Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.14.3 upstream stable release from git://git.kernel.org/ ASoC: Intel: adl: add 2xrt1316 audio configuration cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() cgroup/cpuset: Fix error handling in remote_partition_disable() cgroup/cpuset: Fix race between newly created partition and dying one tracing: fprobe: Cleanup fprobe hash when module unloading gpiolib: of: Fix the choice for Ingenic NAND quirk selftests/futex: futex_waitv wouldblock test should fail ublk: fix handling recovery & reissue in ublk_abort_queue() drm/virtio: Fix flickering issue seen with imported dmabufs drm/i915: Disable RPG during live selftest x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI net: ethtool: fix ethtool_ringparam_get_cfg() returns a hds_thresh value always as 0. drm/xe/hw_engine: define sysfs_ops on all directories drm/xe: Restore EIO errno return when GuC PC start fails ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() tipc: fix memory leak in tipc_link_xmit codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() net: tls: explicitly disallow disconnect octeontx2-pf: qos: fix VF root node parent queue index tc: Ensure we have enough buffer space when sending filter netlink notifications net: ethtool: Don't call .cleanup_data when prepare_data fails drm/tests: modeset: Fix drm_display_mode memory leak drm/tests: helpers: Create kunit helper to destroy a drm_display_mode drm/tests: cmdline: Fix drm_display_mode memory leak drm/tests: modes: Fix drm_display_mode memory leak drm/tests: probe-helper: Fix drm_display_mode memory leak net: libwx: handle page_pool_dev_alloc_pages error cifs: Fix support for WSL-style symlinks ata: sata_sx4: Add error handling in pdc20621_i2c_read() drm/i915/huc: Fix fence not released on early probe errors s390/cpumf: Fix double free on error in cpumf_pmu_event_init() nvmet-fcloop: swap list_add_tail arguments net_sched: sch_sfq: use a temporary work area for validating configuration net_sched: sch_sfq: move the limit validation x86/cpu: Avoid running off the end of an AMD erratum table smb: client: fix UAF in decryption with multichannel net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY ipv6: Align behavior across nexthops during path selection net: ppp: Add bound checking for skb data on ppp_sync_txmung nft_set_pipapo: fix incorrect avx2 match of 5th field octet ethtool: cmis_cdb: Fix incorrect read / write length extension iommu/exynos: Fix suspend/resume with IDENTITY domain iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group net: libwx: Fix the wrong Rx descriptor field perf/core: Simplify the perf_event_alloc() error path perf: Fix hang while freeing sigtrap event fs: consistently deref the files table with rcu_dereference_raw() umount: Allow superblock owners to force umount srcu: Force synchronization for srcu_get_delay() pm: cpupower: bench: Prevent NULL dereference on malloc failure irqchip/gic-v3: Add Rockchip 3568002 erratum workaround UBUNTU: [Config] updateconfigs for ROCKCHIP_ERRATUM_3568002 x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC < 14.2 x86/ia32: Leave NULL selector values 0~3 unchanged x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine perf: arm_pmu: Don't disable counter in armpmu_add() perf/dwc_pcie: fix some unreleased resources perf/dwc_pcie: fix duplicate pci_dev devices PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() Flush console log from kernel_power_off() cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD xen/mcelog: Add __nonstring annotations for unterminated strings zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault tracing: Disable branch profiling in noinstr code platform/chrome: cros_ec_lpc: Match on Framework ACPI device ASoC: SOF: topology: Use krealloc_array() to replace krealloc() HID: pidff: Convert infinite length from Linux API to PID standard HID: pidff: Do not send effect envelope if it's empty HID: pidff: Add MISSING_DELAY quirk and its detection HID: pidff: Add MISSING_PBO quirk and its detection HID: pidff: Add PERMISSIVE_CONTROL quirk HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol HID: pidff: Add FIX_WHEEL_DIRECTION quirk HID: Add hid-universal-pidff driver and supported device ids UBUNTU: [Config] enable new hid-universal-pidff driver module HID: pidff: Add PERIODIC_SINE_ONLY quirk HID: pidff: Fix null pointer dereference in pidff_find_fields ASoC: amd: ps: use macro for ACP6.3 pci revision id ASoC: amd: amd_sdw: Add quirks for Dell SKU's ALSA: hda: intel: Fix Optimus when GPU has no sound ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist ASoC: fsl_audmix: register card device depends on 'dais' property media: uvcvideo: Add quirk for Actions UVC05 HID: lenovo: Fix to ensure the data as __le32 instead of u32 media: s5p-mfc: Corrected NV12M/NV21M plane-sizes mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves ALSA: usb-audio: Fix CME quirk for UF series keyboards ASoC: amd: Add DMI quirk for ACP6X mic support ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315 ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247 ASoC: amd: yc: update quirk data for new Lenovo model platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig wifi: ath9k: use unsigned long for activity check timestamp wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues wifi: ath11k: fix memory leak in ath11k_xxx_remove() wifi: ath12k: fix memory leak in ath12k_pci_remove() wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process wifi: ath12k: Avoid memory leak while enabling statistics ata: libata-core: Add 'external' to the libata.force kernel parameter scsi: mpi3mr: Avoid reply queue full condition scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue net: page_pool: don't cast mp param to devmem f2fs: don't retry IO for corrupted data scenario wifi: mac80211: add strict mode disabling workarounds wifi: mac80211: ensure sdata->work is canceled before initialized. scsi: target: spc: Fix RSOC parameter data header size net: usb: asix_devices: add FiberGecko DeviceID page_pool: avoid infinite loop to schedule delayed worker can: flexcan: Add quirk to handle separate interrupt lines for mailboxes can: flexcan: add NXP S32G2/S32G3 SoC support jfs: Fix uninit-value access of imap allocated in the diMount() function fs/jfs: cast inactags to s64 to prevent potential overflow fs/jfs: Prevent integer overflow in AG size calculation jfs: Prevent copying of nlink with value 0 from disk inode jfs: add sanity check for agwidth in dbMount wifi: rtw88: Add support for Mercusys MA30N and D-Link DWA-T185 rev. A1 ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode net: sfp: add quirk for 2.5G OEM BX SFP wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module ahci: add PCI ID for Marvell 88SE9215 SATA Controller ext4: protect ext4_release_dquot against freezing Revert "f2fs: rebuild nat_bits during umount" wifi: mac80211: fix userspace_selectors corruption ext4: ignore xattrs past end cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk scsi: st: Fix array overflow in st_setup() ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI btrfs: harden block_group::bg_list against list_del() races wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table net: vlan: don't propagate flags on open tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER Bluetooth: btusb: Add new VID/PID for WCN785x Bluetooth: btintel_pcie: Add device id of Whale Peak Bluetooth: btusb: Add 13 USB device IDs for Qualcomm WCN785x Bluetooth: hci_uart: fix race during initialization Bluetooth: btusb: Add 2 HWIDs for MT7922 Bluetooth: hci_qca: use the power sequencer for wcn6750 Bluetooth: qca: simplify WCN399x NVM loading Bluetooth: qca: add WCN3950 support drm: allow encoder mode_set even when connectors change for crtc drm/virtio: Set missing bo->attached flag drm/rockchip: Don't change hdmi reference clock rate drm/xe/ptl: Update the PTL pci id table drm/xe/pf: Don't send BEGIN_ID if VF has no context/doorbells drm/xe/vf: Don't try to trigger a full GT reset if VF drm/amd/display: Update Cursor request mode to the beginning prefetch always drm/amd/display: Guard Possible Null Pointer Dereference drm/amd/display: add workaround flag to link to force FFE preset drm/amdgpu: Unlocked unmap only clear page table leaves drm: panel-orientation-quirks: Add support for AYANEO 2S drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB drm: panel-orientation-quirks: Add quirk for AYA NEO Slide drm: panel-orientation-quirks: Add new quirk for GPD Win 2 drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) drm/debugfs: fix printk format for bridge index drm/bridge: panel: forbid initializing a panel with unknown connector type drm/amd/display: Update FIXED_VS Link Rate Toggle Workaround Usage drm/amd/display: stop DML2 from removing pipes based on planes drivers: base: devres: Allow to release group on device release drm/amdkfd: clamp queue size to minimum drm/amdkfd: Fix mode1 reset crash issue drm/amdkfd: Fix pqm_destroy_queue race with GPU reset drm/amdkfd: debugfs hang_hws skip GPU with MES drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off drm/rockchip: stop passing non struct drm_device to drm_err() and friends PCI: Add Rockchip Vendor ID drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() drm/amd/display: Prevent VStartup Overflow PCI: Enable Configuration RRS SV early drm/amdgpu: Fix the race condition for draining retry fault PCI: Check BAR index for validity PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type drm/amdgpu: grab an additional reference on the gang fence v2 fbdev: omapfb: Add 'plane' value check tracing: probe-events: Log error for exceeding the number of arguments tracing: probe-events: Add comments about entry data storing code ktest: Fix Test Failures Due to Missing LOG_FILE Directories tpm, tpm_tis: Workaround failed command reception on Infineon devices tpm: End any active auth session before shutdown pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() pwm: rcar: Improve register calculation pwm: fsl-ftm: Handle clk_get_rate() returning 0 pwm: stm32: Search an appropriate duty_cycle if period cannot be modified erofs: set error to bio if file-backed IO fails bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags ext4: don't treat fhandle lookup of ea_inode as FS corruption s390/pci: Fix s390_mmio_read/write syscall page fault handling HID: pidff: Clamp PERIODIC effect period to device's logical range HID: pidff: Stop all effects before enabling actuators HID: pidff: Completely rework and fix pidff_reset function HID: pidff: Simplify pidff_upload_effect function HID: pidff: Define values used in pidff_find_special_fields HID: pidff: Rescale time values to match field units HID: pidff: Factor out code for setting gain HID: pidff: Move all hid-pidff definitions to a dedicated header HID: pidff: Simplify pidff_rescale_signed HID: pidff: Use macros instead of hardcoded min/max values for shorts HID: pidff: Factor out pool report fetch and remove excess declaration HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX HID: hid-universal-pidff: Add Asetek wheelbases support HID: pidff: Comment and code style update HID: pidff: Support device error response from PID_BLOCK_LOAD HID: pidff: Remove redundant call to pidff_find_special_keys HID: pidff: Rename two functions to align them with naming convention HID: pidff: Clamp effect playback LOOP_COUNT value HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff HID: pidff: Fix 90 degrees direction name North -> East HID: pidff: Fix set_device_control() auxdisplay: hd44780: Fix an API misuse in hd44780.c dt-bindings: media: st,stmipid02: correct lane-polarities maxItems media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning media: uapi: rkisp1-config: Fix typo in extensible params example media: mgb4: Fix CMT registers update logic media: i2c: adv748x: Fix test pattern selection mask media: mgb4: Fix switched CMT frequency range "magic values" sets media: intel/ipu6: set the dev_parent of video device to pdev media: venus: hfi: add a check to handle OOB in sfr region media: venus: hfi: add check to handle incorrect queue size media: vim2m: print device name after registering device media: siano: Fix error handling in smsdvb_module_init() media: rockchip: rga: fix rga offset lookup xenfs/xensyms: respect hypervisor's "next" indication KVM: arm64: PMU: Set raw values from user to PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} arm64: cputype: Add MIDR_CORTEX_A76AE arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list KVM: arm64: Tear down vGIC on failed vCPU creation KVM: arm64: Set HCR_EL2.TID1 unconditionally spi: cadence-qspi: Fix probe on AM62A LP SK mtd: rawnand: brcmnand: fix PM resume warning tpm, tpm_tis: Fix timeout handling when waiting for TPM status accel/ivpu: Fix PM related deadlocks in MS IOCTLs media: ov08x40: Properly turn sensor on/off when runtime-suspended media: streamzap: prevent processing IR data on URB failure media: hi556: Fix memory leak (on error) in hi556_check_hwcfg() media: visl: Fix ERANGE error when setting enum controls media: platform: stm32: Add check for clk_enable() media: xilinx-tpg: fix double put in xtpg_parse_of() media: imx219: Adjust PLL settings based on the number of MIPI lanes media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() Revert "media: imx214: Fix the error handling in imx214_probe()" media: i2c: ccs: Set the device's runtime PM status correctly in remove media: i2c: ccs: Set the device's runtime PM status correctly in probe media: i2c: ov7251: Set enable GPIO low in probe media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO media: nuvoton: Fix reference handling of ece_node media: nuvoton: Fix reference handling of ece_pdev media: venus: hfi_parser: add check to avoid out of bound access media: venus: hfi_parser: refactor hfi packet parsing logic media: i2c: imx319: Rectify runtime PM handling probe and remove media: i2c: imx219: Rectify runtime PM handling in probe and remove media: i2c: imx214: Rectify probe error handling related to runtime PM media: chips-media: wave5: Fix gray color on screen media: chips-media: wave5: Avoid race condition in the interrupt handler media: chips-media: wave5: Fix a hang after seeking media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster irqchip/renesas-rzv2h: Fix wrong variable usage in rzv2h_tint_set_type() mptcp: sockopt: fix getting IPV6_V6ONLY mptcp: sockopt: fix getting freebind & transparent block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone mtd: Add check for devm_kcalloc() net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family net: dsa: mv88e6xxx: fix internal PHYs for 6320 family mtd: Replace kcalloc() with devm_kcalloc() clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup Revert "wifi: mt76: mt7925: Update mt7925_mcu_uni_[tx,rx]_ba for MLO" wifi: mt76: Add check for devm_kstrdup() wifi: mt76: mt792x: re-register CHANCTX_STA_CSA only for the mt7921 series wifi: mac80211: fix integer overflow in hwmp_route_info_get() wifi: mt76: mt7925: ensure wow pattern command align fw format wifi: mt76: mt7925: fix country count limitation for CLC wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO wifi: mt76: mt7925: adjust rm BSS flow to prevent next connection failure wifi: mt76: mt7925: integrate *mlo_sta_cmd and *sta_cmd wifi: mt76: mt7925: update the power-saving flow scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag net: stmmac: Fix accessing freed irq affinity_hint io_uring/net: fix accept multishot handling io_uring/net: fix io_req_post_cqe abuse by send bundle io_uring/kbuf: reject zero sized provided buffers ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() ASoC: q6apm: add q6apm_get_hw_pointer helper ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs ASoC: q6apm-dai: make use of q6apm_get_hw_pointer ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal() accel/ivpu: Fix deadlock in ivpu_ms_cleanup() arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() bus: mhi: host: Fix race between unprepare and queue_buf ext4: fix off-by-one error in do_split f2fs: fix the missing write pointer correction f2fs: fix to avoid atomicity corruption of atomic file vdpa/mlx5: Fix oversized null mkey longer than 32bit udf: Fix inode_getblk() return value tpm: do not start chip while suspended svcrdma: do not unregister device for listeners soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() smb311 client: fix missing tcon check when mounting with linux/posix extensions ima: limit the number of open-writers integrity violations ima: limit the number of ToMToU integrity violations igc: Fix XSK queue NAPI ID mapping i3c: master: svc: Use readsb helper for reading MDB i3c: Add NULL pointer check in i3c_master_queue_ibi() jbd2: remove wrong sb->s_sequence check kbuild: exclude .rodata.(cst|str)* when building ranges kbuild: Add '-fno-builtin-wcslen' leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs mfd: ene-kb3930: Fix a potential NULL pointer dereference mailbox: tegra-hsp: Define dimensioning masks in SoC data locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets mptcp: fix NULL pointer in can_accept_new_subflow mptcp: only inc MPJoinAckHMacFailure for HMAC failures mtd: inftlcore: Add error check for inftl_read_oob() mtd: rawnand: Add status chack in r852_ready() mtd: spinand: Fix build with gcc < 7.5 arm64: mops: Do not dereference src reg for a set operation arm64: tegra: Remove the Orin NX/Nano suspend key arm64: mm: Correct the update of max_pfn arm64: dts: ti: k3-j784s4-j742s2-main-common: Correct the GICD size arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix serdes_ln_ctrl reg-masks arm64: dts: mediatek: mt8188: Assign apll1 clock as parent to avoid hang arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string arm64: dts: exynos: gs101: disable pinctrl_gsacore node backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers btrfs: tests: fix chunk map leak after failure to add it to the tree btrfs: zoned: fix zone activation with missing devices btrfs: zoned: fix zone finishing with missing devices iommufd: Fix uninitialized rc in iommufd_access_rw() iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes iommu/vt-d: Fix possible circular locking dependency iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs sparc/mm: disable preemption in lazy mmu mode sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. mm/damon/ops: have damon_get_folio return folio even for tail pages mm/damon: avoid applying DAMOS action to same entity multiple times mm/rmap: reject hugetlb folios in folio_make_device_exclusive() mm: make page_mapped_in_vma() hugetlb walk aware mm: fix lazy mmu docs and usage mm/mremap: correctly handle partial mremap() of VMA starting at 0 mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock mm/userfaultfd: fix release hang over concurrent GUP mm/hwpoison: do not send SIGBUS to processes with recovered clean pages mm/hugetlb: move hugetlb_sysctl_init() to the __init section mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper sctp: detect and prevent references to a freed transport in sendmsg x86/xen: fix balloon target initialization for PVH dom0 uprobes: Avoid false-positive lockdep splat on CONFIG_PREEMPT_RT=y in the ri_timer() uprobe timer callback, use raw_write_seqcount_*() tracing: fprobe: Fix to lock module while registering fprobe tracing: fprobe events: Fix possible UAF on modules tracing: Do not add length to print format in synthetic events thermal/drivers/rockchip: Add missing rk3328 mapping entry CIFS: Propagate min offload along with other parameters from primary to secondary channels. cifs: avoid NULL pointer dereference in dbg call cifs: fix integer overflow in match_server() cifs: Ensure that all non-client-specific reparse points are processed by the server clk: renesas: r9a07g043: Fix HP clock source for RZ/Five clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks clk: qcom: gdsc: Release pm subdomains in reverse add order clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code clk: qcom: gdsc: Set retain_ff before moving to HW CTRL crypto: ccp - Fix check for the primary ASP device crypto: ccp - Fix uAPI definitions of PSP errors dlm: fix error if inactive rsb is not hashed dlm: fix error if active rsb is not hashed dm-ebs: fix prefetch-vs-suspend race dm-integrity: set ti->error on memory allocation failure dm-integrity: fix non-constant-time tag verification dm-verity: fix prefetch-vs-suspend race dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg' dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg' firmware: cs_dsp: test_control_parse: null-terminate test strings ftrace: Add cond_resched() to ftrace_graph_set_hash() ftrace: Properly merge notrace hashes fuse: {io-uring} Fix a possible req cancellation race gpio: mpc8xxx: Fix wakeup source leaks on device unbind gpio: tegra186: fix resource handling in ACPI probe path gpio: zynq: Fix wakeup source leaks on device unbind gve: handle overflow when reporting TX consumed descriptors KVM: Allow building irqbypass.ko as as module when kvm.ko is a module UBUNTU: [Config] updateconfigs for HAVE_KVM_IRQ_BYPASS KVM: x86: Explicitly zero-initialize on-stack CPUID unions KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses landlock: Move code to ease future backports landlock: Add the errata interface landlock: Add erratum for TCP fix landlock: Always allow signals between threads of the same process landlock: Prepare to add second errata selftests/landlock: Split signal_scoping_threads tests selftests/landlock: Add a new test for setuid() misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type net: mana: Switch to page pool for jumbo frames ntb: use 64-bit arithmetic for the MSI doorbell mask of/irq: Fix device node refcount leakage in API of_irq_parse_one() of/irq: Fix device node refcount leakage in API of_irq_parse_raw() of/irq: Fix device node refcount leakages in of_irq_count() of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() of/irq: Fix device node refcount leakages in of_irq_init() PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4 PCI: layerscape: Fix arg_count to syscon_regmap_lookup_by_phandle_args() PCI: pciehp: Avoid unnecessary device replacement check PCI: Fix reference leak in pci_alloc_child_bus() PCI: Fix reference leak in pci_register_host_bridge() PCI: Fix wrong length of devres array phy: freescale: imx8m-pcie: assert phy reset and perst in power off pinctrl: qcom: Clear latched interrupt status when changing IRQ type pinctrl: samsung: add support for eint_fltcon_offset ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio() s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues s390: Fix linker error when -no-pie option is unavailable sched_ext: create_dsq: Return -EEXIST on duplicate request selftests: mptcp: close fd_in before returning in main_loop selftests: mptcp: fix incorrect fd checks in main_loop spi: fsl-qspi: use devm function instead of driver remove spi: fsl-qspi: Fix double cleanup in probe error path thermal/drivers/mediatek/lvts: Disable monitor mode during suspend thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold wifi: ath11k: update channel list in worker when wait flag is set arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists iommufd: Make attach_handle generic than fault specific iommufd: Fail replace if device has not been attached x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() Bluetooth: hci_uart: Fix another race during initialization HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition Linux 6.14.3 UBUNTU: Upstream stable to v6.14.3 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Plucky) Importance: Medium Assignee: Manuel Diewald (diewald) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Plucky) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Plucky) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Plucky) Status: New => In Progress ** Changed in: linux (Ubuntu Plucky) Assignee: (unassigned) => Manuel Diewald (diewald) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.14.3 upstream stable release from git://git.kernel.org/ - + ASoC: Intel: adl: add 2xrt1316 audio configuration + cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() + cgroup/cpuset: Fix error handling in remote_partition_disable() + cgroup/cpuset: Fix race between newly created partition and dying one + tracing: fprobe: Cleanup fprobe hash when module unloading + gpiolib: of: Fix the choice for Ingenic NAND quirk + selftests/futex: futex_waitv wouldblock test should fail + ublk: fix handling recovery & reissue in ublk_abort_queue() + drm/virtio: Fix flickering issue seen with imported dmabufs + drm/i915: Disable RPG during live selftest + x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI + net: ethtool: fix ethtool_ringparam_get_cfg() returns a hds_thresh value always as 0. + drm/xe/hw_engine: define sysfs_ops on all directories + drm/xe: Restore EIO errno return when GuC PC start fails + ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() + objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() + tipc: fix memory leak in tipc_link_xmit + codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() + net: tls: explicitly disallow disconnect + octeontx2-pf: qos: fix VF root node parent queue index + tc: Ensure we have enough buffer space when sending filter netlink notifications + net: ethtool: Don't call .cleanup_data when prepare_data fails + drm/tests: modeset: Fix drm_display_mode memory leak + drm/tests: helpers: Create kunit helper to destroy a drm_display_mode + drm/tests: cmdline: Fix drm_display_mode memory leak + drm/tests: modes: Fix drm_display_mode memory leak + drm/tests: probe-helper: Fix drm_display_mode memory leak + net: libwx: handle page_pool_dev_alloc_pages error + cifs: Fix support for WSL-style symlinks + ata: sata_sx4: Add error handling in pdc20621_i2c_read() + drm/i915/huc: Fix fence not released on early probe errors + s390/cpumf: Fix double free on error in cpumf_pmu_event_init() + nvmet-fcloop: swap list_add_tail arguments + net_sched: sch_sfq: use a temporary work area for validating configuration + net_sched: sch_sfq: move the limit validation + x86/cpu: Avoid running off the end of an AMD erratum table + smb: client: fix UAF in decryption with multichannel + net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() + net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY + ipv6: Align behavior across nexthops during path selection + net: ppp: Add bound checking for skb data on ppp_sync_txmung + nft_set_pipapo: fix incorrect avx2 match of 5th field octet + ethtool: cmis_cdb: Fix incorrect read / write length extension + iommu/exynos: Fix suspend/resume with IDENTITY domain + iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group + net: libwx: Fix the wrong Rx descriptor field + perf/core: Simplify the perf_event_alloc() error path + perf: Fix hang while freeing sigtrap event + fs: consistently deref the files table with rcu_dereference_raw() + umount: Allow superblock owners to force umount + srcu: Force synchronization for srcu_get_delay() + pm: cpupower: bench: Prevent NULL dereference on malloc failure + irqchip/gic-v3: Add Rockchip 3568002 erratum workaround + UBUNTU: [Config] updateconfigs for ROCKCHIP_ERRATUM_3568002 + x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW + x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC < 14.2 + x86/ia32: Leave NULL selector values 0~3 unchanged + x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine + perf: arm_pmu: Don't disable counter in armpmu_add() + perf/dwc_pcie: fix some unreleased resources + perf/dwc_pcie: fix duplicate pci_dev devices + PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() + Flush console log from kernel_power_off() + cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend + arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD + xen/mcelog: Add __nonstring annotations for unterminated strings + zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault + tracing: Disable branch profiling in noinstr code + platform/chrome: cros_ec_lpc: Match on Framework ACPI device + ASoC: SOF: topology: Use krealloc_array() to replace krealloc() + HID: pidff: Convert infinite length from Linux API to PID standard + HID: pidff: Do not send effect envelope if it's empty + HID: pidff: Add MISSING_DELAY quirk and its detection + HID: pidff: Add MISSING_PBO quirk and its detection + HID: pidff: Add PERMISSIVE_CONTROL quirk + HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol + HID: pidff: Add FIX_WHEEL_DIRECTION quirk + HID: Add hid-universal-pidff driver and supported device ids + UBUNTU: [Config] enable new hid-universal-pidff driver module + HID: pidff: Add PERIODIC_SINE_ONLY quirk + HID: pidff: Fix null pointer dereference in pidff_find_fields + ASoC: amd: ps: use macro for ACP6.3 pci revision id + ASoC: amd: amd_sdw: Add quirks for Dell SKU's + ALSA: hda: intel: Fix Optimus when GPU has no sound + ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist + ASoC: fsl_audmix: register card device depends on 'dais' property + media: uvcvideo: Add quirk for Actions UVC05 + HID: lenovo: Fix to ensure the data as __le32 instead of u32 + media: s5p-mfc: Corrected NV12M/NV21M plane-sizes + mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves + ALSA: usb-audio: Fix CME quirk for UF series keyboards + ASoC: amd: Add DMI quirk for ACP6X mic support + ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315 + ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247 + ASoC: amd: yc: update quirk data for new Lenovo model + platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig + wifi: ath9k: use unsigned long for activity check timestamp + wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues + wifi: ath11k: fix memory leak in ath11k_xxx_remove() + wifi: ath12k: fix memory leak in ath12k_pci_remove() + wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process + wifi: ath12k: Avoid memory leak while enabling statistics + ata: libata-core: Add 'external' to the libata.force kernel parameter + scsi: mpi3mr: Avoid reply queue full condition + scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue + net: page_pool: don't cast mp param to devmem + f2fs: don't retry IO for corrupted data scenario + wifi: mac80211: add strict mode disabling workarounds + wifi: mac80211: ensure sdata->work is canceled before initialized. + scsi: target: spc: Fix RSOC parameter data header size + net: usb: asix_devices: add FiberGecko DeviceID + page_pool: avoid infinite loop to schedule delayed worker + can: flexcan: Add quirk to handle separate interrupt lines for mailboxes + can: flexcan: add NXP S32G2/S32G3 SoC support + jfs: Fix uninit-value access of imap allocated in the diMount() function + fs/jfs: cast inactags to s64 to prevent potential overflow + fs/jfs: Prevent integer overflow in AG size calculation + jfs: Prevent copying of nlink with value 0 from disk inode + jfs: add sanity check for agwidth in dbMount + wifi: rtw88: Add support for Mercusys MA30N and D-Link DWA-T185 rev. A1 + ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode + net: sfp: add quirk for 2.5G OEM BX SFP + wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi + f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() + net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module + ahci: add PCI ID for Marvell 88SE9215 SATA Controller + ext4: protect ext4_release_dquot against freezing + Revert "f2fs: rebuild nat_bits during umount" + wifi: mac80211: fix userspace_selectors corruption + ext4: ignore xattrs past end + cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk + scsi: st: Fix array overflow in st_setup() + ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI + btrfs: harden block_group::bg_list against list_del() races + wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table + net: vlan: don't propagate flags on open + tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER + Bluetooth: btusb: Add new VID/PID for WCN785x + Bluetooth: btintel_pcie: Add device id of Whale Peak + Bluetooth: btusb: Add 13 USB device IDs for Qualcomm WCN785x + Bluetooth: hci_uart: fix race during initialization + Bluetooth: btusb: Add 2 HWIDs for MT7922 + Bluetooth: hci_qca: use the power sequencer for wcn6750 + Bluetooth: qca: simplify WCN399x NVM loading + Bluetooth: qca: add WCN3950 support + drm: allow encoder mode_set even when connectors change for crtc + drm/virtio: Set missing bo->attached flag + drm/rockchip: Don't change hdmi reference clock rate + drm/xe/ptl: Update the PTL pci id table + drm/xe/pf: Don't send BEGIN_ID if VF has no context/doorbells + drm/xe/vf: Don't try to trigger a full GT reset if VF + drm/amd/display: Update Cursor request mode to the beginning prefetch always + drm/amd/display: Guard Possible Null Pointer Dereference + drm/amd/display: add workaround flag to link to force FFE preset + drm/amdgpu: Unlocked unmap only clear page table leaves + drm: panel-orientation-quirks: Add support for AYANEO 2S + drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB + drm: panel-orientation-quirks: Add quirk for AYA NEO Slide + drm: panel-orientation-quirks: Add new quirk for GPD Win 2 + drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) + drm/debugfs: fix printk format for bridge index + drm/bridge: panel: forbid initializing a panel with unknown connector type + drm/amd/display: Update FIXED_VS Link Rate Toggle Workaround Usage + drm/amd/display: stop DML2 from removing pipes based on planes + drivers: base: devres: Allow to release group on device release + drm/amdkfd: clamp queue size to minimum + drm/amdkfd: Fix mode1 reset crash issue + drm/amdkfd: Fix pqm_destroy_queue race with GPU reset + drm/amdkfd: debugfs hang_hws skip GPU with MES + drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds + drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data + drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off + drm/rockchip: stop passing non struct drm_device to drm_err() and friends + PCI: Add Rockchip Vendor ID + drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() + drm/amd/display: Prevent VStartup Overflow + PCI: Enable Configuration RRS SV early + drm/amdgpu: Fix the race condition for draining retry fault + PCI: Check BAR index for validity + PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type + drm/amdgpu: grab an additional reference on the gang fence v2 + fbdev: omapfb: Add 'plane' value check + tracing: probe-events: Log error for exceeding the number of arguments + tracing: probe-events: Add comments about entry data storing code + ktest: Fix Test Failures Due to Missing LOG_FILE Directories + tpm, tpm_tis: Workaround failed command reception on Infineon devices + tpm: End any active auth session before shutdown + pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() + pwm: rcar: Improve register calculation + pwm: fsl-ftm: Handle clk_get_rate() returning 0 + pwm: stm32: Search an appropriate duty_cycle if period cannot be modified + erofs: set error to bio if file-backed IO fails + bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags + ext4: don't treat fhandle lookup of ea_inode as FS corruption + s390/pci: Fix s390_mmio_read/write syscall page fault handling + HID: pidff: Clamp PERIODIC effect period to device's logical range + HID: pidff: Stop all effects before enabling actuators + HID: pidff: Completely rework and fix pidff_reset function + HID: pidff: Simplify pidff_upload_effect function + HID: pidff: Define values used in pidff_find_special_fields + HID: pidff: Rescale time values to match field units + HID: pidff: Factor out code for setting gain + HID: pidff: Move all hid-pidff definitions to a dedicated header + HID: pidff: Simplify pidff_rescale_signed + HID: pidff: Use macros instead of hardcoded min/max values for shorts + HID: pidff: Factor out pool report fetch and remove excess declaration + HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX + HID: hid-universal-pidff: Add Asetek wheelbases support + HID: pidff: Comment and code style update + HID: pidff: Support device error response from PID_BLOCK_LOAD + HID: pidff: Remove redundant call to pidff_find_special_keys + HID: pidff: Rename two functions to align them with naming convention + HID: pidff: Clamp effect playback LOOP_COUNT value + HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff + HID: pidff: Fix 90 degrees direction name North -> East + HID: pidff: Fix set_device_control() + auxdisplay: hd44780: Fix an API misuse in hd44780.c + dt-bindings: media: st,stmipid02: correct lane-polarities maxItems + media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization + media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning + media: uapi: rkisp1-config: Fix typo in extensible params example + media: mgb4: Fix CMT registers update logic + media: i2c: adv748x: Fix test pattern selection mask + media: mgb4: Fix switched CMT frequency range "magic values" sets + media: intel/ipu6: set the dev_parent of video device to pdev + media: venus: hfi: add a check to handle OOB in sfr region + media: venus: hfi: add check to handle incorrect queue size + media: vim2m: print device name after registering device + media: siano: Fix error handling in smsdvb_module_init() + media: rockchip: rga: fix rga offset lookup + xenfs/xensyms: respect hypervisor's "next" indication + KVM: arm64: PMU: Set raw values from user to PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} + arm64: cputype: Add MIDR_CORTEX_A76AE + arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list + arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB + arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list + KVM: arm64: Tear down vGIC on failed vCPU creation + KVM: arm64: Set HCR_EL2.TID1 unconditionally + spi: cadence-qspi: Fix probe on AM62A LP SK + mtd: rawnand: brcmnand: fix PM resume warning + tpm, tpm_tis: Fix timeout handling when waiting for TPM status + accel/ivpu: Fix PM related deadlocks in MS IOCTLs + media: ov08x40: Properly turn sensor on/off when runtime-suspended + media: streamzap: prevent processing IR data on URB failure + media: hi556: Fix memory leak (on error) in hi556_check_hwcfg() + media: visl: Fix ERANGE error when setting enum controls + media: platform: stm32: Add check for clk_enable() + media: xilinx-tpg: fix double put in xtpg_parse_of() + media: imx219: Adjust PLL settings based on the number of MIPI lanes + media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() + Revert "media: imx214: Fix the error handling in imx214_probe()" + media: i2c: ccs: Set the device's runtime PM status correctly in remove + media: i2c: ccs: Set the device's runtime PM status correctly in probe + media: i2c: ov7251: Set enable GPIO low in probe + media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO + media: nuvoton: Fix reference handling of ece_node + media: nuvoton: Fix reference handling of ece_pdev + media: venus: hfi_parser: add check to avoid out of bound access + media: venus: hfi_parser: refactor hfi packet parsing logic + media: i2c: imx319: Rectify runtime PM handling probe and remove + media: i2c: imx219: Rectify runtime PM handling in probe and remove + media: i2c: imx214: Rectify probe error handling related to runtime PM + media: chips-media: wave5: Fix gray color on screen + media: chips-media: wave5: Avoid race condition in the interrupt handler + media: chips-media: wave5: Fix a hang after seeking + media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster + irqchip/renesas-rzv2h: Fix wrong variable usage in rzv2h_tint_set_type() + mptcp: sockopt: fix getting IPV6_V6ONLY + mptcp: sockopt: fix getting freebind & transparent + block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone + mtd: Add check for devm_kcalloc() + net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family + net: dsa: mv88e6xxx: fix internal PHYs for 6320 family + mtd: Replace kcalloc() with devm_kcalloc() + clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup + Revert "wifi: mt76: mt7925: Update mt7925_mcu_uni_[tx,rx]_ba for MLO" + wifi: mt76: Add check for devm_kstrdup() + wifi: mt76: mt792x: re-register CHANCTX_STA_CSA only for the mt7921 series + wifi: mac80211: fix integer overflow in hwmp_route_info_get() + wifi: mt76: mt7925: ensure wow pattern command align fw format + wifi: mt76: mt7925: fix country count limitation for CLC + wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present + wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO + wifi: mt76: mt7925: adjust rm BSS flow to prevent next connection failure + wifi: mt76: mt7925: integrate *mlo_sta_cmd and *sta_cmd + wifi: mt76: mt7925: update the power-saving flow + scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag + net: stmmac: Fix accessing freed irq affinity_hint + io_uring/net: fix accept multishot handling + io_uring/net: fix io_req_post_cqe abuse by send bundle + io_uring/kbuf: reject zero sized provided buffers + ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() + ASoC: q6apm: add q6apm_get_hw_pointer helper + ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs + ASoC: q6apm-dai: make use of q6apm_get_hw_pointer + ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. + ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. + ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path + ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx + accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal() + accel/ivpu: Fix deadlock in ivpu_ms_cleanup() + arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() + arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() + bus: mhi: host: Fix race between unprepare and queue_buf + ext4: fix off-by-one error in do_split + f2fs: fix the missing write pointer correction + f2fs: fix to avoid atomicity corruption of atomic file + vdpa/mlx5: Fix oversized null mkey longer than 32bit + udf: Fix inode_getblk() return value + tpm: do not start chip while suspended + svcrdma: do not unregister device for listeners + soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() + smb311 client: fix missing tcon check when mounting with linux/posix extensions + ima: limit the number of open-writers integrity violations + ima: limit the number of ToMToU integrity violations + igc: Fix XSK queue NAPI ID mapping + i3c: master: svc: Use readsb helper for reading MDB + i3c: Add NULL pointer check in i3c_master_queue_ibi() + jbd2: remove wrong sb->s_sequence check + kbuild: exclude .rodata.(cst|str)* when building ranges + kbuild: Add '-fno-builtin-wcslen' + leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs + leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs + mfd: ene-kb3930: Fix a potential NULL pointer dereference + mailbox: tegra-hsp: Define dimensioning masks in SoC data + locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() + lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets + mptcp: fix NULL pointer in can_accept_new_subflow + mptcp: only inc MPJoinAckHMacFailure for HMAC failures + mtd: inftlcore: Add error check for inftl_read_oob() + mtd: rawnand: Add status chack in r852_ready() + mtd: spinand: Fix build with gcc < 7.5 + arm64: mops: Do not dereference src reg for a set operation + arm64: tegra: Remove the Orin NX/Nano suspend key + arm64: mm: Correct the update of max_pfn + arm64: dts: ti: k3-j784s4-j742s2-main-common: Correct the GICD size + arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix serdes_ln_ctrl reg-masks + arm64: dts: mediatek: mt8188: Assign apll1 clock as parent to avoid hang + arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string + arm64: dts: exynos: gs101: disable pinctrl_gsacore node + backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() + btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers + btrfs: tests: fix chunk map leak after failure to add it to the tree + btrfs: zoned: fix zone activation with missing devices + btrfs: zoned: fix zone finishing with missing devices + iommufd: Fix uninitialized rc in iommufd_access_rw() + iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() + iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled + iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes + iommu/vt-d: Fix possible circular locking dependency + iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs + sparc/mm: disable preemption in lazy mmu mode + sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes + net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. + mm/damon/ops: have damon_get_folio return folio even for tail pages + mm/damon: avoid applying DAMOS action to same entity multiple times + mm/rmap: reject hugetlb folios in folio_make_device_exclusive() + mm: make page_mapped_in_vma() hugetlb walk aware + mm: fix lazy mmu docs and usage + mm/mremap: correctly handle partial mremap() of VMA starting at 0 + mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock + mm/userfaultfd: fix release hang over concurrent GUP + mm/hwpoison: do not send SIGBUS to processes with recovered clean pages + mm/hugetlb: move hugetlb_sysctl_init() to the __init section + mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper + sctp: detect and prevent references to a freed transport in sendmsg + x86/xen: fix balloon target initialization for PVH dom0 + uprobes: Avoid false-positive lockdep splat on CONFIG_PREEMPT_RT=y in the ri_timer() uprobe timer callback, use raw_write_seqcount_*() + tracing: fprobe: Fix to lock module while registering fprobe + tracing: fprobe events: Fix possible UAF on modules + tracing: Do not add length to print format in synthetic events + thermal/drivers/rockchip: Add missing rk3328 mapping entry + CIFS: Propagate min offload along with other parameters from primary to secondary channels. + cifs: avoid NULL pointer dereference in dbg call + cifs: fix integer overflow in match_server() + cifs: Ensure that all non-client-specific reparse points are processed by the server + clk: renesas: r9a07g043: Fix HP clock source for RZ/Five + clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks + clk: qcom: gdsc: Release pm subdomains in reverse add order + clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code + clk: qcom: gdsc: Set retain_ff before moving to HW CTRL + crypto: ccp - Fix check for the primary ASP device + crypto: ccp - Fix uAPI definitions of PSP errors + dlm: fix error if inactive rsb is not hashed + dlm: fix error if active rsb is not hashed + dm-ebs: fix prefetch-vs-suspend race + dm-integrity: set ti->error on memory allocation failure + dm-integrity: fix non-constant-time tag verification + dm-verity: fix prefetch-vs-suspend race + dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg' + dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg' + firmware: cs_dsp: test_control_parse: null-terminate test strings + ftrace: Add cond_resched() to ftrace_graph_set_hash() + ftrace: Properly merge notrace hashes + fuse: {io-uring} Fix a possible req cancellation race + gpio: mpc8xxx: Fix wakeup source leaks on device unbind + gpio: tegra186: fix resource handling in ACPI probe path + gpio: zynq: Fix wakeup source leaks on device unbind + gve: handle overflow when reporting TX consumed descriptors + KVM: Allow building irqbypass.ko as as module when kvm.ko is a module + UBUNTU: [Config] updateconfigs for HAVE_KVM_IRQ_BYPASS + KVM: x86: Explicitly zero-initialize on-stack CPUID unions + KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses + landlock: Move code to ease future backports + landlock: Add the errata interface + landlock: Add erratum for TCP fix + landlock: Always allow signals between threads of the same process + landlock: Prepare to add second errata + selftests/landlock: Split signal_scoping_threads tests + selftests/landlock: Add a new test for setuid() + misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error + misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error + misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type + net: mana: Switch to page pool for jumbo frames + ntb: use 64-bit arithmetic for the MSI doorbell mask + of/irq: Fix device node refcount leakage in API of_irq_parse_one() + of/irq: Fix device node refcount leakage in API of_irq_parse_raw() + of/irq: Fix device node refcount leakages in of_irq_count() + of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() + of/irq: Fix device node refcount leakages in of_irq_init() + PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() + PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4 + PCI: layerscape: Fix arg_count to syscon_regmap_lookup_by_phandle_args() + PCI: pciehp: Avoid unnecessary device replacement check + PCI: Fix reference leak in pci_alloc_child_bus() + PCI: Fix reference leak in pci_register_host_bridge() + PCI: Fix wrong length of devres array + phy: freescale: imx8m-pcie: assert phy reset and perst in power off + pinctrl: qcom: Clear latched interrupt status when changing IRQ type + pinctrl: samsung: add support for eint_fltcon_offset + ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio() + s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs + s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues + s390: Fix linker error when -no-pie option is unavailable + sched_ext: create_dsq: Return -EEXIST on duplicate request + selftests: mptcp: close fd_in before returning in main_loop + selftests: mptcp: fix incorrect fd checks in main_loop + spi: fsl-qspi: use devm function instead of driver remove + spi: fsl-qspi: Fix double cleanup in probe error path + thermal/drivers/mediatek/lvts: Disable monitor mode during suspend + thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold + wifi: ath11k: update channel list in worker when wait flag is set + arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists + iommufd: Make attach_handle generic than fault specific + iommufd: Fail replace if device has not been attached + x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() + Bluetooth: hci_uart: Fix another race during initialization + HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition Linux 6.14.3 - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition - Bluetooth: hci_uart: Fix another race during initialization - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() - iommufd: Fail replace if device has not been attached - iommufd: Make attach_handle generic than fault specific - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists - wifi: ath11k: update channel list in worker when wait flag is set - thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold - thermal/drivers/mediatek/lvts: Disable monitor mode during suspend - spi: fsl-qspi: Fix double cleanup in probe error path - spi: fsl-qspi: use devm function instead of driver remove - selftests: mptcp: fix incorrect fd checks in main_loop - selftests: mptcp: close fd_in before returning in main_loop - sched_ext: create_dsq: Return -EEXIST on duplicate request - s390: Fix linker error when -no-pie option is unavailable - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs - ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio() - pinctrl: samsung: add support for eint_fltcon_offset - pinctrl: qcom: Clear latched interrupt status when changing IRQ type - phy: freescale: imx8m-pcie: assert phy reset and perst in power off - PCI: Fix wrong length of devres array - PCI: Fix reference leak in pci_register_host_bridge() - PCI: Fix reference leak in pci_alloc_child_bus() - PCI: pciehp: Avoid unnecessary device replacement check - PCI: layerscape: Fix arg_count to syscon_regmap_lookup_by_phandle_args() - PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4 - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() - of/irq: Fix device node refcount leakages in of_irq_init() - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() - of/irq: Fix device node refcount leakages in of_irq_count() - of/irq: Fix device node refcount leakage in API of_irq_parse_raw() - of/irq: Fix device node refcount leakage in API of_irq_parse_one() - ntb: use 64-bit arithmetic for the MSI doorbell mask - net: mana: Switch to page pool for jumbo frames - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error - selftests/landlock: Add a new test for setuid() - selftests/landlock: Split signal_scoping_threads tests - landlock: Prepare to add second errata - landlock: Always allow signals between threads of the same process - landlock: Add erratum for TCP fix - landlock: Add the errata interface - landlock: Move code to ease future backports - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses - KVM: x86: Explicitly zero-initialize on-stack CPUID unions - KVM: PPC: Enable CAP_SPAPR_TCE_VFIO on pSeries KVM guests - KVM: Allow building irqbypass.ko as as module when kvm.ko is a module - gve: handle overflow when reporting TX consumed descriptors - gpio: zynq: Fix wakeup source leaks on device unbind - gpio: tegra186: fix resource handling in ACPI probe path - gpio: mpc8xxx: Fix wakeup source leaks on device unbind - fuse: {io-uring} Fix a possible req cancellation race - ftrace: Properly merge notrace hashes - ftrace: Add cond_resched() to ftrace_graph_set_hash() - firmware: cs_dsp: test_control_parse: null-terminate test strings - dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg' - dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg' - dm-verity: fix prefetch-vs-suspend race - dm-integrity: fix non-constant-time tag verification - dm-integrity: set ti->error on memory allocation failure - dm-ebs: fix prefetch-vs-suspend race - dlm: fix error if active rsb is not hashed - dlm: fix error if inactive rsb is not hashed - crypto: ccp - Fix uAPI definitions of PSP errors - crypto: ccp - Fix check for the primary ASP device - clk: qcom: gdsc: Set retain_ff before moving to HW CTRL - clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code - clk: qcom: gdsc: Release pm subdomains in reverse add order - clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks - clk: renesas: r9a07g043: Fix HP clock source for RZ/Five - cifs: Ensure that all non-client-specific reparse points are processed by the server - cifs: fix integer overflow in match_server() - cifs: avoid NULL pointer dereference in dbg call - CIFS: Propagate min offload along with other parameters from primary to secondary channels. - thermal/drivers/rockchip: Add missing rk3328 mapping entry - tracing: Do not add length to print format in synthetic events - tracing: fprobe events: Fix possible UAF on modules - tracing: fprobe: Fix to lock module while registering fprobe - uprobes: Avoid false-positive lockdep splat on CONFIG_PREEMPT_RT=y in the ri_timer() uprobe timer callback, use raw_write_seqcount_*() - x86/xen: fix balloon target initialization for PVH dom0 - sctp: detect and prevent references to a freed transport in sendmsg - mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper - mm/hugetlb: move hugetlb_sysctl_init() to the __init section - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages - mm/userfaultfd: fix release hang over concurrent GUP - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock - mm/mremap: correctly handle partial mremap() of VMA starting at 0 - mm: fix lazy mmu docs and usage - mm: make page_mapped_in_vma() hugetlb walk aware - mm/rmap: reject hugetlb folios in folio_make_device_exclusive() - mm/damon: avoid applying DAMOS action to same entity multiple times - mm/damon/ops: have damon_get_folio return folio even for tail pages - net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. - sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes - sparc/mm: disable preemption in lazy mmu mode - iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs - iommu/vt-d: Fix possible circular locking dependency - iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes - iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled - iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() - iommufd: Fix uninitialized rc in iommufd_access_rw() - btrfs: zoned: fix zone finishing with missing devices - btrfs: zoned: fix zone activation with missing devices - btrfs: tests: fix chunk map leak after failure to add it to the tree - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() - arm64: dts: exynos: gs101: disable pinctrl_gsacore node - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string - arm64: dts: mediatek: mt8188: Assign apll1 clock as parent to avoid hang - arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix serdes_ln_ctrl reg-masks - arm64: dts: ti: k3-j784s4-j742s2-main-common: Correct the GICD size - arm64: mm: Correct the update of max_pfn - arm64: tegra: Remove the Orin NX/Nano suspend key - arm64: mops: Do not dereference src reg for a set operation - mtd: spinand: Fix build with gcc < 7.5 - mtd: rawnand: Add status chack in r852_ready() - mtd: inftlcore: Add error check for inftl_read_oob() - mptcp: only inc MPJoinAckHMacFailure for HMAC failures - mptcp: fix NULL pointer in can_accept_new_subflow - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() - mailbox: tegra-hsp: Define dimensioning masks in SoC data - mfd: ene-kb3930: Fix a potential NULL pointer dereference - leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs - leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs - kbuild: Add '-fno-builtin-wcslen' - kbuild: exclude .rodata.(cst|str)* when building ranges - jbd2: remove wrong sb->s_sequence check - i3c: Add NULL pointer check in i3c_master_queue_ibi() - i3c: master: svc: Use readsb helper for reading MDB - igc: Fix XSK queue NAPI ID mapping - ima: limit the number of ToMToU integrity violations - ima: limit the number of open-writers integrity violations - smb311 client: fix missing tcon check when mounting with linux/posix extensions - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() - svcrdma: do not unregister device for listeners - tpm: do not start chip while suspended - udf: Fix inode_getblk() return value - vdpa/mlx5: Fix oversized null mkey longer than 32bit - f2fs: fix to avoid atomicity corruption of atomic file - f2fs: fix the missing write pointer correction - ext4: fix off-by-one error in do_split - bus: mhi: host: Fix race between unprepare and queue_buf - arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() - arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() - accel/ivpu: Fix deadlock in ivpu_ms_cleanup() - accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal() - ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs - ASoC: q6apm: add q6apm_get_hw_pointer helper - ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() - io_uring/kbuf: reject zero sized provided buffers - io_uring/net: fix io_req_post_cqe abuse by send bundle - io_uring/net: fix accept multishot handling - net: stmmac: Fix accessing freed irq affinity_hint - scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag - wifi: mt76: mt7925: update the power-saving flow - wifi: mt76: mt7925: integrate *mlo_sta_cmd and *sta_cmd - wifi: mt76: mt7925: adjust rm BSS flow to prevent next connection failure - wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO - wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present - wifi: mt76: mt7925: fix country count limitation for CLC - wifi: mt76: mt7925: ensure wow pattern command align fw format - wifi: mac80211: fix integer overflow in hwmp_route_info_get() - wifi: mt76: mt792x: re-register CHANCTX_STA_CSA only for the mt7921 series - wifi: mt76: Add check for devm_kstrdup() - Revert "wifi: mt76: mt7925: Update mt7925_mcu_uni_[tx,rx]_ba for MLO" - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup - mtd: Replace kcalloc() with devm_kcalloc() - net: dsa: mv88e6xxx: fix internal PHYs for 6320 family - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family - mtd: Add check for devm_kcalloc() - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone - mptcp: sockopt: fix getting freebind & transparent - mptcp: sockopt: fix getting IPV6_V6ONLY - gve: unlink old napi only if page pool exists - irqchip/renesas-rzv2h: Fix wrong variable usage in rzv2h_tint_set_type() - media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster - media: chips-media: wave5: Fix a hang after seeking - media: chips-media: wave5: Avoid race condition in the interrupt handler - media: chips-media: wave5: Fix gray color on screen - media: i2c: imx214: Rectify probe error handling related to runtime PM - media: i2c: imx219: Rectify runtime PM handling in probe and remove - media: i2c: imx319: Rectify runtime PM handling probe and remove - media: venus: hfi_parser: refactor hfi packet parsing logic - media: venus: hfi_parser: add check to avoid out of bound access - media: nuvoton: Fix reference handling of ece_pdev - media: nuvoton: Fix reference handling of ece_node - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO - media: i2c: ov7251: Set enable GPIO low in probe - media: i2c: ccs: Set the device's runtime PM status correctly in probe - media: i2c: ccs: Set the device's runtime PM status correctly in remove - Revert "media: imx214: Fix the error handling in imx214_probe()" - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() - media: imx219: Adjust PLL settings based on the number of MIPI lanes - media: xilinx-tpg: fix double put in xtpg_parse_of() - media: platform: stm32: Add check for clk_enable() - media: visl: Fix ERANGE error when setting enum controls - media: hi556: Fix memory leak (on error) in hi556_check_hwcfg() - media: streamzap: prevent processing IR data on URB failure - media: ov08x40: Properly turn sensor on/off when runtime-suspended - accel/ivpu: Fix PM related deadlocks in MS IOCTLs - tpm, tpm_tis: Fix timeout handling when waiting for TPM status - mtd: rawnand: brcmnand: fix PM resume warning - spi: cadence-qspi: Fix probe on AM62A LP SK - KVM: arm64: Set HCR_EL2.TID1 unconditionally - KVM: arm64: Tear down vGIC on failed vCPU creation - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list - arm64: cputype: Add MIDR_CORTEX_A76AE - KVM: arm64: PMU: Set raw values from user to PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} - xenfs/xensyms: respect hypervisor's "next" indication - media: rockchip: rga: fix rga offset lookup - media: siano: Fix error handling in smsdvb_module_init() - media: vim2m: print device name after registering device - media: venus: hfi: add check to handle incorrect queue size - media: venus: hfi: add a check to handle OOB in sfr region - media: intel/ipu6: set the dev_parent of video device to pdev - media: mgb4: Fix switched CMT frequency range "magic values" sets - media: i2c: adv748x: Fix test pattern selection mask - media: mgb4: Fix CMT registers update logic - media: uapi: rkisp1-config: Fix typo in extensible params example - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning - media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization - dt-bindings: media: st,stmipid02: correct lane-polarities maxItems - auxdisplay: hd44780: Fix an API misuse in hd44780.c - HID: pidff: Fix set_device_control() - HID: pidff: Fix 90 degrees direction name North -> East - HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff - HID: pidff: Clamp effect playback LOOP_COUNT value - HID: pidff: Rename two functions to align them with naming convention - HID: pidff: Remove redundant call to pidff_find_special_keys - HID: pidff: Support device error response from PID_BLOCK_LOAD - HID: pidff: Comment and code style update - HID: hid-universal-pidff: Add Asetek wheelbases support - HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX - HID: pidff: Factor out pool report fetch and remove excess declaration - HID: pidff: Use macros instead of hardcoded min/max values for shorts - HID: pidff: Simplify pidff_rescale_signed - HID: pidff: Move all hid-pidff definitions to a dedicated header - HID: pidff: Factor out code for setting gain - HID: pidff: Rescale time values to match field units - HID: pidff: Define values used in pidff_find_special_fields - HID: pidff: Simplify pidff_upload_effect function - HID: pidff: Completely rework and fix pidff_reset function - HID: pidff: Stop all effects before enabling actuators - HID: pidff: Clamp PERIODIC effect period to device's logical range - s390/pci: Fix s390_mmio_read/write syscall page fault handling - ext4: don't treat fhandle lookup of ea_inode as FS corruption - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags - erofs: set error to bio if file-backed IO fails - pwm: stm32: Search an appropriate duty_cycle if period cannot be modified - pwm: fsl-ftm: Handle clk_get_rate() returning 0 - pwm: rcar: Improve register calculation - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() - tpm: End any active auth session before shutdown - tpm, tpm_tis: Workaround failed command reception on Infineon devices - ktest: Fix Test Failures Due to Missing LOG_FILE Directories - tracing: probe-events: Add comments about entry data storing code - tracing: probe-events: Log error for exceeding the number of arguments - fbdev: omapfb: Add 'plane' value check - drm/amdgpu: grab an additional reference on the gang fence v2 - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type - PCI: Check BAR index for validity - drm/amdgpu: Fix the race condition for draining retry fault - PCI: Enable Configuration RRS SV early - drm/amd/display: Prevent VStartup Overflow - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() - PCI: Add Rockchip Vendor ID - drm/rockchip: stop passing non struct drm_device to drm_err() and friends - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off - drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data - drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds - drm/amdkfd: debugfs hang_hws skip GPU with MES - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset - drm/amdkfd: Fix mode1 reset crash issue - drm/amdkfd: clamp queue size to minimum - drivers: base: devres: Allow to release group on device release - drm/amd/display: stop DML2 from removing pipes based on planes - drm/amd/display: Update FIXED_VS Link Rate Toggle Workaround Usage - drm/bridge: panel: forbid initializing a panel with unknown connector type - drm/debugfs: fix printk format for bridge index - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) - drm: panel-orientation-quirks: Add new quirk for GPD Win 2 - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB - drm: panel-orientation-quirks: Add support for AYANEO 2S - drm/amdgpu: Unlocked unmap only clear page table leaves - drm/amd/display: add workaround flag to link to force FFE preset - drm/amd/display: Guard Possible Null Pointer Dereference - drm/amd/display: Update Cursor request mode to the beginning prefetch always - drm/xe/vf: Don't try to trigger a full GT reset if VF - drm/xe/pf: Don't send BEGIN_ID if VF has no context/doorbells - drm/xe/ptl: Update the PTL pci id table - drm/xe/bmg: Add new PCI IDs - drm/rockchip: Don't change hdmi reference clock rate - drm/virtio: Set missing bo->attached flag - drm: allow encoder mode_set even when connectors change for crtc - Bluetooth: qca: add WCN3950 support - Bluetooth: qca: simplify WCN399x NVM loading - Bluetooth: hci_qca: use the power sequencer for wcn6750 - Bluetooth: btusb: Add 2 HWIDs for MT7922 - Bluetooth: hci_uart: fix race during initialization - Bluetooth: btusb: Add 13 USB device IDs for Qualcomm WCN785x - Bluetooth: btintel_pcie: Add device id of Whale Peak - Bluetooth: btusb: Add new VID/PID for WCN785x - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER - net: vlan: don't propagate flags on open - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table - btrfs: harden block_group::bg_list against list_del() races - ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI - scsi: st: Fix array overflow in st_setup() - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk - ext4: ignore xattrs past end - wifi: mac80211: fix userspace_selectors corruption - Revert "f2fs: rebuild nat_bits during umount" - ext4: protect ext4_release_dquot against freezing - ahci: add PCI ID for Marvell 88SE9215 SATA Controller - net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi - net: sfp: add quirk for 2.5G OEM BX SFP - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode - wifi: rtw88: Add support for Mercusys MA30N and D-Link DWA-T185 rev. A1 - jfs: add sanity check for agwidth in dbMount - jfs: Prevent copying of nlink with value 0 from disk inode - fs/jfs: Prevent integer overflow in AG size calculation - fs/jfs: cast inactags to s64 to prevent potential overflow - jfs: Fix uninit-value access of imap allocated in the diMount() function - can: flexcan: add NXP S32G2/S32G3 SoC support - can: flexcan: Add quirk to handle separate interrupt lines for mailboxes - page_pool: avoid infinite loop to schedule delayed worker - net: usb: asix_devices: add FiberGecko DeviceID - scsi: target: spc: Fix RSOC parameter data header size - wifi: mac80211: ensure sdata->work is canceled before initialized. - wifi: mac80211: add strict mode disabling workarounds - f2fs: don't retry IO for corrupted data scenario - net: page_pool: don't cast mp param to devmem - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue - scsi: mpi3mr: Avoid reply queue full condition - ata: libata-core: Add 'external' to the libata.force kernel parameter - wifi: ath12k: Avoid memory leak while enabling statistics - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process - wifi: ath12k: fix memory leak in ath12k_pci_remove() - wifi: ath11k: fix memory leak in ath11k_xxx_remove() - wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues - wifi: ath9k: use unsigned long for activity check timestamp - platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig - ASoC: amd: yc: update quirk data for new Lenovo model - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247 - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315 - ASoC: amd: Add DMI quirk for ACP6X mic support - ALSA: usb-audio: Fix CME quirk for UF series keyboards - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves - media: s5p-mfc: Corrected NV12M/NV21M plane-sizes - HID: lenovo: Fix to ensure the data as __le32 instead of u32 - media: uvcvideo: Add quirk for Actions UVC05 - ASoC: fsl_audmix: register card device depends on 'dais' property - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist - ALSA: hda: intel: Fix Optimus when GPU has no sound - ASoC: amd: amd_sdw: Add quirks for Dell SKU's - ASoC: amd: ps: use macro for ACP6.3 pci revision id - HID: pidff: Fix null pointer dereference in pidff_find_fields - HID: pidff: Add PERIODIC_SINE_ONLY quirk - HID: Add hid-universal-pidff driver and supported device ids - HID: pidff: Add FIX_WHEEL_DIRECTION quirk - HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol - HID: pidff: Add PERMISSIVE_CONTROL quirk - HID: pidff: Add MISSING_PBO quirk and its detection - HID: pidff: Add MISSING_DELAY quirk and its detection - HID: pidff: Do not send effect envelope if it's empty - HID: pidff: Convert infinite length from Linux API to PID standard - ASoC: SOF: topology: Use krealloc_array() to replace krealloc() - platform/chrome: cros_ec_lpc: Match on Framework ACPI device - tracing: Disable branch profiling in noinstr code - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault - xen/mcelog: Add __nonstring annotations for unterminated strings - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD - cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend - Flush console log from kernel_power_off() - PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() - perf/dwc_pcie: fix duplicate pci_dev devices - perf/dwc_pcie: fix some unreleased resources - perf: arm_pmu: Don't disable counter in armpmu_add() - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine - x86/ia32: Leave NULL selector values 0~3 unchanged - x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC < 14.2 - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW - irqchip/gic-v3: Add Rockchip 3568002 erratum workaround - pm: cpupower: bench: Prevent NULL dereference on malloc failure - srcu: Force synchronization for srcu_get_delay() - umount: Allow superblock owners to force umount - fs: consistently deref the files table with rcu_dereference_raw() - perf: Fix hang while freeing sigtrap event - perf/core: Simplify the perf_event_alloc() error path - net: libwx: Fix the wrong Rx descriptor field - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group - iommu/exynos: Fix suspend/resume with IDENTITY domain - ethtool: cmis_cdb: Fix incorrect read / write length extension - nft_set_pipapo: fix incorrect avx2 match of 5th field octet - net: ppp: Add bound checking for skb data on ppp_sync_txmung - ipv6: Align behavior across nexthops during path selection - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() - smb: client: fix UAF in decryption with multichannel - x86/cpu: Avoid running off the end of an AMD erratum table - net_sched: sch_sfq: move the limit validation - net_sched: sch_sfq: use a temporary work area for validating configuration - nvmet-fcloop: swap list_add_tail arguments - s390/cpumf: Fix double free on error in cpumf_pmu_event_init() - drm/i915/huc: Fix fence not released on early probe errors - ata: sata_sx4: Add error handling in pdc20621_i2c_read() - cifs: Fix support for WSL-style symlinks - net: libwx: handle page_pool_dev_alloc_pages error - drm/tests: probe-helper: Fix drm_display_mode memory leak - drm/tests: modes: Fix drm_display_mode memory leak - drm/tests: cmdline: Fix drm_display_mode memory leak - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode - drm/tests: modeset: Fix drm_display_mode memory leak - net: ethtool: Don't call .cleanup_data when prepare_data fails - tc: Ensure we have enough buffer space when sending filter netlink notifications - octeontx2-pf: qos: fix VF root node parent queue index - net: tls: explicitly disallow disconnect - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() - tipc: fix memory leak in tipc_link_xmit - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() - drm/xe: Restore EIO errno return when GuC PC start fails - drm/xe/hw_engine: define sysfs_ops on all directories - net: ethtool: fix ethtool_ringparam_get_cfg() returns a hds_thresh value always as 0. - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI - drm/i915: Disable RPG during live selftest - drm/virtio: Fix flickering issue seen with imported dmabufs - ublk: fix handling recovery & reissue in ublk_abort_queue() - selftests/futex: futex_waitv wouldblock test should fail - gpiolib: of: Fix the choice for Ingenic NAND quirk - tracing: fprobe: Cleanup fprobe hash when module unloading - cgroup/cpuset: Fix race between newly created partition and dying one - cgroup/cpuset: Fix error handling in remote_partition_disable() - cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() - ASoC: Intel: adl: add 2xrt1316 audio configuration + UBUNTU: Upstream stable to v6.14.3 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2108854 Title: Plucky update: v6.14.3 upstream stable release Status in linux package in Ubuntu: Invalid Status in linux source package in Plucky: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v6.14.3 upstream stable release from git://git.kernel.org/ ASoC: Intel: adl: add 2xrt1316 audio configuration cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() cgroup/cpuset: Fix error handling in remote_partition_disable() cgroup/cpuset: Fix race between newly created partition and dying one tracing: fprobe: Cleanup fprobe hash when module unloading gpiolib: of: Fix the choice for Ingenic NAND quirk selftests/futex: futex_waitv wouldblock test should fail ublk: fix handling recovery & reissue in ublk_abort_queue() drm/virtio: Fix flickering issue seen with imported dmabufs drm/i915: Disable RPG during live selftest x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI net: ethtool: fix ethtool_ringparam_get_cfg() returns a hds_thresh value always as 0. drm/xe/hw_engine: define sysfs_ops on all directories drm/xe: Restore EIO errno return when GuC PC start fails ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() tipc: fix memory leak in tipc_link_xmit codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() net: tls: explicitly disallow disconnect octeontx2-pf: qos: fix VF root node parent queue index tc: Ensure we have enough buffer space when sending filter netlink notifications net: ethtool: Don't call .cleanup_data when prepare_data fails drm/tests: modeset: Fix drm_display_mode memory leak drm/tests: helpers: Create kunit helper to destroy a drm_display_mode drm/tests: cmdline: Fix drm_display_mode memory leak drm/tests: modes: Fix drm_display_mode memory leak drm/tests: probe-helper: Fix drm_display_mode memory leak net: libwx: handle page_pool_dev_alloc_pages error cifs: Fix support for WSL-style symlinks ata: sata_sx4: Add error handling in pdc20621_i2c_read() drm/i915/huc: Fix fence not released on early probe errors s390/cpumf: Fix double free on error in cpumf_pmu_event_init() nvmet-fcloop: swap list_add_tail arguments net_sched: sch_sfq: use a temporary work area for validating configuration net_sched: sch_sfq: move the limit validation x86/cpu: Avoid running off the end of an AMD erratum table smb: client: fix UAF in decryption with multichannel net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY ipv6: Align behavior across nexthops during path selection net: ppp: Add bound checking for skb data on ppp_sync_txmung nft_set_pipapo: fix incorrect avx2 match of 5th field octet ethtool: cmis_cdb: Fix incorrect read / write length extension iommu/exynos: Fix suspend/resume with IDENTITY domain iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group net: libwx: Fix the wrong Rx descriptor field perf/core: Simplify the perf_event_alloc() error path perf: Fix hang while freeing sigtrap event fs: consistently deref the files table with rcu_dereference_raw() umount: Allow superblock owners to force umount srcu: Force synchronization for srcu_get_delay() pm: cpupower: bench: Prevent NULL dereference on malloc failure irqchip/gic-v3: Add Rockchip 3568002 erratum workaround UBUNTU: [Config] updateconfigs for ROCKCHIP_ERRATUM_3568002 x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC < 14.2 x86/ia32: Leave NULL selector values 0~3 unchanged x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine perf: arm_pmu: Don't disable counter in armpmu_add() perf/dwc_pcie: fix some unreleased resources perf/dwc_pcie: fix duplicate pci_dev devices PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() Flush console log from kernel_power_off() cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD xen/mcelog: Add __nonstring annotations for unterminated strings zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault tracing: Disable branch profiling in noinstr code platform/chrome: cros_ec_lpc: Match on Framework ACPI device ASoC: SOF: topology: Use krealloc_array() to replace krealloc() HID: pidff: Convert infinite length from Linux API to PID standard HID: pidff: Do not send effect envelope if it's empty HID: pidff: Add MISSING_DELAY quirk and its detection HID: pidff: Add MISSING_PBO quirk and its detection HID: pidff: Add PERMISSIVE_CONTROL quirk HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol HID: pidff: Add FIX_WHEEL_DIRECTION quirk HID: Add hid-universal-pidff driver and supported device ids UBUNTU: [Config] enable new hid-universal-pidff driver module HID: pidff: Add PERIODIC_SINE_ONLY quirk HID: pidff: Fix null pointer dereference in pidff_find_fields ASoC: amd: ps: use macro for ACP6.3 pci revision id ASoC: amd: amd_sdw: Add quirks for Dell SKU's ALSA: hda: intel: Fix Optimus when GPU has no sound ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist ASoC: fsl_audmix: register card device depends on 'dais' property media: uvcvideo: Add quirk for Actions UVC05 HID: lenovo: Fix to ensure the data as __le32 instead of u32 media: s5p-mfc: Corrected NV12M/NV21M plane-sizes mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves ALSA: usb-audio: Fix CME quirk for UF series keyboards ASoC: amd: Add DMI quirk for ACP6X mic support ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315 ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247 ASoC: amd: yc: update quirk data for new Lenovo model platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig wifi: ath9k: use unsigned long for activity check timestamp wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues wifi: ath11k: fix memory leak in ath11k_xxx_remove() wifi: ath12k: fix memory leak in ath12k_pci_remove() wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process wifi: ath12k: Avoid memory leak while enabling statistics ata: libata-core: Add 'external' to the libata.force kernel parameter scsi: mpi3mr: Avoid reply queue full condition scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue net: page_pool: don't cast mp param to devmem f2fs: don't retry IO for corrupted data scenario wifi: mac80211: add strict mode disabling workarounds wifi: mac80211: ensure sdata->work is canceled before initialized. scsi: target: spc: Fix RSOC parameter data header size net: usb: asix_devices: add FiberGecko DeviceID page_pool: avoid infinite loop to schedule delayed worker can: flexcan: Add quirk to handle separate interrupt lines for mailboxes can: flexcan: add NXP S32G2/S32G3 SoC support jfs: Fix uninit-value access of imap allocated in the diMount() function fs/jfs: cast inactags to s64 to prevent potential overflow fs/jfs: Prevent integer overflow in AG size calculation jfs: Prevent copying of nlink with value 0 from disk inode jfs: add sanity check for agwidth in dbMount wifi: rtw88: Add support for Mercusys MA30N and D-Link DWA-T185 rev. A1 ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode net: sfp: add quirk for 2.5G OEM BX SFP wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module ahci: add PCI ID for Marvell 88SE9215 SATA Controller ext4: protect ext4_release_dquot against freezing Revert "f2fs: rebuild nat_bits during umount" wifi: mac80211: fix userspace_selectors corruption ext4: ignore xattrs past end cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk scsi: st: Fix array overflow in st_setup() ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI btrfs: harden block_group::bg_list against list_del() races wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table net: vlan: don't propagate flags on open tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER Bluetooth: btusb: Add new VID/PID for WCN785x Bluetooth: btintel_pcie: Add device id of Whale Peak Bluetooth: btusb: Add 13 USB device IDs for Qualcomm WCN785x Bluetooth: hci_uart: fix race during initialization Bluetooth: btusb: Add 2 HWIDs for MT7922 Bluetooth: hci_qca: use the power sequencer for wcn6750 Bluetooth: qca: simplify WCN399x NVM loading Bluetooth: qca: add WCN3950 support drm: allow encoder mode_set even when connectors change for crtc drm/virtio: Set missing bo->attached flag drm/rockchip: Don't change hdmi reference clock rate drm/xe/ptl: Update the PTL pci id table drm/xe/pf: Don't send BEGIN_ID if VF has no context/doorbells drm/xe/vf: Don't try to trigger a full GT reset if VF drm/amd/display: Update Cursor request mode to the beginning prefetch always drm/amd/display: Guard Possible Null Pointer Dereference drm/amd/display: add workaround flag to link to force FFE preset drm/amdgpu: Unlocked unmap only clear page table leaves drm: panel-orientation-quirks: Add support for AYANEO 2S drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB drm: panel-orientation-quirks: Add quirk for AYA NEO Slide drm: panel-orientation-quirks: Add new quirk for GPD Win 2 drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) drm/debugfs: fix printk format for bridge index drm/bridge: panel: forbid initializing a panel with unknown connector type drm/amd/display: Update FIXED_VS Link Rate Toggle Workaround Usage drm/amd/display: stop DML2 from removing pipes based on planes drivers: base: devres: Allow to release group on device release drm/amdkfd: clamp queue size to minimum drm/amdkfd: Fix mode1 reset crash issue drm/amdkfd: Fix pqm_destroy_queue race with GPU reset drm/amdkfd: debugfs hang_hws skip GPU with MES drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off drm/rockchip: stop passing non struct drm_device to drm_err() and friends PCI: Add Rockchip Vendor ID drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() drm/amd/display: Prevent VStartup Overflow PCI: Enable Configuration RRS SV early drm/amdgpu: Fix the race condition for draining retry fault PCI: Check BAR index for validity PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type drm/amdgpu: grab an additional reference on the gang fence v2 fbdev: omapfb: Add 'plane' value check tracing: probe-events: Log error for exceeding the number of arguments tracing: probe-events: Add comments about entry data storing code ktest: Fix Test Failures Due to Missing LOG_FILE Directories tpm, tpm_tis: Workaround failed command reception on Infineon devices tpm: End any active auth session before shutdown pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() pwm: rcar: Improve register calculation pwm: fsl-ftm: Handle clk_get_rate() returning 0 pwm: stm32: Search an appropriate duty_cycle if period cannot be modified erofs: set error to bio if file-backed IO fails bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags ext4: don't treat fhandle lookup of ea_inode as FS corruption s390/pci: Fix s390_mmio_read/write syscall page fault handling HID: pidff: Clamp PERIODIC effect period to device's logical range HID: pidff: Stop all effects before enabling actuators HID: pidff: Completely rework and fix pidff_reset function HID: pidff: Simplify pidff_upload_effect function HID: pidff: Define values used in pidff_find_special_fields HID: pidff: Rescale time values to match field units HID: pidff: Factor out code for setting gain HID: pidff: Move all hid-pidff definitions to a dedicated header HID: pidff: Simplify pidff_rescale_signed HID: pidff: Use macros instead of hardcoded min/max values for shorts HID: pidff: Factor out pool report fetch and remove excess declaration HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX HID: hid-universal-pidff: Add Asetek wheelbases support HID: pidff: Comment and code style update HID: pidff: Support device error response from PID_BLOCK_LOAD HID: pidff: Remove redundant call to pidff_find_special_keys HID: pidff: Rename two functions to align them with naming convention HID: pidff: Clamp effect playback LOOP_COUNT value HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff HID: pidff: Fix 90 degrees direction name North -> East HID: pidff: Fix set_device_control() auxdisplay: hd44780: Fix an API misuse in hd44780.c dt-bindings: media: st,stmipid02: correct lane-polarities maxItems media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning media: uapi: rkisp1-config: Fix typo in extensible params example media: mgb4: Fix CMT registers update logic media: i2c: adv748x: Fix test pattern selection mask media: mgb4: Fix switched CMT frequency range "magic values" sets media: intel/ipu6: set the dev_parent of video device to pdev media: venus: hfi: add a check to handle OOB in sfr region media: venus: hfi: add check to handle incorrect queue size media: vim2m: print device name after registering device media: siano: Fix error handling in smsdvb_module_init() media: rockchip: rga: fix rga offset lookup xenfs/xensyms: respect hypervisor's "next" indication KVM: arm64: PMU: Set raw values from user to PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} arm64: cputype: Add MIDR_CORTEX_A76AE arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list KVM: arm64: Tear down vGIC on failed vCPU creation KVM: arm64: Set HCR_EL2.TID1 unconditionally spi: cadence-qspi: Fix probe on AM62A LP SK mtd: rawnand: brcmnand: fix PM resume warning tpm, tpm_tis: Fix timeout handling when waiting for TPM status accel/ivpu: Fix PM related deadlocks in MS IOCTLs media: ov08x40: Properly turn sensor on/off when runtime-suspended media: streamzap: prevent processing IR data on URB failure media: hi556: Fix memory leak (on error) in hi556_check_hwcfg() media: visl: Fix ERANGE error when setting enum controls media: platform: stm32: Add check for clk_enable() media: xilinx-tpg: fix double put in xtpg_parse_of() media: imx219: Adjust PLL settings based on the number of MIPI lanes media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() Revert "media: imx214: Fix the error handling in imx214_probe()" media: i2c: ccs: Set the device's runtime PM status correctly in remove media: i2c: ccs: Set the device's runtime PM status correctly in probe media: i2c: ov7251: Set enable GPIO low in probe media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO media: nuvoton: Fix reference handling of ece_node media: nuvoton: Fix reference handling of ece_pdev media: venus: hfi_parser: add check to avoid out of bound access media: venus: hfi_parser: refactor hfi packet parsing logic media: i2c: imx319: Rectify runtime PM handling probe and remove media: i2c: imx219: Rectify runtime PM handling in probe and remove media: i2c: imx214: Rectify probe error handling related to runtime PM media: chips-media: wave5: Fix gray color on screen media: chips-media: wave5: Avoid race condition in the interrupt handler media: chips-media: wave5: Fix a hang after seeking media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster irqchip/renesas-rzv2h: Fix wrong variable usage in rzv2h_tint_set_type() mptcp: sockopt: fix getting IPV6_V6ONLY mptcp: sockopt: fix getting freebind & transparent block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone mtd: Add check for devm_kcalloc() net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family net: dsa: mv88e6xxx: fix internal PHYs for 6320 family mtd: Replace kcalloc() with devm_kcalloc() clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup Revert "wifi: mt76: mt7925: Update mt7925_mcu_uni_[tx,rx]_ba for MLO" wifi: mt76: Add check for devm_kstrdup() wifi: mt76: mt792x: re-register CHANCTX_STA_CSA only for the mt7921 series wifi: mac80211: fix integer overflow in hwmp_route_info_get() wifi: mt76: mt7925: ensure wow pattern command align fw format wifi: mt76: mt7925: fix country count limitation for CLC wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO wifi: mt76: mt7925: adjust rm BSS flow to prevent next connection failure wifi: mt76: mt7925: integrate *mlo_sta_cmd and *sta_cmd wifi: mt76: mt7925: update the power-saving flow scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag net: stmmac: Fix accessing freed irq affinity_hint io_uring/net: fix accept multishot handling io_uring/net: fix io_req_post_cqe abuse by send bundle io_uring/kbuf: reject zero sized provided buffers ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() ASoC: q6apm: add q6apm_get_hw_pointer helper ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs ASoC: q6apm-dai: make use of q6apm_get_hw_pointer ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal() accel/ivpu: Fix deadlock in ivpu_ms_cleanup() arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() bus: mhi: host: Fix race between unprepare and queue_buf ext4: fix off-by-one error in do_split f2fs: fix the missing write pointer correction f2fs: fix to avoid atomicity corruption of atomic file vdpa/mlx5: Fix oversized null mkey longer than 32bit udf: Fix inode_getblk() return value tpm: do not start chip while suspended svcrdma: do not unregister device for listeners soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() smb311 client: fix missing tcon check when mounting with linux/posix extensions ima: limit the number of open-writers integrity violations ima: limit the number of ToMToU integrity violations igc: Fix XSK queue NAPI ID mapping i3c: master: svc: Use readsb helper for reading MDB i3c: Add NULL pointer check in i3c_master_queue_ibi() jbd2: remove wrong sb->s_sequence check kbuild: exclude .rodata.(cst|str)* when building ranges kbuild: Add '-fno-builtin-wcslen' leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs mfd: ene-kb3930: Fix a potential NULL pointer dereference mailbox: tegra-hsp: Define dimensioning masks in SoC data locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets mptcp: fix NULL pointer in can_accept_new_subflow mptcp: only inc MPJoinAckHMacFailure for HMAC failures mtd: inftlcore: Add error check for inftl_read_oob() mtd: rawnand: Add status chack in r852_ready() mtd: spinand: Fix build with gcc < 7.5 arm64: mops: Do not dereference src reg for a set operation arm64: tegra: Remove the Orin NX/Nano suspend key arm64: mm: Correct the update of max_pfn arm64: dts: ti: k3-j784s4-j742s2-main-common: Correct the GICD size arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix serdes_ln_ctrl reg-masks arm64: dts: mediatek: mt8188: Assign apll1 clock as parent to avoid hang arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string arm64: dts: exynos: gs101: disable pinctrl_gsacore node backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers btrfs: tests: fix chunk map leak after failure to add it to the tree btrfs: zoned: fix zone activation with missing devices btrfs: zoned: fix zone finishing with missing devices iommufd: Fix uninitialized rc in iommufd_access_rw() iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes iommu/vt-d: Fix possible circular locking dependency iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs sparc/mm: disable preemption in lazy mmu mode sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. mm/damon/ops: have damon_get_folio return folio even for tail pages mm/damon: avoid applying DAMOS action to same entity multiple times mm/rmap: reject hugetlb folios in folio_make_device_exclusive() mm: make page_mapped_in_vma() hugetlb walk aware mm: fix lazy mmu docs and usage mm/mremap: correctly handle partial mremap() of VMA starting at 0 mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock mm/userfaultfd: fix release hang over concurrent GUP mm/hwpoison: do not send SIGBUS to processes with recovered clean pages mm/hugetlb: move hugetlb_sysctl_init() to the __init section mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper sctp: detect and prevent references to a freed transport in sendmsg x86/xen: fix balloon target initialization for PVH dom0 uprobes: Avoid false-positive lockdep splat on CONFIG_PREEMPT_RT=y in the ri_timer() uprobe timer callback, use raw_write_seqcount_*() tracing: fprobe: Fix to lock module while registering fprobe tracing: fprobe events: Fix possible UAF on modules tracing: Do not add length to print format in synthetic events thermal/drivers/rockchip: Add missing rk3328 mapping entry CIFS: Propagate min offload along with other parameters from primary to secondary channels. cifs: avoid NULL pointer dereference in dbg call cifs: fix integer overflow in match_server() cifs: Ensure that all non-client-specific reparse points are processed by the server clk: renesas: r9a07g043: Fix HP clock source for RZ/Five clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks clk: qcom: gdsc: Release pm subdomains in reverse add order clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code clk: qcom: gdsc: Set retain_ff before moving to HW CTRL crypto: ccp - Fix check for the primary ASP device crypto: ccp - Fix uAPI definitions of PSP errors dlm: fix error if inactive rsb is not hashed dlm: fix error if active rsb is not hashed dm-ebs: fix prefetch-vs-suspend race dm-integrity: set ti->error on memory allocation failure dm-integrity: fix non-constant-time tag verification dm-verity: fix prefetch-vs-suspend race dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg' dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg' firmware: cs_dsp: test_control_parse: null-terminate test strings ftrace: Add cond_resched() to ftrace_graph_set_hash() ftrace: Properly merge notrace hashes fuse: {io-uring} Fix a possible req cancellation race gpio: mpc8xxx: Fix wakeup source leaks on device unbind gpio: tegra186: fix resource handling in ACPI probe path gpio: zynq: Fix wakeup source leaks on device unbind gve: handle overflow when reporting TX consumed descriptors KVM: Allow building irqbypass.ko as as module when kvm.ko is a module UBUNTU: [Config] updateconfigs for HAVE_KVM_IRQ_BYPASS KVM: x86: Explicitly zero-initialize on-stack CPUID unions KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses landlock: Move code to ease future backports landlock: Add the errata interface landlock: Add erratum for TCP fix landlock: Always allow signals between threads of the same process landlock: Prepare to add second errata selftests/landlock: Split signal_scoping_threads tests selftests/landlock: Add a new test for setuid() misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type net: mana: Switch to page pool for jumbo frames ntb: use 64-bit arithmetic for the MSI doorbell mask of/irq: Fix device node refcount leakage in API of_irq_parse_one() of/irq: Fix device node refcount leakage in API of_irq_parse_raw() of/irq: Fix device node refcount leakages in of_irq_count() of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() of/irq: Fix device node refcount leakages in of_irq_init() PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4 PCI: layerscape: Fix arg_count to syscon_regmap_lookup_by_phandle_args() PCI: pciehp: Avoid unnecessary device replacement check PCI: Fix reference leak in pci_alloc_child_bus() PCI: Fix reference leak in pci_register_host_bridge() PCI: Fix wrong length of devres array phy: freescale: imx8m-pcie: assert phy reset and perst in power off pinctrl: qcom: Clear latched interrupt status when changing IRQ type pinctrl: samsung: add support for eint_fltcon_offset ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio() s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues s390: Fix linker error when -no-pie option is unavailable sched_ext: create_dsq: Return -EEXIST on duplicate request selftests: mptcp: close fd_in before returning in main_loop selftests: mptcp: fix incorrect fd checks in main_loop spi: fsl-qspi: use devm function instead of driver remove spi: fsl-qspi: Fix double cleanup in probe error path thermal/drivers/mediatek/lvts: Disable monitor mode during suspend thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold wifi: ath11k: update channel list in worker when wait flag is set arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists iommufd: Make attach_handle generic than fault specific iommufd: Fail replace if device has not been attached x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() Bluetooth: hci_uart: Fix another race during initialization HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition Linux 6.14.3 UBUNTU: Upstream stable to v6.14.3 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2108854/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp