR_userfaultfd value
net: stmmac: Fix zero-division error when disabling tc cbs
rtc: at91sam9: fix OF node leak in probe() error path
mm/filemap: fix filemap_get_folios_contig THP panic
mm/hugetlb: fix memfd_pin_folios free_huge_pages leak
mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak
mm/gup: fix memfd_pin_folios hugetlb page allocation
mm/gup: fix memfd_pin_folios alloc race panic
mm/hugetlb: simplify refs in memfd_alloc_folio
Input: adp5589-keys - fix NULL pointer dereference
Input: adp5589-keys - fix adp5589_gpio_get_value()
HID: bpf: fix cfi stubs for hid_bpf_ops
cachefiles: fix dentry leak in cachefiles_open_file()
pidfs: check for valid pid namespace
ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO
ACPI: resource: Remove duplicate Asus E1504GAB IRQ override
ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA
ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
btrfs: send: fix buffer overflow detection when copying path to cache entry
btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
btrfs: drop the backref cache during relocation if we commit
btrfs: send: fix invalid clone operation for file that got its size decreased
btrfs: wait for fixup workers before stopping cleaner kthread during umount
cpufreq: Avoid a bad reference count on CPU node
cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
gpio: davinci: fix lazy disable
net: pcs: xpcs: fix the wrong register that was written back
Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
io_uring/net: harden multishot termination case for recv
ceph: fix cap ref leak via netfs init_request
tracing/hwlat: Fix a race during cpuhp processing
tracing/timerlat: Drop interface_lock in stop_kthread()
tracing/timerlat: Fix a race during cpuhp processing
tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
rtla: Fix the help text in osnoise and timerlat top tools
firmware/sysfb: Disable sysfb for firmware buffers with unknown parent
close_range(): fix the logics in descriptor table trimming
drm/i915/gem: fix bitwise and logical AND mixup
drm/panthor: Don't add write fences to the shared BOs
drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()
drm/panthor: Don't declare a queue blocked if deferred operations are pending
drm/sched: Fix dynamic job-flow control race
drm/sched: Add locking to drm_sched_entity_modify_sched
drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job
drm/sched: Always increment correct scheduler score
drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC
drm/amd/display: Add HDR workaround for specific eDP
drm/amd/display: Enable idle workqueue for more IPS modes
drm/amd/display: Fix system hang while resume with TBT monitor
kconfig: fix infinite loop in sym_calc_choice()
kconfig: qconf: move conf_read() before drawing tree pain
kconfig: qconf: fix buffer overflow in debug links
arm64: cputype: Add Neoverse-N3 definitions
arm64: errata: Expand speculative SSBS workaround once more
uprobes: fix kernel info leak via "[uprobes]" vma
mm: z3fold: deprecate CONFIG_Z3FOLD
UBUNTU: [Config] updateconfigs after deprecating Z3FOLD
drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
sunrpc: change sp_nrthreads from atomic_t to unsigned int.
NFSD: Async COPY result needs to return a write verifier
NFSD: Limit the number of concurrent async COPY operations
remoteproc: k3-r5: Acquire mailbox handle during probe routine
remoteproc: k3-r5: Delay notification of wakeup event
r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
r8169: add tally counter fields added with RTL8125
ACPI: battery: Simplify battery hook locking
ACPI: battery: Fix possible crash when unregistering a battery hook
drm/xe: Clean up VM / exec queue file lock usage.
drm/xe/vm: move xa_alloc to prevent UAF
drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
drm/xe/vram: fix ccs offset calculation
drm/sched: revert "Always increment correct scheduler score"
rxrpc: Fix a race between socket set up and I/O thread creation
vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
ALSA: control: Fix leftover snd_power_unref()
crypto: octeontx* - Select CRYPTO_AUTHENC
drm/amd/display: Revert Avoid overflow assignment
perf report: Fix segfault when 'sym' sort key is not used
pmdomain: core: Reduce debug summary table width
perf python: Allow checking for the existence of warning options in clang
Linux 6.11.3
UBUNTU: Upstream stable to v6.11.3

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Oracular)
     Importance: Medium
     Assignee: Manuel Diewald (diewald)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Oracular)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Oracular)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Oracular)
       Status: New => In Progress

** Changed in: linux (Ubuntu Oracular)
     Assignee: (unassigned) => Manuel Diewald (diewald)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         v6.11.3 upstream stable release
         from git://git.kernel.org/
  
-             
+ static_call: Handle module init failure correctly in static_call_del_module()
+ static_call: Replace pointless WARN_ON() in static_call_module_notify()
+ jump_label: Fix static_key_slow_dec() yet again
+ scsi: st: Fix input/output error on empty drive reset
+ scsi: pm8001: Do not overwrite PCI queue mapping
+ drm/i915/psr: Do not wait for PSR being idle on on Panel Replay
+ drm/i915/display: BMG supports UHBR13.5
+ drm/i915/dp: Fix AUX IO power enabling for eDP PSR
+ drm/amdgpu: Fix get each xcp macro
+ drm/amd/display: handle nulled pipe context in DCE110's set_drr()
+ ksmbd: fix warning: comparison of distinct pointer types lacks a cast
+ mailbox: ARM_MHU_V3 should depend on ARM64
+ UBUNTU: [Config] updateconfigs for ARM_MHU_V3
+ mailbox: rockchip: fix a typo in module autoloading
+ mailbox: bcm2835: Fix timeout during suspend mode
+ ceph: fix a memory leak on cap_auths in MDS client
+ ceph: remove the incorrect Fw reference check when dirtying pages
+ drm/i915/dp: Fix colorimetry detection
+ ieee802154: Fix build error
+ net: sparx5: Fix invalid timestamps
+ net/mlx5: Fix error path in multi-packet WQE transmit
+ net/mlx5: Added cond_resched() to crdump collection
+ net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
+ net/mlx5e: SHAMPO, Fix overflow of hd_per_wq
+ net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
+ netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
+ net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
+ net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
+ selftests: netfilter: Fix nft_audit.sh for newer nft binaries
+ netfilter: nf_tables: prevent nf_skb_duplicated corruption
+ selftests: netfilter: Add missing return value
+ Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
+ Bluetooth: L2CAP: Fix uaf in l2cap_connect
+ Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
+ afs: Fix missing wire-up of afs_retry_request()
+ afs: Fix the setting of the server responding flag
+ net: dsa: improve shutdown sequence
+ net: Add netif_get_gro_max_size helper for GRO
+ net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
+ net: ethernet: lantiq_etop: fix memory disclosure
+ net: fec: Restart PPS after link state change
+ net: fec: Reload PTP registers after link-state change
+ net: avoid potential underflow in qdisc_pkt_len_init() with UFO
+ net: add more sanity checks to qdisc_pkt_len_init()
+ net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
+ ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
+ netfs: Fix missing wakeup after issuing writes
+ net: test for not too small csum_start in virtio_net_hdr_to_skb()
+ ppp: do not assume bh is held in ppp_channel_bridge_input()
+ net: phy: realtek: Check the index value in led_hw_control_get
+ bridge: mcast: Fail MDB get request on empty entry
+ net/ncsi: Disable the ncsi work before freeing the associated structure
+ iomap: constrain the file range passed to iomap_file_unshare
+ dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
+ sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
+ ASoC: topology: Fix incorrect addressing assignments
+ drm/panthor: Fix race when converting group handle to group object
+ ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is 
uninitialized
+ drm/connector: hdmi: Fix writing Dynamic Range Mastering infoframes
+ io_uring: fix memory leak when cache init fail
+ rust: kbuild: split up helpers.c
+ rust: kbuild: auto generate helper exports
+ rust: mutex: fix __mutex_init() usage in case of PREEMPT_RT
+ ALSA: mixer_oss: Remove some incorrect kfree_const() usages
+ ALSA: hda/realtek: Fix the push button function for the ALC257
+ cifs: Remove intermediate object of failed create reparse call
+ ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item
+ drm/panthor: Lock the VM resv before calling drm_gpuvm_bo_obtain_prealloc()
+ ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
+ ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
+ drm/xe: Restore pci state upon resume
+ drm/xe/guc_submit: add missing locking in wedged_fini
+ drm/xe: Resume TDR after GT reset
+ drm/xe: Prevent null pointer access in xe_migrate_copy
+ cifs: Fix buffer overflow when parsing NFS reparse points
+ cifs: Do not convert delimiter when parsing NFS-style symlinks
+ gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()
+ tools/rtla: Fix installation from out-of-tree build
+ ALSA: gus: Fix some error handling paths related to get_bpos() usage
+ ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
+ drm/amd/display: Disable replay if VRR capability is false
+ drm/amd/display: Fix VRR cannot enable
+ drm/amd/display: Re-enable panel replay feature
+ e1000e: avoid failing the system during pm_suspend
+ l2tp: prevent possible tunnel refcount underflow
+ wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
+ wifi: rtw89: avoid to add interface to list twice when SER
+ wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
+ crypto: x86/sha256 - Add parentheses around macros' single arguments
+ crypto: octeontx - Fix authenc setkey
+ crypto: octeontx2 - Fix authenc setkey
+ ice: Adjust over allocation of memory in ice_sched_add_root_node() and 
ice_sched_add_node()
+ wifi: iwlwifi: mvm: Fix a race in scan abort flow
+ wifi: iwlwifi: mvm: drop wrong STA selection in TX
+ wifi: cfg80211: Set correct chandef when starting CAC
+ net/xen-netback: prevent UAF in xenvif_flush_hash()
+ net: hisilicon: hip04: fix OF node leak in probe()
+ net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
+ net: hisilicon: hns_mdio: fix OF node leak in probe()
+ ACPI: PAD: fix crash in exit_round_robin()
+ ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
+ ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
+ exec: don't WARN for racy path_noexec check
+ fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
+ ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB
+ wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
+ net: sched: consistently use rcu_replace_pointer() in taprio_change()
+ Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
+ Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
+ ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
+ ACPI: CPPC: Add support for setting EPP register in FFH
+ blk_iocost: fix more out of bound shifts
+ btrfs: don't readahead the relocation inode on RST
+ wifi: ath12k: fix array out-of-bound access in SoC stats
+ wifi: ath11k: fix array out-of-bound access in SoC stats
+ wifi: rtw88: select WANT_DEV_COREDUMP
+ l2tp: free sessions using rcu
+ l2tp: use rcu list add/del when updating lists
+ ACPI: EC: Do not release locks during operation region accesses
+ ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in 
acpi_db_convert_to_package()
+ tipc: guard against string buffer overrun
+ net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs
+ net: mvpp2: Increase size of queue_name buffer
+ bnxt_en: Extend maximum length of version string by 1 byte
+ ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
+ wifi: rtw89: correct base HT rate mask for firmware
+ netfilter: nf_tables: do not remove elements if set backend implements .abort
+ ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
+ nvme-keyring: restrict match length for version '1' identifiers
+ nvme-tcp: sanitize TLS key handling
+ nvme-tcp: check for invalidated or revoked key
+ net: atlantic: Avoid warning about potential string truncation
+ crypto: simd - Do not call crypto_alloc_tfm during registration
+ netpoll: Ensure clean state on setup failures
+ tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
+ wifi: iwlwifi: mvm: use correct key iteration
+ wifi: iwlwifi: allow only CN mcc from WRDD
+ wifi: iwlwifi: mvm: avoid NULL pointer dereference
+ virt: sev-guest: Ensure the SNP guest messages do not exceed a page
+ wifi: mac80211: fix RCU list iterations
+ ACPICA: iasl: handle empty connection_node
+ proc: add config & param to block forcing mem writes
+ UBUNTU: [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE
+ vfs: use RCU in ilookup
+ drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
+ nvme: fix metadata handling in nvme-passthrough
+ can: netlink: avoid call to do_set_data_bittiming callback with stale 
can_priv::ctrlmode
+ netdev-genl: Set extack and fix error on napi-get
+ wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume
+ block: fix integer overflow in BLKSECDISCARD
+ cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
+ cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()
+ arm64: trans_pgd: mark PTEs entries as valid to avoid dead kexec()
+ net: phy: Check for read errors in SIOCGMIIREG
+ wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
+ x86/bugs: Add missing NO_SSB flag
+ x86/bugs: Fix handling when SRSO mitigation is disabled
+ net: napi: Prevent overflow of napi_defer_hard_irqs
+ crypto: hisilicon - fix missed error branch
+ wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
+ wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
+ wifi: mwifiex: Fix memcpy() field-spanning write warning in 
mwifiex_cmd_802_11_scan_ext()
+ netfs: Cancel dirty folios that have no storage destination
+ nfp: Use IRQF_NO_AUTOEN flag in request_irq()
+ ALSA: usb-audio: Add input value sanity checks for standard types
+ x86/ioapic: Handle allocation failures gracefully
+ x86/apic: Remove logical destination mode for 64-bit
+ ALSA: usb-audio: Define macros for quirk table entries
+ ALSA: usb-audio: Replace complex quirk lines with macros
+ ALSA: usb-audio: Add quirk for RME Digiface USB
+ ALSA: usb-audio: Add mixer quirk for RME Digiface USB
+ ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init
+ ALSA: usb-audio: Add logitech Audio profile quirk
+ ASoC: codecs: wsa883x: Handle reading version failure
+ ALSA: control: Take power_ref lock primarily
+ tools/x86/kcpuid: Protect against faulty "max subleaf" values
+ x86/pkeys: Add PKRU as a parameter in signal handling functions
+ x86/pkeys: Restore altstack access in sigreturn()
+ x86/kexec: Add EFI config table identity mapping for kexec kernel
+ x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
+ ALSA: asihpi: Fix potential OOB array access
+ ALSA: hdsp: Break infinite MIDI input flush loop
+ tools/nolibc: powerpc: limit stack-protector workaround to GCC
+ selftests/nolibc: avoid passing NULL to printf("%s")
+ x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
+ ASoC: Intel: boards: always check the result of acpi_dev_get_first_match_dev()
+ rcu-tasks: Fix access non-existent percpu rtpcp variable in 
rcu_tasks_need_gpcb()
+ hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
+ fbdev: efifb: Register sysfs groups through driver core
+ fbdev: pxafb: Fix possible use after free in pxafb_task()
+ pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set()
+ pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs
+ rcuscale: Provide clear error when async specified without primitives
+ power: reset: brcmstb: Do not go into infinite loop if reset fails
+ iommu/arm-smmu-v3: Match Stall behaviour for S2
+ iommu/vt-d: Always reserve a domain ID for identity setup
+ iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
+ iommu/vt-d: Unconditionally flush device TLB for pasid table updates
+ iommu/arm-smmu-v3: Do not use devm for the cd table allocations
+ drm/stm: Avoid use-after-free issues with crtc and plane
+ drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
+ drm/amd/display: Check null pointers before using them
+ drm/amd/display: Check null pointers before used
+ drm/amd/display: Check null pointers before multiple uses
+ drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
+ drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
+ drm/amd/display: Add null check for head_pipe in 
dcn201_acquire_free_pipe_for_layer
+ drm/amd/display: Add null check for head_pipe in 
dcn32_acquire_idle_pipe_for_head_pipe_in_layer
+ drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in 
dcn30_init_hw
+ drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in 
dcn401_init_hw
+ drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
+ drm/amd/display: Add null check for pipe_ctx->plane_state in 
dcn20_program_pipe
+ drm/amd/display: Add null check for top_pipe_to_program in 
commit_planes_for_stream
+ drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces
+ ata: pata_serverworks: Do not use the term blacklist
+ ata: sata_sil: Rename sil_blacklist to sil_quirks
+ selftests/bpf: fix uprobe.path leak in bpf_testmod
+ scsi: smartpqi: Add new controller PCI IDs
+ HID: Ignore battery for all ELAN I2C-HID devices
+ drm/amd/display: Underflow Seen on DCN401 eGPU
+ drm/amd/display: Handle null 'stream_status' in 
'planes_changed_for_existing_stream'
+ drm/amd/display: Add NULL check for function pointer in 
dcn20_set_output_transfer_func
+ drm/amd/display: Add NULL check for function pointer in 
dcn401_set_output_transfer_func
+ drm/amd/display: Add NULL check for function pointer in 
dcn32_set_output_transfer_func
+ drm/amd/display: fix a UBSAN warning in DML2.1
+ drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
+ drm/amd/display: Check null pointers before using dc->clk_mgr
+ drm/amd/display: Check null pointer before try to access it
+ drm/amd/display: Add null check for 'afb' in 
amdgpu_dm_plane_handle_cursor_update (v2)
+ drm/xe: Name and document Wa_14019789679
+ drm/amd/display: fix double free issue during amdgpu module unload
+ drm/amdgpu: add list empty check to avoid null pointer issue
+ jfs: UBSAN: shift-out-of-bounds in dbFindBits
+ jfs: Fix uaf in dbFreeBits
+ jfs: check if leafidx greater than num leaves per dmap tree
+ scsi: smartpqi: correct stream detection
+ scsi: smartpqi: add new controller PCI IDs
+ drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
+ jfs: Fix uninit-value access of new_ea in ea_buffer
+ drm/amdgpu: add raven1 gfxoff quirk
+ drm/amdgpu: enable gfxoff quirk on HP 705G4
+ drm/amdkfd: Fix resource leak in criu restore queue
+ HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
+ platform/x86: touchscreen_dmi: add nanote-next quirk
+ platform/x86/amd: pmf: Add quirk for TUF Gaming A14
+ drm/stm: ltdc: reset plane transparency after plane disable
+ drm/amd/display: Initialize denominators' default to 1
+ drm/amd/display: Check null-initialized variables
+ drm/amd/display: Check phantom_stream before it is used
+ drm/amd/display: Check stream before comparing them
+ drm/amd/display: Deallocate DML memory if allocation fails
+ drm/amd/display: Increase array size of dummy_boolean
+ drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format 
translation
+ drm/amd/display: Fix index out of bounds in degamma hardware format 
translation
+ drm/amd/display: Implement bounds check for stream encoder creation in DCN401
+ drm/amd/display: Fix index out of bounds in DCN30 color transformation
+ drm/amdgpu/gfx12: properly handle error ints on all pipes
+ drm/amdgpu/gfx9: properly handle error ints on all pipes
+ drm/amd/display: Fix possible overflow in integer multiplication
+ drm/amd/display: Check stream_status before it is used
+ drm/amd/display: Avoid overflow assignment in link_dp_cts
+ drm/amd/display: Initialize get_bytes_per_element's default to 1
+ drm/printer: Allow NULL data in devcoredump printer
+ perf,x86: avoid missing caller address in stack traces captured in uprobe
+ scsi: aacraid: Rearrange order of struct aac_srb_unit
+ scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
+ scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached 
topology
+ scsi: lpfc: Update PRLO handling in direct attached topology
+ drm/amd/display: Force enable 3DLUT DMA check for dcn401 in DML
+ drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
+ drm/amdgpu: fix unchecked return value warning for amdgpu_atombios
+ perf: Fix event_function_call() locking
+ scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
+ drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
+ drm/amd/display: Unlock Pipes Based On DET Allocation
+ drm/amdgpu: fix ptr check warning in gfx9 ip_dump
+ drm/amdgpu: fix ptr check warning in gfx10 ip_dump
+ drm/amdgpu: fix ptr check warning in gfx11 ip_dump
+ drm/amdgpu: Block MMR_READ IOCTL in reset
+ drm/amdgpu/gfx9: use rlc safe mode for soft recovery
+ drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL
+ drm/xe: Use topology to determine page fault queue size
+ drm/amd/pm: ensure the fw_info is not null before using it
+ drm/amdkfd: Check int source id for utcl2 poison event
+ of/irq: Refer to actual buffer size in of_irq_parse_one()
+ drm/amd/display: guard write a 0 post_divider value to HW
+ powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
+ ovl: fsync after metadata copy-up
+ drm/amdgpu/gfx12: use rlc safe mode for soft recovery
+ drm/amdgpu/gfx11: use rlc safe mode for soft recovery
+ drm/amdgpu/gfx10: use rlc safe mode for soft recovery
+ platform/x86: lenovo-ymc: Ignore the 0x0 state
+ tools/hv: Add memory allocation check in hv_fcopy_start
+ HID: i2c-hid: ensure various commands do not interfere with each other
+ ksmbd: add refcnt to ksmbd_conn struct
+ platform/mellanox: mlxbf-pmc: fix lockdep warning
+ platform/x86: x86-android-tablets: Adjust Xiaomi Pad 2 bottom bezel touch 
buttons LED
+ ext4: filesystems without casefold feature cannot be mounted with siphash
+ bpf: Make the pointer returned by iter next method valid
+ ext4: ext4_search_dir should return a proper error
+ ext4: avoid use-after-free in ext4_ext_show_leaf()
+ ext4: fix i_data_sem unlock order in ext4_ind_migrate()
+ bpftool: Fix undefined behavior caused by shifting into the sign bit
+ iomap: handle a post-direct I/O invalidate race in 
iomap_write_delalloc_release
+ bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
+ bpf: Fix a sdiv overflow issue
+ EINJ, CXL: Fix CXL device SBDF calculation
+ spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
+ spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
+ spi: spi-cadence: Fix missing spi_controller_is_target() check
+ selftest: hid: add missing run-hid-tools-tests.sh
+ spi: s3c64xx: fix timeout counters in flush_fifo
+ kselftest/devices/probe: Fix SyntaxWarning in regex strings for Python3
+ selftests: breakpoints: use remaining time to check if suspend succeed
+ accel/ivpu: Add missing MODULE_FIRMWARE metadata
+ spi: rpc-if: Add missing MODULE_DEVICE_TABLE
+ ALSA: control: Fix power_ref lock order for compat code, too
+ perf callchain: Fix stitch LBR memory leaks
+ perf: Really fix event_function_call() locking
+ drm/xe: fixup xe_alloc_pf_queue
+ drm/xe: Fix memory leak on xe_alloc_pf_queue failure
+ selftests: vDSO: fix vDSO name for powerpc
+ selftests: vDSO: fix vdso_config for powerpc
+ selftests: vDSO: fix vDSO symbols lookup for powerpc64
+ ext4: fix error message when rejecting the default hash
+ selftests/mm: fix charge_reserved_hugetlb.sh test
+ nvme-tcp: fix link failure for TCP auth
+ f2fs: add write priority option based on zone UFS
+ f2fs: fix to don't panic system for no free segment fault injection
+ powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
+ selftests: vDSO: fix ELF hash table entry size for s390x
+ selftests: vDSO: fix vdso_config for s390
+ f2fs: make BG GC more aggressive for zoned devices
+ f2fs: introduce migration_window_granularity
+ f2fs: increase BG GC migration window granularity when boosted for zoned 
devices
+ f2fs: do FG_GC when GC boosting is required for zoned devices
+ f2fs: forcibly migrate to secure space for zoned device file pinning
+ Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
+ platform/x86: x86-android-tablets: Fix use after free on 
platform_device_register() errors
+ platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
+ KVM: arm64: Fix kvm_has_feat*() handling of negative features
+ i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
+ i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
+ i2c: xiic: Wait for TX empty to avoid missed TX NAKs
+ media: i2c: ar0521: Use cansleep version of gpiod_set_value()
+ i2c: core: Lock address during client device instantiation
+ i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
+ i2c: designware: fix controller is holding SCL low while ENABLE bit is 
disabled
+ i2c: synquacer: Deal with optional PCLK correctly
+ rust: sync: require `T: Sync` for `LockedBy::access`
+ ovl: fail if trusted xattrs are needed but caller lacks permission
+ firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
+ memory: tegra186-emc: drop unused to_tegra186_emc()
+ dt-bindings: clock: exynos7885: Fix duplicated binding
+ spi: bcm63xx: Fix module autoloading
+ spi: bcm63xx: Fix missing pm_runtime_disable()
+ power: supply: hwmon: Fix missing temp1_max_alarm attribute
+ mm, slub: avoid zeroing kmalloc redzone
+ power: supply: Drop use_cnt check from power_supply_property_is_writeable()
+ perf/core: Fix small negative period being ignored
+ drm/v3d: Prevent out of bounds access in performance query extensions
+ parisc: Fix itlb miss handler for 64-bit programs
+ drm/mediatek: ovl_adaptor: Add missing of_node_put()
+ drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
+ ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
+ ALSA: core: add isascii() check to card ID generator
+ ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
+ ALSA: usb-audio: Add native DSD support for Luxman D-08u
+ ALSA: line6: add hw monitor volume control to POD HD500X
+ ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8
+ ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
+ ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
+ ext4: no need to continue when the number of entries is 1
+ ext4: correct encrypted dentry name hash when not casefolded
+ ext4: fix slab-use-after-free in ext4_split_extent_at()
+ ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
+ ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
+ ext4: dax: fix overflowing extents beyond inode size when partially writing
+ ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
+ ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
+ ext4: aovid use-after-free in ext4_ext_insert_extent()
+ ext4: fix double brelse() the buffer of the extents path
+ ext4: fix timer use-after-free on failed mount
+ ext4: fix access to uninitialised lock in fc replay path
+ ext4: update orig_path in ext4_find_extent()
+ ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
+ ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
+ ext4: fix fast commit inode enqueueing during a full journal commit
+ ext4: use handle to mark fc as ineligible in __track_dentry_update()
+ ext4: mark fc as ineligible using an handle in ext4_xattr_set()
+ ext4: fix off by one issue in alloc_flex_gd()
+ parisc: Fix 64-bit userspace syscall path
+ parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
+ parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
+ drm/rockchip: vop: clear DMA stop bit on RK3066
+ of: address: Report error on resource bounds overflow
+ of/irq: Support #msi-cells=<0> in of_msi_get_domain
+ drm: omapdrm: Add missing check for alloc_ordered_workqueue
+ resource: fix region_intersects() vs add_memory_driver_managed()
+ lib/buildid: harden build ID parsing logic
+ jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
+ jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
+ mm: krealloc: consider spare memory for __GFP_ZERO
+ ocfs2: fix the la space leak when unmounting an ocfs2 volume
+ ocfs2: fix uninit-value in ocfs2_get_block()
+ ocfs2: reserve space for inline xattr before attaching reflink tree
+ ocfs2: cancel dqi_sync_work before freeing oinfo
+ ocfs2: remove unreasonable unlock in ocfs2_read_blocks
+ ocfs2: fix null-ptr-deref when journal load failed.
+ ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
+ scripts/gdb: fix timerlist parsing issue
+ scripts/gdb: add iteration function for rbtree
+ scripts/gdb: fix lx-mounts command error
+ arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
+ arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
+ drm/xe: fix UAF around queue destruction
+ drm/xe/oa: Don't reset OAC_CONTEXT_ENABLE on OA stream close
+ sched/deadline: Comment sched_dl_entity::dl_server variable
+ sched/core: Add clearing of ->dl_server in put_prev_task_balance()
+ sched/core: Clear prev->dl_server in CFS pick fast path
+ sched: psi: fix bogus pressure spikes from aggregation race
+ riscv: define ILLEGAL_POINTER_VALUE for 64bit
+ UBUNTU: [Config] updateconfigs for ILLEGAL_POINTER_VALUE on riscv
+ exfat: fix memory leak in exfat_load_bitmap()
+ perf python: Disable -Wno-cast-function-type-mismatch if present on clang
+ perf hist: Update hist symbol when updating maps
+ nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
+ nfsd: map the EBADMSG to nfserr_io to avoid warning
+ NFSD: Fix NFSv4's PUTPUBFH operation
+ i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver 
Due to Race Condition
+ sysctl: avoid spurious permanent empty tables
+ RDMA/mana_ib: use the correct page table index based on hardware page size
+ RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
+ drivers/perf: riscv: Align errno for unsupported perf event
+ riscv: Fix kernel stack size when KASAN is enabled
+ aoe: fix the potential use-after-free problem in more places
+ media: imx335: Fix reset-gpio handling
+ clk: rockchip: fix error for unknown clocks
+ leds: pca9532: Remove irrelevant blink configuration error message
+ remoteproc: k3-r5: Fix error handling when power-up failed
+ gfs2: fix double destroy_workqueue error
+ media: videobuf2: Drop minimum allocation requirement of 2 buffers
+ clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
+ media: sun4i_csi: Implement link validate for sun4i_csi subdev
+ clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
+ media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
+ dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
+ clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x
+ clk: qcom: clk-rpmh: Fix overflow in BCM vote
+ clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
+ clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
+ media: venus: fix use after free bug in venus_remove due to race condition
+ clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
+ clk: qcom: gcc-sc8180x: Add GPLL9 support
+ clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
+ clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
+ drm/amd/display: avoid set dispclk to 0
+ smb: client: use actual path when queryfs
+ smb3: fix incorrect mode displayed for read-only files
+ iio: magnetometer: ak8975: Fix reading for ak099xx sensors
+ iio: pressure: bmp280: Fix regmap for BMP280 device
+ iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
+ vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
+ net: gso: fix tcp fraglist segmentation after pull from frag_list
+ gso: fix udp gso fraglist segmentation after pull from frag_list
+ tomoyo: fallback to realpath if symlink's pathname does not exist
+ kselftests: mm: fix wrong __NR_userfaultfd value
+ net: stmmac: Fix zero-division error when disabling tc cbs
+ rtc: at91sam9: fix OF node leak in probe() error path
+ mm/filemap: fix filemap_get_folios_contig THP panic
+ mm/hugetlb: fix memfd_pin_folios free_huge_pages leak
+ mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak
+ mm/gup: fix memfd_pin_folios hugetlb page allocation
+ mm/gup: fix memfd_pin_folios alloc race panic
+ mm/hugetlb: simplify refs in memfd_alloc_folio
+ Input: adp5589-keys - fix NULL pointer dereference
+ Input: adp5589-keys - fix adp5589_gpio_get_value()
+ HID: bpf: fix cfi stubs for hid_bpf_ops
+ cachefiles: fix dentry leak in cachefiles_open_file()
+ pidfs: check for valid pid namespace
+ ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO
+ ACPI: resource: Remove duplicate Asus E1504GAB IRQ override
+ ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA
+ ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
+ ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
+ btrfs: send: fix buffer overflow detection when copying path to cache entry
+ btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
+ btrfs: drop the backref cache during relocation if we commit
+ btrfs: send: fix invalid clone operation for file that got its size decreased
+ btrfs: wait for fixup workers before stopping cleaner kthread during umount
+ cpufreq: Avoid a bad reference count on CPU node
+ cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
+ gpio: davinci: fix lazy disable
+ net: pcs: xpcs: fix the wrong register that was written back
+ Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
+ mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
+ io_uring/net: harden multishot termination case for recv
+ ceph: fix cap ref leak via netfs init_request
+ tracing/hwlat: Fix a race during cpuhp processing
+ tracing/timerlat: Drop interface_lock in stop_kthread()
+ tracing/timerlat: Fix a race during cpuhp processing
+ tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
+ rtla: Fix the help text in osnoise and timerlat top tools
+ firmware/sysfb: Disable sysfb for firmware buffers with unknown parent
+ close_range(): fix the logics in descriptor table trimming
+ drm/i915/gem: fix bitwise and logical AND mixup
+ drm/panthor: Don't add write fences to the shared BOs
+ drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()
+ drm/panthor: Don't declare a queue blocked if deferred operations are pending
+ drm/sched: Fix dynamic job-flow control race
+ drm/sched: Add locking to drm_sched_entity_modify_sched
+ drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job
+ drm/sched: Always increment correct scheduler score
+ drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC
+ drm/amd/display: Add HDR workaround for specific eDP
+ drm/amd/display: Enable idle workqueue for more IPS modes
+ drm/amd/display: Fix system hang while resume with TBT monitor
+ kconfig: fix infinite loop in sym_calc_choice()
+ kconfig: qconf: move conf_read() before drawing tree pain
+ kconfig: qconf: fix buffer overflow in debug links
+ arm64: cputype: Add Neoverse-N3 definitions
+ arm64: errata: Expand speculative SSBS workaround once more
+ uprobes: fix kernel info leak via "[uprobes]" vma
+ mm: z3fold: deprecate CONFIG_Z3FOLD
+ UBUNTU: [Config] updateconfigs after deprecating Z3FOLD
+ drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
+ sunrpc: change sp_nrthreads from atomic_t to unsigned int.
+ NFSD: Async COPY result needs to return a write verifier
+ NFSD: Limit the number of concurrent async COPY operations
+ remoteproc: k3-r5: Acquire mailbox handle during probe routine
+ remoteproc: k3-r5: Delay notification of wakeup event
+ r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
+ r8169: add tally counter fields added with RTL8125
+ ACPI: battery: Simplify battery hook locking
+ ACPI: battery: Fix possible crash when unregistering a battery hook
+ drm/xe: Clean up VM / exec queue file lock usage.
+ drm/xe/vm: move xa_alloc to prevent UAF
+ drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
+ drm/xe/vram: fix ccs offset calculation
+ drm/sched: revert "Always increment correct scheduler score"
+ rxrpc: Fix a race between socket set up and I/O thread creation
+ vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
+ ALSA: control: Fix leftover snd_power_unref()
+ crypto: octeontx* - Select CRYPTO_AUTHENC
+ drm/amd/display: Revert Avoid overflow assignment
+ perf report: Fix segfault when 'sym' sort key is not used
+ pmdomain: core: Reduce debug summary table width
+ perf python: Allow checking for the existence of warning options in clang
  Linux 6.11.3
- perf python: Allow checking for the existence of warning options in clang
- pmdomain: core: Reduce debug summary table width
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- ALSA: control: Fix leftover snd_power_unref()
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- drm/sched: revert "Always increment correct scheduler score"
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/xe/vram: fix ccs offset calculation
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- drm/xe/vm: move xa_alloc to prevent UAF
- drm/xe: Clean up VM / exec queue file lock usage.
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- r8169: add tally counter fields added with RTL8125
- r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- NFSD: Limit the number of concurrent async COPY operations
- NFSD: Async COPY result needs to return a write verifier
- sunrpc: change sp_nrthreads from atomic_t to unsigned int.
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- mm: z3fold: deprecate CONFIG_Z3FOLD
- uprobes: fix kernel info leak via "[uprobes]" vma
- arm64: errata: Expand speculative SSBS workaround once more
- arm64: cputype: Add Neoverse-N3 definitions
- kconfig: qconf: fix buffer overflow in debug links
- kconfig: qconf: move conf_read() before drawing tree pain
- kconfig: fix infinite loop in sym_calc_choice()
- drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal 
DCN35
- drm/amd/display: Enable idle workqueue for more IPS modes
- drm/amd/display: Add HDR workaround for specific eDP
- drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC
- drm/sched: Always increment correct scheduler score
- drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/sched: Fix dynamic job-flow control race
- drm/panthor: Don't declare a queue blocked if deferred operations are pending
- drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()
- drm/panthor: Don't add write fences to the shared BOs
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- firmware/sysfb: Disable sysfb for firmware buffers with unknown parent
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- io_uring/net: harden multishot termination case for recv
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- cpufreq: Avoid a bad reference count on CPU node
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: send: fix invalid clone operation for file that got its size decreased
- btrfs: drop the backref cache during relocation if we commit
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: send: fix buffer overflow detection when copying path to cache entry
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA
- ACPI: resource: Remove duplicate Asus E1504GAB IRQ override
- ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO
- pidfs: check for valid pid namespace
- cachefiles: fix dentry leak in cachefiles_open_file()
- HID: bpf: fix cfi stubs for hid_bpf_ops
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- Input: adp5589-keys - fix NULL pointer dereference
- mm/hugetlb: simplify refs in memfd_alloc_folio
- mm/gup: fix memfd_pin_folios alloc race panic
- mm/gup: fix memfd_pin_folios hugetlb page allocation
- mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak
- mm/hugetlb: fix memfd_pin_folios free_huge_pages leak
- mm/filemap: fix filemap_get_folios_contig THP panic
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- kselftests: mm: fix wrong __NR_userfaultfd value
- tomoyo: fallback to realpath if symlink's pathname does not exist
- gso: fix udp gso fraglist segmentation after pull from frag_list
- net: gso: fix tcp fraglist segmentation after pull from frag_list
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- drm/amd/display: avoid set dispclk to 0
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- media: venus: fix use after free bug in venus_remove due to race condition
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- media: videobuf2: Drop minimum allocation requirement of 2 buffers
- gfs2: fix double destroy_workqueue error
- remoteproc: k3-r5: Fix error handling when power-up failed
- leds: pca9532: Remove irrelevant blink configuration error message
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- media: imx335: Fix reset-gpio handling
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- drivers/perf: riscv: Align errno for unsupported perf event
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- RDMA/mana_ib: use the correct page table index based on hardware page size
- sysctl: avoid spurious permanent empty tables
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver 
Due to Race Condition
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- exfat: fix memory leak in exfat_load_bitmap()
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- sched: psi: fix bogus pressure spikes from aggregation race
- sched/core: Clear prev->dl_server in CFS pick fast path
- sched/core: Add clearing of ->dl_server in put_prev_task_balance()
- sched/deadline: Comment sched_dl_entity::dl_server variable
- drm/xe/oa: Don't reset OAC_CONTEXT_ENABLE on OA stream close
- drm/xe: fix UAF around queue destruction
- arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- scripts/gdb: fix lx-mounts command error
- scripts/gdb: add iteration function for rbtree
- scripts/gdb: fix timerlist parsing issue
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- lib/buildid: harden build ID parsing logic
- resource: fix region_intersects() vs add_memory_driver_managed()
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- of/irq: Support #msi-cells=<0> in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- drm/xe: Generate oob before compiling anything
- ext4: fix off by one issue in alloc_flex_gd()
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: update orig_path in ext4_find_extent()
- ext4: fix access to uninitialised lock in fc replay path
- ext4: fix timer use-after-free on failed mount
- ext4: fix double brelse() the buffer of the extents path
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: correct encrypted dentry name hash when not casefolded
- ext4: no need to continue when the number of entries is 1
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- drm/v3d: Prevent out of bounds access in performance query extensions
- perf/core: Fix small negative period being ignored
- power: supply: Drop use_cnt check from power_supply_property_is_writeable()
- mm, slub: avoid zeroing kmalloc redzone
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: synquacer: Deal with optional PCLK correctly
- i2c: designware: fix controller is holding SCL low while ENABLE bit is 
disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: core: Lock address during client device instantiation
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- KVM: arm64: Fix kvm_has_feat*() handling of negative features
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: x86-android-tablets: Fix use after free on 
platform_device_register() errors
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- f2fs: forcibly migrate to secure space for zoned device file pinning
- f2fs: do FG_GC when GC boosting is required for zoned devices
- f2fs: increase BG GC migration window granularity when boosted for zoned 
devices
- f2fs: introduce migration_window_granularity
- f2fs: make BG GC more aggressive for zoned devices
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- f2fs: fix to don't panic system for no free segment fault injection
- f2fs: add write priority option based on zone UFS
- nvme-tcp: fix link failure for TCP auth
- selftests/mm: fix charge_reserved_hugetlb.sh test
- ext4: fix error message when rejecting the default hash
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- drm/xe: Fix memory leak on xe_alloc_pf_queue failure
- drm/xe: fixup xe_alloc_pf_queue
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- ALSA: control: Fix power_ref lock order for compat code, too
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- kselftest/devices/probe: Fix SyntaxWarning in regex strings for Python3
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- EINJ, CXL: Fix CXL device SBDF calculation
- bpf: Fix a sdiv overflow issue
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- iomap: handle a post-direct I/O invalidate race in 
iomap_write_delalloc_release
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: ext4_search_dir should return a proper error
- bpf: Make the pointer returned by iter next method valid
- ext4: filesystems without casefold feature cannot be mounted with siphash
- platform/x86: x86-android-tablets: Adjust Xiaomi Pad 2 bottom bezel touch 
buttons LED
- platform/mellanox: mlxbf-pmc: fix lockdep warning
- ksmbd: add refcnt to ksmbd_conn struct
- HID: i2c-hid: ensure various commands do not interfere with each other
- tools/hv: Add memory allocation check in hv_fcopy_start
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- drm/amdgpu/gfx12: use rlc safe mode for soft recovery
- ovl: fsync after metadata copy-up
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- drm/amd/display: guard write a 0 post_divider value to HW
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/xe: Drop warn on xe_guc_pc_gucrc_disable in guc pc fini
- drm/amdkfd: Check int source id for utcl2 poison event
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/xe: Use topology to determine page fault queue size
- drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/amdgpu: fix ptr check warning in gfx11 ip_dump
- drm/amdgpu: fix ptr check warning in gfx10 ip_dump
- drm/amdgpu: fix ptr check warning in gfx9 ip_dump
- drm/amd/display: Unlock Pipes Based On DET Allocation
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_atombios
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- drm/amd/display: Force enable 3DLUT DMA check for dcn401 in DML
- scsi: lpfc: Update PRLO handling in direct attached topology
- scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached 
topology
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
- scsi: aacraid: Rearrange order of struct aac_srb_unit
- perf,x86: avoid missing caller address in stack traces captured in uprobe
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/amd/display: Check stream_status before it is used
- drm/amd/display: Fix possible overflow in integer multiplication
- drm/amdgpu/gfx9: properly handle error ints on all pipes
- drm/amdgpu/gfx12: properly handle error ints on all pipes
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Implement bounds check for stream encoder creation in DCN401
- drm/amd/display: Fix index out of bounds in degamma hardware format 
translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format 
translation
- drm/amd/display: Increase array size of dummy_boolean
- drm/amd/display: Deallocate DML memory if allocation fails
- drm/amd/display: Check stream before comparing them
- drm/amd/display: Check phantom_stream before it is used
- drm/amd/display: Check null-initialized variables
- drm/amd/display: Initialize denominators' default to 1
- drm/stm: ltdc: reset plane transparency after plane disable
- drm/xe/fbdev: Limit the usage of stolen for LNL+
- drm/xe: Add timeout to preempt fences
- platform/x86/amd: pmf: Add quirk for TUF Gaming A14
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- jfs: Fix uninit-value access of new_ea in ea_buffer
- drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
- scsi: smartpqi: add new controller PCI IDs
- scsi: smartpqi: correct stream detection
- jfs: check if leafidx greater than num leaves per dmap tree
- jfs: Fix uaf in dbFreeBits
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amdgpu: add list empty check to avoid null pointer issue
- drm/amd/display: fix double free issue during amdgpu module unload
- drm/xe: Name and document Wa_14019789679
- drm/amd/display: Add null check for 'afb' in 
amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointer before try to access it
- drm/amd/display: Check null pointers before using dc->clk_mgr
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
- drm/amd/display: fix a UBSAN warning in DML2.1
- drm/amd/display: Add NULL check for function pointer in 
dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in 
dcn401_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in 
dcn20_set_output_transfer_func
- drm/amd/display: Handle null 'stream_status' in 
'planes_changed_for_existing_stream'
- drm/amd/display: Underflow Seen on DCN401 eGPU
- HID: Ignore battery for all ELAN I2C-HID devices
- scsi: smartpqi: Add new controller PCI IDs
- selftests/bpf: fix uprobe.path leak in bpf_testmod
- ata: sata_sil: Rename sil_blacklist to sil_quirks
- ata: pata_serverworks: Do not use the term blacklist
- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces
- drm/amd/display: Add null check for top_pipe_to_program in 
commit_planes_for_stream
- drm/amd/display: Add null check for pipe_ctx->plane_state in 
dcn20_program_pipe
- drm/xe/hdcp: Check GSC structure validity
- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in 
dcn401_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in 
dcn30_init_hw
- drm/amd/display: Add null check for head_pipe in 
dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in 
dcn201_acquire_free_pipe_for_layer
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before used
- drm/amd/display: Check null pointers before using them
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- drm/stm: Avoid use-after-free issues with crtc and plane
- iommu/arm-smmu-v3: Do not use devm for the cd table allocations
- iommu/vt-d: Unconditionally flush device TLB for pasid table updates
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- iommu/arm-smmu-v3: Match Stall behaviour for S2
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs
- pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set()
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- rcu-tasks: Fix access non-existent percpu rtpcp variable in 
rcu_tasks_need_gpcb()
- ASoC: Intel: boards: always check the result of acpi_dev_get_first_match_dev()
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- ALSA: asihpi: Fix potential OOB array access
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ALSA: control: Take power_ref lock primarily
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init
- ALSA: usb-audio: Add mixer quirk for RME Digiface USB
- ALSA: usb-audio: Add quirk for RME Digiface USB
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- x86/apic: Remove logical destination mode for 64-bit
- x86/ioapic: Handle allocation failures gracefully
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- netfs: Cancel dirty folios that have no storage destination
- wifi: mwifiex: Fix memcpy() field-spanning write warning in 
mwifiex_cmd_802_11_scan_ext()
- wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- crypto: hisilicon - fix missed error branch
- net: napi: Prevent overflow of napi_defer_hard_irqs
- x86/bugs: Fix handling when SRSO mitigation is disabled
- x86/bugs: Add missing NO_SSB flag
- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
- net: phy: Check for read errors in SIOCGMIIREG
- arm64: trans_pgd: mark PTEs entries as valid to avoid dead kexec()
- cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- block: fix integer overflow in BLKSECDISCARD
- wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume
- netdev-genl: Set extack and fix error on napi-get
- can: netlink: avoid call to do_set_data_bittiming callback with stale 
can_priv::ctrlmode
- nvme: fix metadata handling in nvme-passthrough
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- vfs: use RCU in ilookup
- proc: add config & param to block forcing mem writes
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- virt: sev-guest: Ensure the SNP guest messages do not exceed a page
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: allow only CN mcc from WRDD
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- nvme-tcp: check for invalidated or revoked key
- nvme-tcp: sanitize TLS key handling
- nvme-keyring: restrict match length for version '1' identifiers
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- netfilter: nf_tables: do not remove elements if set backend implements .abort
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs
- tipc: guard against string buffer overrun
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in 
acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw89: 885xb: reset IDMEM mode to prevent download firmware failure
- l2tp: use rcu list add/del when updating lists
- l2tp: free sessions using rcu
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- btrfs: don't readahead the relocation inode on RST
- blk_iocost: fix more out of bound shifts
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- exec: don't WARN for racy path_noexec check
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- wifi: cfg80211: Set correct chandef when starting CAC
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and 
ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- l2tp: prevent possible tunnel refcount underflow
- e1000e: avoid failing the system during pm_suspend
- drm/amd/display: Re-enable panel replay feature
- drm/amd/display: Fix VRR cannot enable
- drm/amd/display: Disable replay if VRR capability is false
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- tools/rtla: Fix installation from out-of-tree build
- gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- cifs: Fix buffer overflow when parsing NFS reparse points
- drm/xe: Prevent null pointer access in xe_migrate_copy
- drm/xe: Resume TDR after GT reset
- drm/xe/guc_submit: add missing locking in wedged_fini
- drm/xe: Restore pci state upon resume
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- drm/panthor: Lock the VM resv before calling drm_gpuvm_bo_obtain_prealloc()
- ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- rust: mutex: fix __mutex_init() usage in case of PREEMPT_RT
- rust: kbuild: auto generate helper exports
- rust: kbuild: split up helpers.c
- io_uring: fix memory leak when cache init fail
- drm/connector: hdmi: Fix writing Dynamic Range Mastering infoframes
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is 
uninitialized
- drm/panthor: Fix race when converting group handle to group object
- ASoC: topology: Fix incorrect addressing assignments
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- net/ncsi: Disable the ncsi work before freeing the associated structure
- bridge: mcast: Fail MDB get request on empty entry
- net: phy: realtek: Check the index value in led_hw_control_get
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- netfs: Fix missing wakeup after issuing writes
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: add more sanity checks to qdisc_pkt_len_init()
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- net: dsa: improve shutdown sequence
- afs: Fix the setting of the server responding flag
- afs: Fix missing wire-up of afs_retry_request()
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- selftests: netfilter: Add missing return value
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5e: SHAMPO, Fix overflow of hd_per_wq
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- drm/i915/dp: Fix colorimetry detection
- ceph: remove the incorrect Fw reference check when dirtying pages
- ceph: fix a memory leak on cap_auths in MDS client
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- mailbox: ARM_MHU_V3 should depend on ARM64
- ksmbd: fix warning: comparison of distinct pointer types lacks a cast
- drm/amd/display: handle nulled pipe context in DCE110's set_drr()
- drm/amdgpu: Fix get each xcp macro
- drm/i915/dp: Fix AUX IO power enabling for eDP PSR
- drm/i915/display: BMG supports UHBR13.5
- drm/i915/psr: Do not wait for PSR being idle on on Panel Replay
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- static_call: Handle module init failure correctly in static_call_del_module()
+ UBUNTU: Upstream stable to v6.11.3

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2089052

Title:
  Oracular update: v6.11.3 upstream stable release

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Oracular:
  In Progress

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v6.11.3 upstream stable release
         from git://git.kernel.org/

  static_call: Handle module init failure correctly in static_call_del_module()
  static_call: Replace pointless WARN_ON() in static_call_module_notify()
  jump_label: Fix static_key_slow_dec() yet again
  scsi: st: Fix input/output error on empty drive reset
  scsi: pm8001: Do not overwrite PCI queue mapping
  drm/i915/psr: Do not wait for PSR being idle on on Panel Replay
  drm/i915/display: BMG supports UHBR13.5
  drm/i915/dp: Fix AUX IO power enabling for eDP PSR
  drm/amdgpu: Fix get each xcp macro
  drm/amd/display: handle nulled pipe context in DCE110's set_drr()
  ksmbd: fix warning: comparison of distinct pointer types lacks a cast
  mailbox: ARM_MHU_V3 should depend on ARM64
  UBUNTU: [Config] updateconfigs for ARM_MHU_V3
  mailbox: rockchip: fix a typo in module autoloading
  mailbox: bcm2835: Fix timeout during suspend mode
  ceph: fix a memory leak on cap_auths in MDS client
  ceph: remove the incorrect Fw reference check when dirtying pages
  drm/i915/dp: Fix colorimetry detection
  ieee802154: Fix build error
  net: sparx5: Fix invalid timestamps
  net/mlx5: Fix error path in multi-packet WQE transmit
  net/mlx5: Added cond_resched() to crdump collection
  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
  net/mlx5e: SHAMPO, Fix overflow of hd_per_wq
  net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
  netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
  net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
  net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
  selftests: netfilter: Fix nft_audit.sh for newer nft binaries
  netfilter: nf_tables: prevent nf_skb_duplicated corruption
  selftests: netfilter: Add missing return value
  Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
  Bluetooth: L2CAP: Fix uaf in l2cap_connect
  Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
  afs: Fix missing wire-up of afs_retry_request()
  afs: Fix the setting of the server responding flag
  net: dsa: improve shutdown sequence
  net: Add netif_get_gro_max_size helper for GRO
  net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
  net: ethernet: lantiq_etop: fix memory disclosure
  net: fec: Restart PPS after link state change
  net: fec: Reload PTP registers after link-state change
  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  net: add more sanity checks to qdisc_pkt_len_init()
  net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
  ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
  netfs: Fix missing wakeup after issuing writes
  net: test for not too small csum_start in virtio_net_hdr_to_skb()
  ppp: do not assume bh is held in ppp_channel_bridge_input()
  net: phy: realtek: Check the index value in led_hw_control_get
  bridge: mcast: Fail MDB get request on empty entry
  net/ncsi: Disable the ncsi work before freeing the associated structure
  iomap: constrain the file range passed to iomap_file_unshare
  dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
  sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
  ASoC: topology: Fix incorrect addressing assignments
  drm/panthor: Fix race when converting group handle to group object
  ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is 
uninitialized
  drm/connector: hdmi: Fix writing Dynamic Range Mastering infoframes
  io_uring: fix memory leak when cache init fail
  rust: kbuild: split up helpers.c
  rust: kbuild: auto generate helper exports
  rust: mutex: fix __mutex_init() usage in case of PREEMPT_RT
  ALSA: mixer_oss: Remove some incorrect kfree_const() usages
  ALSA: hda/realtek: Fix the push button function for the ALC257
  cifs: Remove intermediate object of failed create reparse call
  ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item
  drm/panthor: Lock the VM resv before calling drm_gpuvm_bo_obtain_prealloc()
  ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
  ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
  drm/xe: Restore pci state upon resume
  drm/xe/guc_submit: add missing locking in wedged_fini
  drm/xe: Resume TDR after GT reset
  drm/xe: Prevent null pointer access in xe_migrate_copy
  cifs: Fix buffer overflow when parsing NFS reparse points
  cifs: Do not convert delimiter when parsing NFS-style symlinks
  gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()
  tools/rtla: Fix installation from out-of-tree build
  ALSA: gus: Fix some error handling paths related to get_bpos() usage
  ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
  drm/amd/display: Disable replay if VRR capability is false
  drm/amd/display: Fix VRR cannot enable
  drm/amd/display: Re-enable panel replay feature
  e1000e: avoid failing the system during pm_suspend
  l2tp: prevent possible tunnel refcount underflow
  wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
  wifi: rtw89: avoid to add interface to list twice when SER
  wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
  crypto: x86/sha256 - Add parentheses around macros' single arguments
  crypto: octeontx - Fix authenc setkey
  crypto: octeontx2 - Fix authenc setkey
  ice: Adjust over allocation of memory in ice_sched_add_root_node() and 
ice_sched_add_node()
  wifi: iwlwifi: mvm: Fix a race in scan abort flow
  wifi: iwlwifi: mvm: drop wrong STA selection in TX
  wifi: cfg80211: Set correct chandef when starting CAC
  net/xen-netback: prevent UAF in xenvif_flush_hash()
  net: hisilicon: hip04: fix OF node leak in probe()
  net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
  net: hisilicon: hns_mdio: fix OF node leak in probe()
  ACPI: PAD: fix crash in exit_round_robin()
  ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
  ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
  exec: don't WARN for racy path_noexec check
  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB
  wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
  net: sched: consistently use rcu_replace_pointer() in taprio_change()
  Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
  Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
  ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
  ACPI: CPPC: Add support for setting EPP register in FFH
  blk_iocost: fix more out of bound shifts
  btrfs: don't readahead the relocation inode on RST
  wifi: ath12k: fix array out-of-bound access in SoC stats
  wifi: ath11k: fix array out-of-bound access in SoC stats
  wifi: rtw88: select WANT_DEV_COREDUMP
  l2tp: free sessions using rcu
  l2tp: use rcu list add/del when updating lists
  ACPI: EC: Do not release locks during operation region accesses
  ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in 
acpi_db_convert_to_package()
  tipc: guard against string buffer overrun
  net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs
  net: mvpp2: Increase size of queue_name buffer
  bnxt_en: Extend maximum length of version string by 1 byte
  ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
  wifi: rtw89: correct base HT rate mask for firmware
  netfilter: nf_tables: do not remove elements if set backend implements .abort
  ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
  nvme-keyring: restrict match length for version '1' identifiers
  nvme-tcp: sanitize TLS key handling
  nvme-tcp: check for invalidated or revoked key
  net: atlantic: Avoid warning about potential string truncation
  crypto: simd - Do not call crypto_alloc_tfm during registration
  netpoll: Ensure clean state on setup failures
  tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
  wifi: iwlwifi: mvm: use correct key iteration
  wifi: iwlwifi: allow only CN mcc from WRDD
  wifi: iwlwifi: mvm: avoid NULL pointer dereference
  virt: sev-guest: Ensure the SNP guest messages do not exceed a page
  wifi: mac80211: fix RCU list iterations
  ACPICA: iasl: handle empty connection_node
  proc: add config & param to block forcing mem writes
  UBUNTU: [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE
  vfs: use RCU in ilookup
  drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
  nvme: fix metadata handling in nvme-passthrough
  can: netlink: avoid call to do_set_data_bittiming callback with stale 
can_priv::ctrlmode
  netdev-genl: Set extack and fix error on napi-get
  wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume
  block: fix integer overflow in BLKSECDISCARD
  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
  cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()
  arm64: trans_pgd: mark PTEs entries as valid to avoid dead kexec()
  net: phy: Check for read errors in SIOCGMIIREG
  wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
  x86/bugs: Add missing NO_SSB flag
  x86/bugs: Fix handling when SRSO mitigation is disabled
  net: napi: Prevent overflow of napi_defer_hard_irqs
  crypto: hisilicon - fix missed error branch
  wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
  wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
  wifi: mwifiex: Fix memcpy() field-spanning write warning in 
mwifiex_cmd_802_11_scan_ext()
  netfs: Cancel dirty folios that have no storage destination
  nfp: Use IRQF_NO_AUTOEN flag in request_irq()
  ALSA: usb-audio: Add input value sanity checks for standard types
  x86/ioapic: Handle allocation failures gracefully
  x86/apic: Remove logical destination mode for 64-bit
  ALSA: usb-audio: Define macros for quirk table entries
  ALSA: usb-audio: Replace complex quirk lines with macros
  ALSA: usb-audio: Add quirk for RME Digiface USB
  ALSA: usb-audio: Add mixer quirk for RME Digiface USB
  ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init
  ALSA: usb-audio: Add logitech Audio profile quirk
  ASoC: codecs: wsa883x: Handle reading version failure
  ALSA: control: Take power_ref lock primarily
  tools/x86/kcpuid: Protect against faulty "max subleaf" values
  x86/pkeys: Add PKRU as a parameter in signal handling functions
  x86/pkeys: Restore altstack access in sigreturn()
  x86/kexec: Add EFI config table identity mapping for kexec kernel
  x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  ALSA: asihpi: Fix potential OOB array access
  ALSA: hdsp: Break infinite MIDI input flush loop
  tools/nolibc: powerpc: limit stack-protector workaround to GCC
  selftests/nolibc: avoid passing NULL to printf("%s")
  x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
  ASoC: Intel: boards: always check the result of acpi_dev_get_first_match_dev()
  rcu-tasks: Fix access non-existent percpu rtpcp variable in 
rcu_tasks_need_gpcb()
  hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
  fbdev: efifb: Register sysfs groups through driver core
  fbdev: pxafb: Fix possible use after free in pxafb_task()
  pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set()
  pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs
  rcuscale: Provide clear error when async specified without primitives
  power: reset: brcmstb: Do not go into infinite loop if reset fails
  iommu/arm-smmu-v3: Match Stall behaviour for S2
  iommu/vt-d: Always reserve a domain ID for identity setup
  iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
  iommu/vt-d: Unconditionally flush device TLB for pasid table updates
  iommu/arm-smmu-v3: Do not use devm for the cd table allocations
  drm/stm: Avoid use-after-free issues with crtc and plane
  drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
  drm/amd/display: Check null pointers before using them
  drm/amd/display: Check null pointers before used
  drm/amd/display: Check null pointers before multiple uses
  drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
  drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
  drm/amd/display: Add null check for head_pipe in 
dcn201_acquire_free_pipe_for_layer
  drm/amd/display: Add null check for head_pipe in 
dcn32_acquire_idle_pipe_for_head_pipe_in_layer
  drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in 
dcn30_init_hw
  drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in 
dcn401_init_hw
  drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
  drm/amd/display: Add null check for pipe_ctx->plane_state in 
dcn20_program_pipe
  drm/amd/display: Add null check for top_pipe_to_program in 
commit_planes_for_stream
  drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces
  ata: pata_serverworks: Do not use the term blacklist
  ata: sata_sil: Rename sil_blacklist to sil_quirks
  selftests/bpf: fix uprobe.path leak in bpf_testmod
  scsi: smartpqi: Add new controller PCI IDs
  HID: Ignore battery for all ELAN I2C-HID devices
  drm/amd/display: Underflow Seen on DCN401 eGPU
  drm/amd/display: Handle null 'stream_status' in 
'planes_changed_for_existing_stream'
  drm/amd/display: Add NULL check for function pointer in 
dcn20_set_output_transfer_func
  drm/amd/display: Add NULL check for function pointer in 
dcn401_set_output_transfer_func
  drm/amd/display: Add NULL check for function pointer in 
dcn32_set_output_transfer_func
  drm/amd/display: fix a UBSAN warning in DML2.1
  drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
  drm/amd/display: Check null pointers before using dc->clk_mgr
  drm/amd/display: Check null pointer before try to access it
  drm/amd/display: Add null check for 'afb' in 
amdgpu_dm_plane_handle_cursor_update (v2)
  drm/xe: Name and document Wa_14019789679
  drm/amd/display: fix double free issue during amdgpu module unload
  drm/amdgpu: add list empty check to avoid null pointer issue
  jfs: UBSAN: shift-out-of-bounds in dbFindBits
  jfs: Fix uaf in dbFreeBits
  jfs: check if leafidx greater than num leaves per dmap tree
  scsi: smartpqi: correct stream detection
  scsi: smartpqi: add new controller PCI IDs
  drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
  jfs: Fix uninit-value access of new_ea in ea_buffer
  drm/amdgpu: add raven1 gfxoff quirk
  drm/amdgpu: enable gfxoff quirk on HP 705G4
  drm/amdkfd: Fix resource leak in criu restore queue
  HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
  platform/x86: touchscreen_dmi: add nanote-next quirk
  platform/x86/amd: pmf: Add quirk for TUF Gaming A14
  drm/stm: ltdc: reset plane transparency after plane disable
  drm/amd/display: Initialize denominators' default to 1
  drm/amd/display: Check null-initialized variables
  drm/amd/display: Check phantom_stream before it is used
  drm/amd/display: Check stream before comparing them
  drm/amd/display: Deallocate DML memory if allocation fails
  drm/amd/display: Increase array size of dummy_boolean
  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format 
translation
  drm/amd/display: Fix index out of bounds in degamma hardware format 
translation
  drm/amd/display: Implement bounds check for stream encoder creation in DCN401
  drm/amd/display: Fix index out of bounds in DCN30 color transformation
  drm/amdgpu/gfx12: properly handle error ints on all pipes
  drm/amdgpu/gfx9: properly handle error ints on all pipes
  drm/amd/display: Fix possible overflow in integer multiplication
  drm/amd/display: Check stream_status before it is used
  drm/amd/display: Avoid overflow assignment in link_dp_cts
  drm/amd/display: Initialize get_bytes_per_element's default to 1
  drm/printer: Allow NULL data in devcoredump printer
  perf,x86: avoid missing caller address in stack traces captured in uprobe
  scsi: aacraid: Rearrange order of struct aac_srb_unit
  scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
  scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached 
topology
  scsi: lpfc: Update PRLO handling in direct attached topology
  drm/amd/display: Force enable 3DLUT DMA check for dcn401 in DML
  drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
  drm/amdgpu: fix unchecked return value warning for amdgpu_atombios
  perf: Fix event_function_call() locking
  scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
  drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
  drm/amd/display: Unlock Pipes Based On DET Allocation
  drm/amdgpu: fix ptr check warning in gfx9 ip_dump
  drm/amdgpu: fix ptr check warning in gfx10 ip_dump
  drm/amdgpu: fix ptr check warning in gfx11 ip_dump
  drm/amdgpu: Block MMR_READ IOCTL in reset
  drm/amdgpu/gfx9: use rlc safe mode for soft recovery
  drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL
  drm/xe: Use topology to determine page fault queue size
  drm/amd/pm: ensure the fw_info is not null before using it
  drm/amdkfd: Check int source id for utcl2 poison event
  of/irq: Refer to actual buffer size in of_irq_parse_one()
  drm/amd/display: guard write a 0 post_divider value to HW
  powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
  ovl: fsync after metadata copy-up
  drm/amdgpu/gfx12: use rlc safe mode for soft recovery
  drm/amdgpu/gfx11: use rlc safe mode for soft recovery
  drm/amdgpu/gfx10: use rlc safe mode for soft recovery
  platform/x86: lenovo-ymc: Ignore the 0x0 state
  tools/hv: Add memory allocation check in hv_fcopy_start
  HID: i2c-hid: ensure various commands do not interfere with each other
  ksmbd: add refcnt to ksmbd_conn struct
  platform/mellanox: mlxbf-pmc: fix lockdep warning
  platform/x86: x86-android-tablets: Adjust Xiaomi Pad 2 bottom bezel touch 
buttons LED
  ext4: filesystems without casefold feature cannot be mounted with siphash
  bpf: Make the pointer returned by iter next method valid
  ext4: ext4_search_dir should return a proper error
  ext4: avoid use-after-free in ext4_ext_show_leaf()
  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  bpftool: Fix undefined behavior caused by shifting into the sign bit
  iomap: handle a post-direct I/O invalidate race in 
iomap_write_delalloc_release
  bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
  bpf: Fix a sdiv overflow issue
  EINJ, CXL: Fix CXL device SBDF calculation
  spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
  spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
  spi: spi-cadence: Fix missing spi_controller_is_target() check
  selftest: hid: add missing run-hid-tools-tests.sh
  spi: s3c64xx: fix timeout counters in flush_fifo
  kselftest/devices/probe: Fix SyntaxWarning in regex strings for Python3
  selftests: breakpoints: use remaining time to check if suspend succeed
  accel/ivpu: Add missing MODULE_FIRMWARE metadata
  spi: rpc-if: Add missing MODULE_DEVICE_TABLE
  ALSA: control: Fix power_ref lock order for compat code, too
  perf callchain: Fix stitch LBR memory leaks
  perf: Really fix event_function_call() locking
  drm/xe: fixup xe_alloc_pf_queue
  drm/xe: Fix memory leak on xe_alloc_pf_queue failure
  selftests: vDSO: fix vDSO name for powerpc
  selftests: vDSO: fix vdso_config for powerpc
  selftests: vDSO: fix vDSO symbols lookup for powerpc64
  ext4: fix error message when rejecting the default hash
  selftests/mm: fix charge_reserved_hugetlb.sh test
  nvme-tcp: fix link failure for TCP auth
  f2fs: add write priority option based on zone UFS
  f2fs: fix to don't panic system for no free segment fault injection
  powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
  selftests: vDSO: fix ELF hash table entry size for s390x
  selftests: vDSO: fix vdso_config for s390
  f2fs: make BG GC more aggressive for zoned devices
  f2fs: introduce migration_window_granularity
  f2fs: increase BG GC migration window granularity when boosted for zoned 
devices
  f2fs: do FG_GC when GC boosting is required for zoned devices
  f2fs: forcibly migrate to secure space for zoned device file pinning
  Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
  platform/x86: x86-android-tablets: Fix use after free on 
platform_device_register() errors
  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  KVM: arm64: Fix kvm_has_feat*() handling of negative features
  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
  i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
  i2c: xiic: Wait for TX empty to avoid missed TX NAKs
  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
  i2c: core: Lock address during client device instantiation
  i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
  i2c: designware: fix controller is holding SCL low while ENABLE bit is 
disabled
  i2c: synquacer: Deal with optional PCLK correctly
  rust: sync: require `T: Sync` for `LockedBy::access`
  ovl: fail if trusted xattrs are needed but caller lacks permission
  firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
  memory: tegra186-emc: drop unused to_tegra186_emc()
  dt-bindings: clock: exynos7885: Fix duplicated binding
  spi: bcm63xx: Fix module autoloading
  spi: bcm63xx: Fix missing pm_runtime_disable()
  power: supply: hwmon: Fix missing temp1_max_alarm attribute
  mm, slub: avoid zeroing kmalloc redzone
  power: supply: Drop use_cnt check from power_supply_property_is_writeable()
  perf/core: Fix small negative period being ignored
  drm/v3d: Prevent out of bounds access in performance query extensions
  parisc: Fix itlb miss handler for 64-bit programs
  drm/mediatek: ovl_adaptor: Add missing of_node_put()
  drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
  ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
  ALSA: core: add isascii() check to card ID generator
  ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
  ALSA: usb-audio: Add native DSD support for Luxman D-08u
  ALSA: line6: add hw monitor volume control to POD HD500X
  ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8
  ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
  ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
  ext4: no need to continue when the number of entries is 1
  ext4: correct encrypted dentry name hash when not casefolded
  ext4: fix slab-use-after-free in ext4_split_extent_at()
  ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
  ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
  ext4: dax: fix overflowing extents beyond inode size when partially writing
  ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  ext4: aovid use-after-free in ext4_ext_insert_extent()
  ext4: fix double brelse() the buffer of the extents path
  ext4: fix timer use-after-free on failed mount
  ext4: fix access to uninitialised lock in fc replay path
  ext4: update orig_path in ext4_find_extent()
  ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
  ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
  ext4: fix fast commit inode enqueueing during a full journal commit
  ext4: use handle to mark fc as ineligible in __track_dentry_update()
  ext4: mark fc as ineligible using an handle in ext4_xattr_set()
  ext4: fix off by one issue in alloc_flex_gd()
  parisc: Fix 64-bit userspace syscall path
  parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
  parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
  drm/rockchip: vop: clear DMA stop bit on RK3066
  of: address: Report error on resource bounds overflow
  of/irq: Support #msi-cells=<0> in of_msi_get_domain
  drm: omapdrm: Add missing check for alloc_ordered_workqueue
  resource: fix region_intersects() vs add_memory_driver_managed()
  lib/buildid: harden build ID parsing logic
  jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
  mm: krealloc: consider spare memory for __GFP_ZERO
  ocfs2: fix the la space leak when unmounting an ocfs2 volume
  ocfs2: fix uninit-value in ocfs2_get_block()
  ocfs2: reserve space for inline xattr before attaching reflink tree
  ocfs2: cancel dqi_sync_work before freeing oinfo
  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
  ocfs2: fix null-ptr-deref when journal load failed.
  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  scripts/gdb: fix timerlist parsing issue
  scripts/gdb: add iteration function for rbtree
  scripts/gdb: fix lx-mounts command error
  arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
  arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
  drm/xe: fix UAF around queue destruction
  drm/xe/oa: Don't reset OAC_CONTEXT_ENABLE on OA stream close
  sched/deadline: Comment sched_dl_entity::dl_server variable
  sched/core: Add clearing of ->dl_server in put_prev_task_balance()
  sched/core: Clear prev->dl_server in CFS pick fast path
  sched: psi: fix bogus pressure spikes from aggregation race
  riscv: define ILLEGAL_POINTER_VALUE for 64bit
  UBUNTU: [Config] updateconfigs for ILLEGAL_POINTER_VALUE on riscv
  exfat: fix memory leak in exfat_load_bitmap()
  perf python: Disable -Wno-cast-function-type-mismatch if present on clang
  perf hist: Update hist symbol when updating maps
  nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
  nfsd: map the EBADMSG to nfserr_io to avoid warning
  NFSD: Fix NFSv4's PUTPUBFH operation
  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver 
Due to Race Condition
  sysctl: avoid spurious permanent empty tables
  RDMA/mana_ib: use the correct page table index based on hardware page size
  RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
  drivers/perf: riscv: Align errno for unsupported perf event
  riscv: Fix kernel stack size when KASAN is enabled
  aoe: fix the potential use-after-free problem in more places
  media: imx335: Fix reset-gpio handling
  clk: rockchip: fix error for unknown clocks
  leds: pca9532: Remove irrelevant blink configuration error message
  remoteproc: k3-r5: Fix error handling when power-up failed
  gfs2: fix double destroy_workqueue error
  media: videobuf2: Drop minimum allocation requirement of 2 buffers
  clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
  media: sun4i_csi: Implement link validate for sun4i_csi subdev
  clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
  media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
  dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
  clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x
  clk: qcom: clk-rpmh: Fix overflow in BCM vote
  clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
  clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
  media: venus: fix use after free bug in venus_remove due to race condition
  clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
  clk: qcom: gcc-sc8180x: Add GPLL9 support
  clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
  clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
  drm/amd/display: avoid set dispclk to 0
  smb: client: use actual path when queryfs
  smb3: fix incorrect mode displayed for read-only files
  iio: magnetometer: ak8975: Fix reading for ak099xx sensors
  iio: pressure: bmp280: Fix regmap for BMP280 device
  iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
  vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
  net: gso: fix tcp fraglist segmentation after pull from frag_list
  gso: fix udp gso fraglist segmentation after pull from frag_list
  tomoyo: fallback to realpath if symlink's pathname does not exist
  kselftests: mm: fix wrong __NR_userfaultfd value
  net: stmmac: Fix zero-division error when disabling tc cbs
  rtc: at91sam9: fix OF node leak in probe() error path
  mm/filemap: fix filemap_get_folios_contig THP panic
  mm/hugetlb: fix memfd_pin_folios free_huge_pages leak
  mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak
  mm/gup: fix memfd_pin_folios hugetlb page allocation
  mm/gup: fix memfd_pin_folios alloc race panic
  mm/hugetlb: simplify refs in memfd_alloc_folio
  Input: adp5589-keys - fix NULL pointer dereference
  Input: adp5589-keys - fix adp5589_gpio_get_value()
  HID: bpf: fix cfi stubs for hid_bpf_ops
  cachefiles: fix dentry leak in cachefiles_open_file()
  pidfs: check for valid pid namespace
  ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO
  ACPI: resource: Remove duplicate Asus E1504GAB IRQ override
  ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA
  ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
  ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
  btrfs: send: fix buffer overflow detection when copying path to cache entry
  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
  btrfs: drop the backref cache during relocation if we commit
  btrfs: send: fix invalid clone operation for file that got its size decreased
  btrfs: wait for fixup workers before stopping cleaner kthread during umount
  cpufreq: Avoid a bad reference count on CPU node
  cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
  gpio: davinci: fix lazy disable
  net: pcs: xpcs: fix the wrong register that was written back
  Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
  mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
  io_uring/net: harden multishot termination case for recv
  ceph: fix cap ref leak via netfs init_request
  tracing/hwlat: Fix a race during cpuhp processing
  tracing/timerlat: Drop interface_lock in stop_kthread()
  tracing/timerlat: Fix a race during cpuhp processing
  tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
  rtla: Fix the help text in osnoise and timerlat top tools
  firmware/sysfb: Disable sysfb for firmware buffers with unknown parent
  close_range(): fix the logics in descriptor table trimming
  drm/i915/gem: fix bitwise and logical AND mixup
  drm/panthor: Don't add write fences to the shared BOs
  drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()
  drm/panthor: Don't declare a queue blocked if deferred operations are pending
  drm/sched: Fix dynamic job-flow control race
  drm/sched: Add locking to drm_sched_entity_modify_sched
  drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job
  drm/sched: Always increment correct scheduler score
  drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC
  drm/amd/display: Add HDR workaround for specific eDP
  drm/amd/display: Enable idle workqueue for more IPS modes
  drm/amd/display: Fix system hang while resume with TBT monitor
  kconfig: fix infinite loop in sym_calc_choice()
  kconfig: qconf: move conf_read() before drawing tree pain
  kconfig: qconf: fix buffer overflow in debug links
  arm64: cputype: Add Neoverse-N3 definitions
  arm64: errata: Expand speculative SSBS workaround once more
  uprobes: fix kernel info leak via "[uprobes]" vma
  mm: z3fold: deprecate CONFIG_Z3FOLD
  UBUNTU: [Config] updateconfigs after deprecating Z3FOLD
  drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
  sunrpc: change sp_nrthreads from atomic_t to unsigned int.
  NFSD: Async COPY result needs to return a write verifier
  NFSD: Limit the number of concurrent async COPY operations
  remoteproc: k3-r5: Acquire mailbox handle during probe routine
  remoteproc: k3-r5: Delay notification of wakeup event
  r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
  r8169: add tally counter fields added with RTL8125
  ACPI: battery: Simplify battery hook locking
  ACPI: battery: Fix possible crash when unregistering a battery hook
  drm/xe: Clean up VM / exec queue file lock usage.
  drm/xe/vm: move xa_alloc to prevent UAF
  drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
  drm/xe/vram: fix ccs offset calculation
  drm/sched: revert "Always increment correct scheduler score"
  rxrpc: Fix a race between socket set up and I/O thread creation
  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
  ALSA: control: Fix leftover snd_power_unref()
  crypto: octeontx* - Select CRYPTO_AUTHENC
  drm/amd/display: Revert Avoid overflow assignment
  perf report: Fix segfault when 'sym' sort key is not used
  pmdomain: core: Reduce debug summary table width
  perf python: Allow checking for the existence of warning options in clang
  Linux 6.11.3
  UBUNTU: Upstream stable to v6.11.3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2089052/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp