Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.14.3 upstream stable release
       from git://git.kernel.org/

ASoC: Intel: adl: add 2xrt1316 audio configuration
cgroup/cpuset: Fix incorrect isolated_cpus update in 
update_parent_effective_cpumask()
cgroup/cpuset: Fix error handling in remote_partition_disable()
cgroup/cpuset: Fix race between newly created partition and dying one
tracing: fprobe: Cleanup fprobe hash when module unloading
gpiolib: of: Fix the choice for Ingenic NAND quirk
selftests/futex: futex_waitv wouldblock test should fail
ublk: fix handling recovery & reissue in ublk_abort_queue()
drm/virtio: Fix flickering issue seen with imported dmabufs
drm/i915: Disable RPG during live selftest
x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI
net: ethtool: fix ethtool_ringparam_get_cfg() returns a hds_thresh value always 
as 0.
drm/xe/hw_engine: define sysfs_ops on all directories
drm/xe: Restore EIO errno return when GuC PC start fails
ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
tipc: fix memory leak in tipc_link_xmit
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
net: tls: explicitly disallow disconnect
octeontx2-pf: qos: fix VF root node parent queue index
tc: Ensure we have enough buffer space when sending filter netlink notifications
net: ethtool: Don't call .cleanup_data when prepare_data fails
drm/tests: modeset: Fix drm_display_mode memory leak
drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
drm/tests: cmdline: Fix drm_display_mode memory leak
drm/tests: modes: Fix drm_display_mode memory leak
drm/tests: probe-helper: Fix drm_display_mode memory leak
net: libwx: handle page_pool_dev_alloc_pages error
cifs: Fix support for WSL-style symlinks
ata: sata_sx4: Add error handling in pdc20621_i2c_read()
drm/i915/huc: Fix fence not released on early probe errors
s390/cpumf: Fix double free on error in cpumf_pmu_event_init()
nvmet-fcloop: swap list_add_tail arguments
net_sched: sch_sfq: use a temporary work area for validating configuration
net_sched: sch_sfq: move the limit validation
x86/cpu: Avoid running off the end of an AMD erratum table
smb: client: fix UAF in decryption with multichannel
net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
net: phy: allow MDIO bus PM ops to start/stop state machine for 
phylink-controlled PHY
ipv6: Align behavior across nexthops during path selection
net: ppp: Add bound checking for skb data on ppp_sync_txmung
nft_set_pipapo: fix incorrect avx2 match of 5th field octet
ethtool: cmis_cdb: Fix incorrect read / write length extension
iommu/exynos: Fix suspend/resume with IDENTITY domain
iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
net: libwx: Fix the wrong Rx descriptor field
perf/core: Simplify the perf_event_alloc() error path
perf: Fix hang while freeing sigtrap event
fs: consistently deref the files table with rcu_dereference_raw()
umount: Allow superblock owners to force umount
srcu: Force synchronization for srcu_get_delay()
pm: cpupower: bench: Prevent NULL dereference on malloc failure
irqchip/gic-v3: Add Rockchip 3568002 erratum workaround
UBUNTU: [Config] updateconfigs for ROCKCHIP_ERRATUM_3568002
x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC < 
14.2
x86/ia32: Leave NULL selector values 0~3 unchanged
x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when 
running in a virtual machine
perf: arm_pmu: Don't disable counter in armpmu_add()
perf/dwc_pcie: fix some unreleased resources
perf/dwc_pcie: fix duplicate pci_dev devices
PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
Flush console log from kernel_power_off()
cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend
arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
xen/mcelog: Add __nonstring annotations for unterminated strings
zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around 
compiler segfault
tracing: Disable branch profiling in noinstr code
platform/chrome: cros_ec_lpc: Match on Framework ACPI device
ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
HID: pidff: Convert infinite length from Linux API to PID standard
HID: pidff: Do not send effect envelope if it's empty
HID: pidff: Add MISSING_DELAY quirk and its detection
HID: pidff: Add MISSING_PBO quirk and its detection
HID: pidff: Add PERMISSIVE_CONTROL quirk
HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
HID: pidff: Add FIX_WHEEL_DIRECTION quirk
HID: Add hid-universal-pidff driver and supported device ids
UBUNTU: [Config] enable new hid-universal-pidff driver module
HID: pidff: Add PERIODIC_SINE_ONLY quirk
HID: pidff: Fix null pointer dereference in pidff_find_fields
ASoC: amd: ps: use macro for ACP6.3 pci revision id
ASoC: amd: amd_sdw: Add quirks for Dell SKU's
ALSA: hda: intel: Fix Optimus when GPU has no sound
ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
ASoC: fsl_audmix: register card device depends on 'dais' property
media: uvcvideo: Add quirk for Actions UVC05
HID: lenovo: Fix to ensure the data as __le32 instead of u32
media: s5p-mfc: Corrected NV12M/NV21M plane-sizes
mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
ALSA: usb-audio: Fix CME quirk for UF series keyboards
ASoC: amd: Add DMI quirk for ACP6X mic support
ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315
ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247
ASoC: amd: yc: update quirk data for new Lenovo model
platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig
wifi: ath9k: use unsigned long for activity check timestamp
wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues
wifi: ath11k: fix memory leak in ath11k_xxx_remove()
wifi: ath12k: fix memory leak in ath12k_pci_remove()
wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
wifi: ath12k: Avoid memory leak while enabling statistics
ata: libata-core: Add 'external' to the libata.force kernel parameter
scsi: mpi3mr: Avoid reply queue full condition
scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
net: page_pool: don't cast mp param to devmem
f2fs: don't retry IO for corrupted data scenario
wifi: mac80211: add strict mode disabling workarounds
wifi: mac80211: ensure sdata->work is canceled before initialized.
scsi: target: spc: Fix RSOC parameter data header size
net: usb: asix_devices: add FiberGecko DeviceID
page_pool: avoid infinite loop to schedule delayed worker
can: flexcan: Add quirk to handle separate interrupt lines for mailboxes
can: flexcan: add NXP S32G2/S32G3 SoC support
jfs: Fix uninit-value access of imap allocated in the diMount() function
fs/jfs: cast inactags to s64 to prevent potential overflow
fs/jfs: Prevent integer overflow in AG size calculation
jfs: Prevent copying of nlink with value 0 from disk inode
jfs: add sanity check for agwidth in dbMount
wifi: rtw88: Add support for Mercusys MA30N and D-Link DWA-T185 rev. A1
ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
net: sfp: add quirk for 2.5G OEM BX SFP
wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module
ahci: add PCI ID for Marvell 88SE9215 SATA Controller
ext4: protect ext4_release_dquot against freezing
Revert "f2fs: rebuild nat_bits during umount"
wifi: mac80211: fix userspace_selectors corruption
ext4: ignore xattrs past end
cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
scsi: st: Fix array overflow in st_setup()
ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI
btrfs: harden block_group::bg_list against list_del() races
wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
net: vlan: don't propagate flags on open
tracing: fix return value in __ftrace_event_enable_disable for 
TRACE_REG_UNREGISTER
Bluetooth: btusb: Add new VID/PID for WCN785x
Bluetooth: btintel_pcie: Add device id of Whale Peak
Bluetooth: btusb: Add 13 USB device IDs for Qualcomm WCN785x
Bluetooth: hci_uart: fix race during initialization
Bluetooth: btusb: Add 2 HWIDs for MT7922
Bluetooth: hci_qca: use the power sequencer for wcn6750
Bluetooth: qca: simplify WCN399x NVM loading
Bluetooth: qca: add WCN3950 support
drm: allow encoder mode_set even when connectors change for crtc
drm/virtio: Set missing bo->attached flag
drm/rockchip: Don't change hdmi reference clock rate
drm/xe/ptl: Update the PTL pci id table
drm/xe/pf: Don't send BEGIN_ID if VF has no context/doorbells
drm/xe/vf: Don't try to trigger a full GT reset if VF
drm/amd/display: Update Cursor request mode to the beginning prefetch always
drm/amd/display: Guard Possible Null Pointer Dereference
drm/amd/display: add workaround flag to link to force FFE preset
drm/amdgpu: Unlocked unmap only clear page table leaves
drm: panel-orientation-quirks: Add support for AYANEO 2S
drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
drm: panel-orientation-quirks: Add new quirk for GPD Win 2
drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
drm/debugfs: fix printk format for bridge index
drm/bridge: panel: forbid initializing a panel with unknown connector type
drm/amd/display: Update FIXED_VS Link Rate Toggle Workaround Usage
drm/amd/display: stop DML2 from removing pipes based on planes
drivers: base: devres: Allow to release group on device release
drm/amdkfd: clamp queue size to minimum
drm/amdkfd: Fix mode1 reset crash issue
drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
drm/amdkfd: debugfs hang_hws skip GPU with MES
drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds
drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
drm/rockchip: stop passing non struct drm_device to drm_err() and friends
PCI: Add Rockchip Vendor ID
drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
drm/amd/display: Prevent VStartup Overflow
PCI: Enable Configuration RRS SV early
drm/amdgpu: Fix the race condition for draining retry fault
PCI: Check BAR index for validity
PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
drm/amdgpu: grab an additional reference on the gang fence v2
fbdev: omapfb: Add 'plane' value check
tracing: probe-events: Log error for exceeding the number of arguments
tracing: probe-events: Add comments about entry data storing code
ktest: Fix Test Failures Due to Missing LOG_FILE Directories
tpm, tpm_tis: Workaround failed command reception on Infineon devices
tpm: End any active auth session before shutdown
pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
pwm: rcar: Improve register calculation
pwm: fsl-ftm: Handle clk_get_rate() returning 0
pwm: stm32: Search an appropriate duty_cycle if period cannot be modified
erofs: set error to bio if file-backed IO fails
bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
ext4: don't treat fhandle lookup of ea_inode as FS corruption
s390/pci: Fix s390_mmio_read/write syscall page fault handling
HID: pidff: Clamp PERIODIC effect period to device's logical range
HID: pidff: Stop all effects before enabling actuators
HID: pidff: Completely rework and fix pidff_reset function
HID: pidff: Simplify pidff_upload_effect function
HID: pidff: Define values used in pidff_find_special_fields
HID: pidff: Rescale time values to match field units
HID: pidff: Factor out code for setting gain
HID: pidff: Move all hid-pidff definitions to a dedicated header
HID: pidff: Simplify pidff_rescale_signed
HID: pidff: Use macros instead of hardcoded min/max values for shorts
HID: pidff: Factor out pool report fetch and remove excess declaration
HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX
HID: hid-universal-pidff: Add Asetek wheelbases support
HID: pidff: Comment and code style update
HID: pidff: Support device error response from PID_BLOCK_LOAD
HID: pidff: Remove redundant call to pidff_find_special_keys
HID: pidff: Rename two functions to align them with naming convention
HID: pidff: Clamp effect playback LOOP_COUNT value
HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff
HID: pidff: Fix 90 degrees direction name North -> East
HID: pidff: Fix set_device_control()
auxdisplay: hd44780: Fix an API misuse in hd44780.c
dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
media: mediatek: vcodec: Fix a resource leak related to the scp device in FW 
initialization
media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
media: uapi: rkisp1-config: Fix typo in extensible params example
media: mgb4: Fix CMT registers update logic
media: i2c: adv748x: Fix test pattern selection mask
media: mgb4: Fix switched CMT frequency range "magic values" sets
media: intel/ipu6: set the dev_parent of video device to pdev
media: venus: hfi: add a check to handle OOB in sfr region
media: venus: hfi: add check to handle incorrect queue size
media: vim2m: print device name after registering device
media: siano: Fix error handling in smsdvb_module_init()
media: rockchip: rga: fix rga offset lookup
xenfs/xensyms: respect hypervisor's "next" indication
KVM: arm64: PMU: Set raw values from user to PM{C,I}NTEN{SET,CLR}, 
PMOVS{SET,CLR}
arm64: cputype: Add MIDR_CORTEX_A76AE
arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
KVM: arm64: Tear down vGIC on failed vCPU creation
KVM: arm64: Set HCR_EL2.TID1 unconditionally
spi: cadence-qspi: Fix probe on AM62A LP SK
mtd: rawnand: brcmnand: fix PM resume warning
tpm, tpm_tis: Fix timeout handling when waiting for TPM status
accel/ivpu: Fix PM related deadlocks in MS IOCTLs
media: ov08x40: Properly turn sensor on/off when runtime-suspended
media: streamzap: prevent processing IR data on URB failure
media: hi556: Fix memory leak (on error) in hi556_check_hwcfg()
media: visl: Fix ERANGE error when setting enum controls
media: platform: stm32: Add check for clk_enable()
media: xilinx-tpg: fix double put in xtpg_parse_of()
media: imx219: Adjust PLL settings based on the number of MIPI lanes
media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
Revert "media: imx214: Fix the error handling in imx214_probe()"
media: i2c: ccs: Set the device's runtime PM status correctly in remove
media: i2c: ccs: Set the device's runtime PM status correctly in probe
media: i2c: ov7251: Set enable GPIO low in probe
media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
media: nuvoton: Fix reference handling of ece_node
media: nuvoton: Fix reference handling of ece_pdev
media: venus: hfi_parser: add check to avoid out of bound access
media: venus: hfi_parser: refactor hfi packet parsing logic
media: i2c: imx319: Rectify runtime PM handling probe and remove
media: i2c: imx219: Rectify runtime PM handling in probe and remove
media: i2c: imx214: Rectify probe error handling related to runtime PM
media: chips-media: wave5: Fix gray color on screen
media: chips-media: wave5: Avoid race condition in the interrupt handler
media: chips-media: wave5: Fix a hang after seeking
media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster
irqchip/renesas-rzv2h: Fix wrong variable usage in rzv2h_tint_set_type()
mptcp: sockopt: fix getting IPV6_V6ONLY
mptcp: sockopt: fix getting freebind & transparent
block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone
mtd: Add check for devm_kcalloc()
net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
mtd: Replace kcalloc() with devm_kcalloc()
clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
Revert "wifi: mt76: mt7925: Update mt7925_mcu_uni_[tx,rx]_ba for MLO"
wifi: mt76: Add check for devm_kstrdup()
wifi: mt76: mt792x: re-register CHANCTX_STA_CSA only for the mt7921 series
wifi: mac80211: fix integer overflow in hwmp_route_info_get()
wifi: mt76: mt7925: ensure wow pattern command align fw format
wifi: mt76: mt7925: fix country count limitation for CLC
wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present
wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO
wifi: mt76: mt7925: adjust rm BSS flow to prevent next connection failure
wifi: mt76: mt7925: integrate *mlo_sta_cmd and *sta_cmd
wifi: mt76: mt7925: update the power-saving flow
scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag
net: stmmac: Fix accessing freed irq affinity_hint
io_uring/net: fix accept multishot handling
io_uring/net: fix io_req_post_cqe abuse by send bundle
io_uring/kbuf: reject zero sized provided buffers
ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe()
ASoC: q6apm: add q6apm_get_hw_pointer helper
ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx
accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal()
accel/ivpu: Fix deadlock in ivpu_ms_cleanup()
arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch()
arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch()
bus: mhi: host: Fix race between unprepare and queue_buf
ext4: fix off-by-one error in do_split
f2fs: fix the missing write pointer correction
f2fs: fix to avoid atomicity corruption of atomic file
vdpa/mlx5: Fix oversized null mkey longer than 32bit
udf: Fix inode_getblk() return value
tpm: do not start chip while suspended
svcrdma: do not unregister device for listeners
soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
smb311 client: fix missing tcon check when mounting with linux/posix extensions
ima: limit the number of open-writers integrity violations
ima: limit the number of ToMToU integrity violations
igc: Fix XSK queue NAPI ID mapping
i3c: master: svc: Use readsb helper for reading MDB
i3c: Add NULL pointer check in i3c_master_queue_ibi()
jbd2: remove wrong sb->s_sequence check
kbuild: exclude .rodata.(cst|str)* when building ranges
kbuild: Add '-fno-builtin-wcslen'
leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
mfd: ene-kb3930: Fix a potential NULL pointer dereference
mailbox: tegra-hsp: Define dimensioning masks in SoC data
locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
mptcp: fix NULL pointer in can_accept_new_subflow
mptcp: only inc MPJoinAckHMacFailure for HMAC failures
mtd: inftlcore: Add error check for inftl_read_oob()
mtd: rawnand: Add status chack in r852_ready()
mtd: spinand: Fix build with gcc < 7.5
arm64: mops: Do not dereference src reg for a set operation
arm64: tegra: Remove the Orin NX/Nano suspend key
arm64: mm: Correct the update of max_pfn
arm64: dts: ti: k3-j784s4-j742s2-main-common: Correct the GICD size
arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix serdes_ln_ctrl reg-masks
arm64: dts: mediatek: mt8188: Assign apll1 clock as parent to avoid hang
arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
arm64: dts: exynos: gs101: disable pinctrl_gsacore node
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
btrfs: fix non-empty delayed iputs list on unmount due to compressed write 
workers
btrfs: tests: fix chunk map leak after failure to add it to the tree
btrfs: zoned: fix zone activation with missing devices
btrfs: zoned: fix zone finishing with missing devices
iommufd: Fix uninitialized rc in iommufd_access_rw()
iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent()
iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled
iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes
iommu/vt-d: Fix possible circular locking dependency
iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs
sparc/mm: disable preemption in lazy mmu mode
sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
mm/damon/ops: have damon_get_folio return folio even for tail pages
mm/damon: avoid applying DAMOS action to same entity multiple times
mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
mm: make page_mapped_in_vma() hugetlb walk aware
mm: fix lazy mmu docs and usage
mm/mremap: correctly handle partial mremap() of VMA starting at 0
mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
mm/userfaultfd: fix release hang over concurrent GUP
mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
mm/hugetlb: move hugetlb_sysctl_init() to the __init section
mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper
sctp: detect and prevent references to a freed transport in sendmsg
x86/xen: fix balloon target initialization for PVH dom0
uprobes: Avoid false-positive lockdep splat on CONFIG_PREEMPT_RT=y in the 
ri_timer() uprobe timer callback, use raw_write_seqcount_*()
tracing: fprobe: Fix to lock module while registering fprobe
tracing: fprobe events: Fix possible UAF on modules
tracing: Do not add length to print format in synthetic events
thermal/drivers/rockchip: Add missing rk3328 mapping entry
CIFS: Propagate min offload along with other parameters from primary to 
secondary channels.
cifs: avoid NULL pointer dereference in dbg call
cifs: fix integer overflow in match_server()
cifs: Ensure that all non-client-specific reparse points are processed by the 
server
clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
clk: qcom: gdsc: Release pm subdomains in reverse add order
clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
crypto: ccp - Fix check for the primary ASP device
crypto: ccp - Fix uAPI definitions of PSP errors
dlm: fix error if inactive rsb is not hashed
dlm: fix error if active rsb is not hashed
dm-ebs: fix prefetch-vs-suspend race
dm-integrity: set ti->error on memory allocation failure
dm-integrity: fix non-constant-time tag verification
dm-verity: fix prefetch-vs-suspend race
dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
firmware: cs_dsp: test_control_parse: null-terminate test strings
ftrace: Add cond_resched() to ftrace_graph_set_hash()
ftrace: Properly merge notrace hashes
fuse: {io-uring} Fix a possible req cancellation race
gpio: mpc8xxx: Fix wakeup source leaks on device unbind
gpio: tegra186: fix resource handling in ACPI probe path
gpio: zynq: Fix wakeup source leaks on device unbind
gve: handle overflow when reporting TX consumed descriptors
KVM: Allow building irqbypass.ko as as module when kvm.ko is a module
UBUNTU: [Config] updateconfigs for HAVE_KVM_IRQ_BYPASS
KVM: x86: Explicitly zero-initialize on-stack CPUID unions
KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
landlock: Move code to ease future backports
landlock: Add the errata interface
landlock: Add erratum for TCP fix
landlock: Always allow signals between threads of the same process
landlock: Prepare to add second errata
selftests/landlock: Split signal_scoping_threads tests
selftests/landlock: Add a new test for setuid()
misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq 
error
misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
net: mana: Switch to page pool for jumbo frames
ntb: use 64-bit arithmetic for the MSI doorbell mask
of/irq: Fix device node refcount leakage in API of_irq_parse_one()
of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
of/irq: Fix device node refcount leakages in of_irq_count()
of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
of/irq: Fix device node refcount leakages in of_irq_init()
PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4
PCI: layerscape: Fix arg_count to syscon_regmap_lookup_by_phandle_args()
PCI: pciehp: Avoid unnecessary device replacement check
PCI: Fix reference leak in pci_alloc_child_bus()
PCI: Fix reference leak in pci_register_host_bridge()
PCI: Fix wrong length of devres array
phy: freescale: imx8m-pcie: assert phy reset and perst in power off
pinctrl: qcom: Clear latched interrupt status when changing IRQ type
pinctrl: samsung: add support for eint_fltcon_offset
ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio()
s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
s390: Fix linker error when -no-pie option is unavailable
sched_ext: create_dsq: Return -EEXIST on duplicate request
selftests: mptcp: close fd_in before returning in main_loop
selftests: mptcp: fix incorrect fd checks in main_loop
spi: fsl-qspi: use devm function instead of driver remove
spi: fsl-qspi: Fix double cleanup in probe error path
thermal/drivers/mediatek/lvts: Disable monitor mode during suspend
thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold
wifi: ath11k: update channel list in worker when wait flag is set
arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
iommufd: Make attach_handle generic than fault specific
iommufd: Fail replace if device has not been attached
x86/e820: Fix handling of subpage regions when calculating nosave ranges in 
e820__register_nosave_regions()
Bluetooth: hci_uart: Fix another race during initialization
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due 
to Race Condition
Linux 6.14.3
UBUNTU: Upstream stable to v6.14.3

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Plucky)
     Importance: Medium
     Assignee: Manuel Diewald (diewald)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Plucky)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Plucky)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Plucky)
       Status: New => In Progress

** Changed in: linux (Ubuntu Plucky)
     Assignee: (unassigned) => Manuel Diewald (diewald)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         v6.14.3 upstream stable release
         from git://git.kernel.org/
  
-             
+ ASoC: Intel: adl: add 2xrt1316 audio configuration
+ cgroup/cpuset: Fix incorrect isolated_cpus update in 
update_parent_effective_cpumask()
+ cgroup/cpuset: Fix error handling in remote_partition_disable()
+ cgroup/cpuset: Fix race between newly created partition and dying one
+ tracing: fprobe: Cleanup fprobe hash when module unloading
+ gpiolib: of: Fix the choice for Ingenic NAND quirk
+ selftests/futex: futex_waitv wouldblock test should fail
+ ublk: fix handling recovery & reissue in ublk_abort_queue()
+ drm/virtio: Fix flickering issue seen with imported dmabufs
+ drm/i915: Disable RPG during live selftest
+ x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI
+ net: ethtool: fix ethtool_ringparam_get_cfg() returns a hds_thresh value 
always as 0.
+ drm/xe/hw_engine: define sysfs_ops on all directories
+ drm/xe: Restore EIO errno return when GuC PC start fails
+ ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
+ objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
+ tipc: fix memory leak in tipc_link_xmit
+ codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
+ net: tls: explicitly disallow disconnect
+ octeontx2-pf: qos: fix VF root node parent queue index
+ tc: Ensure we have enough buffer space when sending filter netlink 
notifications
+ net: ethtool: Don't call .cleanup_data when prepare_data fails
+ drm/tests: modeset: Fix drm_display_mode memory leak
+ drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
+ drm/tests: cmdline: Fix drm_display_mode memory leak
+ drm/tests: modes: Fix drm_display_mode memory leak
+ drm/tests: probe-helper: Fix drm_display_mode memory leak
+ net: libwx: handle page_pool_dev_alloc_pages error
+ cifs: Fix support for WSL-style symlinks
+ ata: sata_sx4: Add error handling in pdc20621_i2c_read()
+ drm/i915/huc: Fix fence not released on early probe errors
+ s390/cpumf: Fix double free on error in cpumf_pmu_event_init()
+ nvmet-fcloop: swap list_add_tail arguments
+ net_sched: sch_sfq: use a temporary work area for validating configuration
+ net_sched: sch_sfq: move the limit validation
+ x86/cpu: Avoid running off the end of an AMD erratum table
+ smb: client: fix UAF in decryption with multichannel
+ net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
+ net: phy: allow MDIO bus PM ops to start/stop state machine for 
phylink-controlled PHY
+ ipv6: Align behavior across nexthops during path selection
+ net: ppp: Add bound checking for skb data on ppp_sync_txmung
+ nft_set_pipapo: fix incorrect avx2 match of 5th field octet
+ ethtool: cmis_cdb: Fix incorrect read / write length extension
+ iommu/exynos: Fix suspend/resume with IDENTITY domain
+ iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
+ net: libwx: Fix the wrong Rx descriptor field
+ perf/core: Simplify the perf_event_alloc() error path
+ perf: Fix hang while freeing sigtrap event
+ fs: consistently deref the files table with rcu_dereference_raw()
+ umount: Allow superblock owners to force umount
+ srcu: Force synchronization for srcu_get_delay()
+ pm: cpupower: bench: Prevent NULL dereference on malloc failure
+ irqchip/gic-v3: Add Rockchip 3568002 erratum workaround
+ UBUNTU: [Config] updateconfigs for ROCKCHIP_ERRATUM_3568002
+ x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
+ x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC < 
14.2
+ x86/ia32: Leave NULL selector values 0~3 unchanged
+ x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when 
running in a virtual machine
+ perf: arm_pmu: Don't disable counter in armpmu_add()
+ perf/dwc_pcie: fix some unreleased resources
+ perf/dwc_pcie: fix duplicate pci_dev devices
+ PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
+ Flush console log from kernel_power_off()
+ cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend
+ arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
+ xen/mcelog: Add __nonstring annotations for unterminated strings
+ zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work 
around compiler segfault
+ tracing: Disable branch profiling in noinstr code
+ platform/chrome: cros_ec_lpc: Match on Framework ACPI device
+ ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
+ HID: pidff: Convert infinite length from Linux API to PID standard
+ HID: pidff: Do not send effect envelope if it's empty
+ HID: pidff: Add MISSING_DELAY quirk and its detection
+ HID: pidff: Add MISSING_PBO quirk and its detection
+ HID: pidff: Add PERMISSIVE_CONTROL quirk
+ HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
+ HID: pidff: Add FIX_WHEEL_DIRECTION quirk
+ HID: Add hid-universal-pidff driver and supported device ids
+ UBUNTU: [Config] enable new hid-universal-pidff driver module
+ HID: pidff: Add PERIODIC_SINE_ONLY quirk
+ HID: pidff: Fix null pointer dereference in pidff_find_fields
+ ASoC: amd: ps: use macro for ACP6.3 pci revision id
+ ASoC: amd: amd_sdw: Add quirks for Dell SKU's
+ ALSA: hda: intel: Fix Optimus when GPU has no sound
+ ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
+ ASoC: fsl_audmix: register card device depends on 'dais' property
+ media: uvcvideo: Add quirk for Actions UVC05
+ HID: lenovo: Fix to ensure the data as __le32 instead of u32
+ media: s5p-mfc: Corrected NV12M/NV21M plane-sizes
+ mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
+ ALSA: usb-audio: Fix CME quirk for UF series keyboards
+ ASoC: amd: Add DMI quirk for ACP6X mic support
+ ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315
+ ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247
+ ASoC: amd: yc: update quirk data for new Lenovo model
+ platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig
+ wifi: ath9k: use unsigned long for activity check timestamp
+ wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues
+ wifi: ath11k: fix memory leak in ath11k_xxx_remove()
+ wifi: ath12k: fix memory leak in ath12k_pci_remove()
+ wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
+ wifi: ath12k: Avoid memory leak while enabling statistics
+ ata: libata-core: Add 'external' to the libata.force kernel parameter
+ scsi: mpi3mr: Avoid reply queue full condition
+ scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
+ net: page_pool: don't cast mp param to devmem
+ f2fs: don't retry IO for corrupted data scenario
+ wifi: mac80211: add strict mode disabling workarounds
+ wifi: mac80211: ensure sdata->work is canceled before initialized.
+ scsi: target: spc: Fix RSOC parameter data header size
+ net: usb: asix_devices: add FiberGecko DeviceID
+ page_pool: avoid infinite loop to schedule delayed worker
+ can: flexcan: Add quirk to handle separate interrupt lines for mailboxes
+ can: flexcan: add NXP S32G2/S32G3 SoC support
+ jfs: Fix uninit-value access of imap allocated in the diMount() function
+ fs/jfs: cast inactags to s64 to prevent potential overflow
+ fs/jfs: Prevent integer overflow in AG size calculation
+ jfs: Prevent copying of nlink with value 0 from disk inode
+ jfs: add sanity check for agwidth in dbMount
+ wifi: rtw88: Add support for Mercusys MA30N and D-Link DWA-T185 rev. A1
+ ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
+ net: sfp: add quirk for 2.5G OEM BX SFP
+ wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
+ f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
+ net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module
+ ahci: add PCI ID for Marvell 88SE9215 SATA Controller
+ ext4: protect ext4_release_dquot against freezing
+ Revert "f2fs: rebuild nat_bits during umount"
+ wifi: mac80211: fix userspace_selectors corruption
+ ext4: ignore xattrs past end
+ cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
+ scsi: st: Fix array overflow in st_setup()
+ ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI
+ btrfs: harden block_group::bg_list against list_del() races
+ wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
+ net: vlan: don't propagate flags on open
+ tracing: fix return value in __ftrace_event_enable_disable for 
TRACE_REG_UNREGISTER
+ Bluetooth: btusb: Add new VID/PID for WCN785x
+ Bluetooth: btintel_pcie: Add device id of Whale Peak
+ Bluetooth: btusb: Add 13 USB device IDs for Qualcomm WCN785x
+ Bluetooth: hci_uart: fix race during initialization
+ Bluetooth: btusb: Add 2 HWIDs for MT7922
+ Bluetooth: hci_qca: use the power sequencer for wcn6750
+ Bluetooth: qca: simplify WCN399x NVM loading
+ Bluetooth: qca: add WCN3950 support
+ drm: allow encoder mode_set even when connectors change for crtc
+ drm/virtio: Set missing bo->attached flag
+ drm/rockchip: Don't change hdmi reference clock rate
+ drm/xe/ptl: Update the PTL pci id table
+ drm/xe/pf: Don't send BEGIN_ID if VF has no context/doorbells
+ drm/xe/vf: Don't try to trigger a full GT reset if VF
+ drm/amd/display: Update Cursor request mode to the beginning prefetch always
+ drm/amd/display: Guard Possible Null Pointer Dereference
+ drm/amd/display: add workaround flag to link to force FFE preset
+ drm/amdgpu: Unlocked unmap only clear page table leaves
+ drm: panel-orientation-quirks: Add support for AYANEO 2S
+ drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
+ drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
+ drm: panel-orientation-quirks: Add new quirk for GPD Win 2
+ drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
+ drm/debugfs: fix printk format for bridge index
+ drm/bridge: panel: forbid initializing a panel with unknown connector type
+ drm/amd/display: Update FIXED_VS Link Rate Toggle Workaround Usage
+ drm/amd/display: stop DML2 from removing pipes based on planes
+ drivers: base: devres: Allow to release group on device release
+ drm/amdkfd: clamp queue size to minimum
+ drm/amdkfd: Fix mode1 reset crash issue
+ drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
+ drm/amdkfd: debugfs hang_hws skip GPU with MES
+ drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds
+ drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
+ drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
+ drm/rockchip: stop passing non struct drm_device to drm_err() and friends
+ PCI: Add Rockchip Vendor ID
+ drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
+ drm/amd/display: Prevent VStartup Overflow
+ PCI: Enable Configuration RRS SV early
+ drm/amdgpu: Fix the race condition for draining retry fault
+ PCI: Check BAR index for validity
+ PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
+ drm/amdgpu: grab an additional reference on the gang fence v2
+ fbdev: omapfb: Add 'plane' value check
+ tracing: probe-events: Log error for exceeding the number of arguments
+ tracing: probe-events: Add comments about entry data storing code
+ ktest: Fix Test Failures Due to Missing LOG_FILE Directories
+ tpm, tpm_tis: Workaround failed command reception on Infineon devices
+ tpm: End any active auth session before shutdown
+ pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
+ pwm: rcar: Improve register calculation
+ pwm: fsl-ftm: Handle clk_get_rate() returning 0
+ pwm: stm32: Search an appropriate duty_cycle if period cannot be modified
+ erofs: set error to bio if file-backed IO fails
+ bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
+ ext4: don't treat fhandle lookup of ea_inode as FS corruption
+ s390/pci: Fix s390_mmio_read/write syscall page fault handling
+ HID: pidff: Clamp PERIODIC effect period to device's logical range
+ HID: pidff: Stop all effects before enabling actuators
+ HID: pidff: Completely rework and fix pidff_reset function
+ HID: pidff: Simplify pidff_upload_effect function
+ HID: pidff: Define values used in pidff_find_special_fields
+ HID: pidff: Rescale time values to match field units
+ HID: pidff: Factor out code for setting gain
+ HID: pidff: Move all hid-pidff definitions to a dedicated header
+ HID: pidff: Simplify pidff_rescale_signed
+ HID: pidff: Use macros instead of hardcoded min/max values for shorts
+ HID: pidff: Factor out pool report fetch and remove excess declaration
+ HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX
+ HID: hid-universal-pidff: Add Asetek wheelbases support
+ HID: pidff: Comment and code style update
+ HID: pidff: Support device error response from PID_BLOCK_LOAD
+ HID: pidff: Remove redundant call to pidff_find_special_keys
+ HID: pidff: Rename two functions to align them with naming convention
+ HID: pidff: Clamp effect playback LOOP_COUNT value
+ HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff
+ HID: pidff: Fix 90 degrees direction name North -> East
+ HID: pidff: Fix set_device_control()
+ auxdisplay: hd44780: Fix an API misuse in hd44780.c
+ dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
+ media: mediatek: vcodec: Fix a resource leak related to the scp device in FW 
initialization
+ media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
+ media: uapi: rkisp1-config: Fix typo in extensible params example
+ media: mgb4: Fix CMT registers update logic
+ media: i2c: adv748x: Fix test pattern selection mask
+ media: mgb4: Fix switched CMT frequency range "magic values" sets
+ media: intel/ipu6: set the dev_parent of video device to pdev
+ media: venus: hfi: add a check to handle OOB in sfr region
+ media: venus: hfi: add check to handle incorrect queue size
+ media: vim2m: print device name after registering device
+ media: siano: Fix error handling in smsdvb_module_init()
+ media: rockchip: rga: fix rga offset lookup
+ xenfs/xensyms: respect hypervisor's "next" indication
+ KVM: arm64: PMU: Set raw values from user to PM{C,I}NTEN{SET,CLR}, 
PMOVS{SET,CLR}
+ arm64: cputype: Add MIDR_CORTEX_A76AE
+ arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
+ arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
+ arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
+ KVM: arm64: Tear down vGIC on failed vCPU creation
+ KVM: arm64: Set HCR_EL2.TID1 unconditionally
+ spi: cadence-qspi: Fix probe on AM62A LP SK
+ mtd: rawnand: brcmnand: fix PM resume warning
+ tpm, tpm_tis: Fix timeout handling when waiting for TPM status
+ accel/ivpu: Fix PM related deadlocks in MS IOCTLs
+ media: ov08x40: Properly turn sensor on/off when runtime-suspended
+ media: streamzap: prevent processing IR data on URB failure
+ media: hi556: Fix memory leak (on error) in hi556_check_hwcfg()
+ media: visl: Fix ERANGE error when setting enum controls
+ media: platform: stm32: Add check for clk_enable()
+ media: xilinx-tpg: fix double put in xtpg_parse_of()
+ media: imx219: Adjust PLL settings based on the number of MIPI lanes
+ media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
+ Revert "media: imx214: Fix the error handling in imx214_probe()"
+ media: i2c: ccs: Set the device's runtime PM status correctly in remove
+ media: i2c: ccs: Set the device's runtime PM status correctly in probe
+ media: i2c: ov7251: Set enable GPIO low in probe
+ media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
+ media: nuvoton: Fix reference handling of ece_node
+ media: nuvoton: Fix reference handling of ece_pdev
+ media: venus: hfi_parser: add check to avoid out of bound access
+ media: venus: hfi_parser: refactor hfi packet parsing logic
+ media: i2c: imx319: Rectify runtime PM handling probe and remove
+ media: i2c: imx219: Rectify runtime PM handling in probe and remove
+ media: i2c: imx214: Rectify probe error handling related to runtime PM
+ media: chips-media: wave5: Fix gray color on screen
+ media: chips-media: wave5: Avoid race condition in the interrupt handler
+ media: chips-media: wave5: Fix a hang after seeking
+ media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster
+ irqchip/renesas-rzv2h: Fix wrong variable usage in rzv2h_tint_set_type()
+ mptcp: sockopt: fix getting IPV6_V6ONLY
+ mptcp: sockopt: fix getting freebind & transparent
+ block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone
+ mtd: Add check for devm_kcalloc()
+ net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
+ net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
+ mtd: Replace kcalloc() with devm_kcalloc()
+ clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
+ Revert "wifi: mt76: mt7925: Update mt7925_mcu_uni_[tx,rx]_ba for MLO"
+ wifi: mt76: Add check for devm_kstrdup()
+ wifi: mt76: mt792x: re-register CHANCTX_STA_CSA only for the mt7921 series
+ wifi: mac80211: fix integer overflow in hwmp_route_info_get()
+ wifi: mt76: mt7925: ensure wow pattern command align fw format
+ wifi: mt76: mt7925: fix country count limitation for CLC
+ wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present
+ wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO
+ wifi: mt76: mt7925: adjust rm BSS flow to prevent next connection failure
+ wifi: mt76: mt7925: integrate *mlo_sta_cmd and *sta_cmd
+ wifi: mt76: mt7925: update the power-saving flow
+ scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag
+ net: stmmac: Fix accessing freed irq affinity_hint
+ io_uring/net: fix accept multishot handling
+ io_uring/net: fix io_req_post_cqe abuse by send bundle
+ io_uring/kbuf: reject zero sized provided buffers
+ ASoC: codecs: wcd937x: fix a potential memory leak in 
wcd937x_soc_codec_probe()
+ ASoC: q6apm: add q6apm_get_hw_pointer helper
+ ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
+ ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
+ ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
+ ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
+ ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
+ ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx
+ accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal()
+ accel/ivpu: Fix deadlock in ivpu_ms_cleanup()
+ arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch()
+ arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch()
+ bus: mhi: host: Fix race between unprepare and queue_buf
+ ext4: fix off-by-one error in do_split
+ f2fs: fix the missing write pointer correction
+ f2fs: fix to avoid atomicity corruption of atomic file
+ vdpa/mlx5: Fix oversized null mkey longer than 32bit
+ udf: Fix inode_getblk() return value
+ tpm: do not start chip while suspended
+ svcrdma: do not unregister device for listeners
+ soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
+ smb311 client: fix missing tcon check when mounting with linux/posix 
extensions
+ ima: limit the number of open-writers integrity violations
+ ima: limit the number of ToMToU integrity violations
+ igc: Fix XSK queue NAPI ID mapping
+ i3c: master: svc: Use readsb helper for reading MDB
+ i3c: Add NULL pointer check in i3c_master_queue_ibi()
+ jbd2: remove wrong sb->s_sequence check
+ kbuild: exclude .rodata.(cst|str)* when building ranges
+ kbuild: Add '-fno-builtin-wcslen'
+ leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
+ leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
+ mfd: ene-kb3930: Fix a potential NULL pointer dereference
+ mailbox: tegra-hsp: Define dimensioning masks in SoC data
+ locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
+ lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
+ mptcp: fix NULL pointer in can_accept_new_subflow
+ mptcp: only inc MPJoinAckHMacFailure for HMAC failures
+ mtd: inftlcore: Add error check for inftl_read_oob()
+ mtd: rawnand: Add status chack in r852_ready()
+ mtd: spinand: Fix build with gcc < 7.5
+ arm64: mops: Do not dereference src reg for a set operation
+ arm64: tegra: Remove the Orin NX/Nano suspend key
+ arm64: mm: Correct the update of max_pfn
+ arm64: dts: ti: k3-j784s4-j742s2-main-common: Correct the GICD size
+ arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix serdes_ln_ctrl reg-masks
+ arm64: dts: mediatek: mt8188: Assign apll1 clock as parent to avoid hang
+ arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
+ arm64: dts: exynos: gs101: disable pinctrl_gsacore node
+ backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
+ btrfs: fix non-empty delayed iputs list on unmount due to compressed write 
workers
+ btrfs: tests: fix chunk map leak after failure to add it to the tree
+ btrfs: zoned: fix zone activation with missing devices
+ btrfs: zoned: fix zone finishing with missing devices
+ iommufd: Fix uninitialized rc in iommufd_access_rw()
+ iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent()
+ iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled
+ iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes
+ iommu/vt-d: Fix possible circular locking dependency
+ iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs
+ sparc/mm: disable preemption in lazy mmu mode
+ sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
+ net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
+ mm/damon/ops: have damon_get_folio return folio even for tail pages
+ mm/damon: avoid applying DAMOS action to same entity multiple times
+ mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
+ mm: make page_mapped_in_vma() hugetlb walk aware
+ mm: fix lazy mmu docs and usage
+ mm/mremap: correctly handle partial mremap() of VMA starting at 0
+ mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
+ mm/userfaultfd: fix release hang over concurrent GUP
+ mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
+ mm/hugetlb: move hugetlb_sysctl_init() to the __init section
+ mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper
+ sctp: detect and prevent references to a freed transport in sendmsg
+ x86/xen: fix balloon target initialization for PVH dom0
+ uprobes: Avoid false-positive lockdep splat on CONFIG_PREEMPT_RT=y in the 
ri_timer() uprobe timer callback, use raw_write_seqcount_*()
+ tracing: fprobe: Fix to lock module while registering fprobe
+ tracing: fprobe events: Fix possible UAF on modules
+ tracing: Do not add length to print format in synthetic events
+ thermal/drivers/rockchip: Add missing rk3328 mapping entry
+ CIFS: Propagate min offload along with other parameters from primary to 
secondary channels.
+ cifs: avoid NULL pointer dereference in dbg call
+ cifs: fix integer overflow in match_server()
+ cifs: Ensure that all non-client-specific reparse points are processed by the 
server
+ clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
+ clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
+ clk: qcom: gdsc: Release pm subdomains in reverse add order
+ clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
+ clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
+ crypto: ccp - Fix check for the primary ASP device
+ crypto: ccp - Fix uAPI definitions of PSP errors
+ dlm: fix error if inactive rsb is not hashed
+ dlm: fix error if active rsb is not hashed
+ dm-ebs: fix prefetch-vs-suspend race
+ dm-integrity: set ti->error on memory allocation failure
+ dm-integrity: fix non-constant-time tag verification
+ dm-verity: fix prefetch-vs-suspend race
+ dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
+ dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
+ firmware: cs_dsp: test_control_parse: null-terminate test strings
+ ftrace: Add cond_resched() to ftrace_graph_set_hash()
+ ftrace: Properly merge notrace hashes
+ fuse: {io-uring} Fix a possible req cancellation race
+ gpio: mpc8xxx: Fix wakeup source leaks on device unbind
+ gpio: tegra186: fix resource handling in ACPI probe path
+ gpio: zynq: Fix wakeup source leaks on device unbind
+ gve: handle overflow when reporting TX consumed descriptors
+ KVM: Allow building irqbypass.ko as as module when kvm.ko is a module
+ UBUNTU: [Config] updateconfigs for HAVE_KVM_IRQ_BYPASS
+ KVM: x86: Explicitly zero-initialize on-stack CPUID unions
+ KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
+ landlock: Move code to ease future backports
+ landlock: Add the errata interface
+ landlock: Add erratum for TCP fix
+ landlock: Always allow signals between threads of the same process
+ landlock: Prepare to add second errata
+ selftests/landlock: Split signal_scoping_threads tests
+ selftests/landlock: Add a new test for setuid()
+ misc: pci_endpoint_test: Avoid issue of interrupts remaining after 
request_irq error
+ misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
+ misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
+ net: mana: Switch to page pool for jumbo frames
+ ntb: use 64-bit arithmetic for the MSI doorbell mask
+ of/irq: Fix device node refcount leakage in API of_irq_parse_one()
+ of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
+ of/irq: Fix device node refcount leakages in of_irq_count()
+ of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
+ of/irq: Fix device node refcount leakages in of_irq_init()
+ PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
+ PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4
+ PCI: layerscape: Fix arg_count to syscon_regmap_lookup_by_phandle_args()
+ PCI: pciehp: Avoid unnecessary device replacement check
+ PCI: Fix reference leak in pci_alloc_child_bus()
+ PCI: Fix reference leak in pci_register_host_bridge()
+ PCI: Fix wrong length of devres array
+ phy: freescale: imx8m-pcie: assert phy reset and perst in power off
+ pinctrl: qcom: Clear latched interrupt status when changing IRQ type
+ pinctrl: samsung: add support for eint_fltcon_offset
+ ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio()
+ s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
+ s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
+ s390: Fix linker error when -no-pie option is unavailable
+ sched_ext: create_dsq: Return -EEXIST on duplicate request
+ selftests: mptcp: close fd_in before returning in main_loop
+ selftests: mptcp: fix incorrect fd checks in main_loop
+ spi: fsl-qspi: use devm function instead of driver remove
+ spi: fsl-qspi: Fix double cleanup in probe error path
+ thermal/drivers/mediatek/lvts: Disable monitor mode during suspend
+ thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold
+ wifi: ath11k: update channel list in worker when wait flag is set
+ arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
+ iommufd: Make attach_handle generic than fault specific
+ iommufd: Fail replace if device has not been attached
+ x86/e820: Fix handling of subpage regions when calculating nosave ranges in 
e820__register_nosave_regions()
+ Bluetooth: hci_uart: Fix another race during initialization
+ HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver 
Due to Race Condition
  Linux 6.14.3
- HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver 
Due to Race Condition
- Bluetooth: hci_uart: Fix another race during initialization
- x86/e820: Fix handling of subpage regions when calculating nosave ranges in 
e820__register_nosave_regions()
- iommufd: Fail replace if device has not been attached
- iommufd: Make attach_handle generic than fault specific
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
- wifi: ath11k: update channel list in worker when wait flag is set
- thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold
- thermal/drivers/mediatek/lvts: Disable monitor mode during suspend
- spi: fsl-qspi: Fix double cleanup in probe error path
- spi: fsl-qspi: use devm function instead of driver remove
- selftests: mptcp: fix incorrect fd checks in main_loop
- selftests: mptcp: close fd_in before returning in main_loop
- sched_ext: create_dsq: Return -EEXIST on duplicate request
- s390: Fix linker error when -no-pie option is unavailable
- s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
- ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio()
- pinctrl: samsung: add support for eint_fltcon_offset
- pinctrl: qcom: Clear latched interrupt status when changing IRQ type
- phy: freescale: imx8m-pcie: assert phy reset and perst in power off
- PCI: Fix wrong length of devres array
- PCI: Fix reference leak in pci_register_host_bridge()
- PCI: Fix reference leak in pci_alloc_child_bus()
- PCI: pciehp: Avoid unnecessary device replacement check
- PCI: layerscape: Fix arg_count to syscon_regmap_lookup_by_phandle_args()
- PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4
- PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
- of/irq: Fix device node refcount leakages in of_irq_init()
- of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
- of/irq: Fix device node refcount leakages in of_irq_count()
- of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
- of/irq: Fix device node refcount leakage in API of_irq_parse_one()
- ntb: use 64-bit arithmetic for the MSI doorbell mask
- net: mana: Switch to page pool for jumbo frames
- misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
- misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
- misc: pci_endpoint_test: Avoid issue of interrupts remaining after 
request_irq error
- selftests/landlock: Add a new test for setuid()
- selftests/landlock: Split signal_scoping_threads tests
- landlock: Prepare to add second errata
- landlock: Always allow signals between threads of the same process
- landlock: Add erratum for TCP fix
- landlock: Add the errata interface
- landlock: Move code to ease future backports
- KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
- KVM: x86: Explicitly zero-initialize on-stack CPUID unions
- KVM: PPC: Enable CAP_SPAPR_TCE_VFIO on pSeries KVM guests
- KVM: Allow building irqbypass.ko as as module when kvm.ko is a module
- gve: handle overflow when reporting TX consumed descriptors
- gpio: zynq: Fix wakeup source leaks on device unbind
- gpio: tegra186: fix resource handling in ACPI probe path
- gpio: mpc8xxx: Fix wakeup source leaks on device unbind
- fuse: {io-uring} Fix a possible req cancellation race
- ftrace: Properly merge notrace hashes
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
- firmware: cs_dsp: test_control_parse: null-terminate test strings
- dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
- dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
- dm-verity: fix prefetch-vs-suspend race
- dm-integrity: fix non-constant-time tag verification
- dm-integrity: set ti->error on memory allocation failure
- dm-ebs: fix prefetch-vs-suspend race
- dlm: fix error if active rsb is not hashed
- dlm: fix error if inactive rsb is not hashed
- crypto: ccp - Fix uAPI definitions of PSP errors
- crypto: ccp - Fix check for the primary ASP device
- clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
- clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
- clk: qcom: gdsc: Release pm subdomains in reverse add order
- clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
- clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
- cifs: Ensure that all non-client-specific reparse points are processed by the 
server
- cifs: fix integer overflow in match_server()
- cifs: avoid NULL pointer dereference in dbg call
- CIFS: Propagate min offload along with other parameters from primary to 
secondary channels.
- thermal/drivers/rockchip: Add missing rk3328 mapping entry
- tracing: Do not add length to print format in synthetic events
- tracing: fprobe events: Fix possible UAF on modules
- tracing: fprobe: Fix to lock module while registering fprobe
- uprobes: Avoid false-positive lockdep splat on CONFIG_PREEMPT_RT=y in the 
ri_timer() uprobe timer callback, use raw_write_seqcount_*()
- x86/xen: fix balloon target initialization for PVH dom0
- sctp: detect and prevent references to a freed transport in sendmsg
- mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper
- mm/hugetlb: move hugetlb_sysctl_init() to the __init section
- mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
- mm/userfaultfd: fix release hang over concurrent GUP
- mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
- mm/mremap: correctly handle partial mremap() of VMA starting at 0
- mm: fix lazy mmu docs and usage
- mm: make page_mapped_in_vma() hugetlb walk aware
- mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
- mm/damon: avoid applying DAMOS action to same entity multiple times
- mm/damon/ops: have damon_get_folio return folio even for tail pages
- net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
- sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
- sparc/mm: disable preemption in lazy mmu mode
- iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs
- iommu/vt-d: Fix possible circular locking dependency
- iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes
- iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled
- iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent()
- iommufd: Fix uninitialized rc in iommufd_access_rw()
- btrfs: zoned: fix zone finishing with missing devices
- btrfs: zoned: fix zone activation with missing devices
- btrfs: tests: fix chunk map leak after failure to add it to the tree
- btrfs: fix non-empty delayed iputs list on unmount due to compressed write 
workers
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
- arm64: dts: exynos: gs101: disable pinctrl_gsacore node
- arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
- arm64: dts: mediatek: mt8188: Assign apll1 clock as parent to avoid hang
- arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix serdes_ln_ctrl reg-masks
- arm64: dts: ti: k3-j784s4-j742s2-main-common: Correct the GICD size
- arm64: mm: Correct the update of max_pfn
- arm64: tegra: Remove the Orin NX/Nano suspend key
- arm64: mops: Do not dereference src reg for a set operation
- mtd: spinand: Fix build with gcc < 7.5
- mtd: rawnand: Add status chack in r852_ready()
- mtd: inftlcore: Add error check for inftl_read_oob()
- mptcp: only inc MPJoinAckHMacFailure for HMAC failures
- mptcp: fix NULL pointer in can_accept_new_subflow
- lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
- locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
- mailbox: tegra-hsp: Define dimensioning masks in SoC data
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
- leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
- leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
- kbuild: Add '-fno-builtin-wcslen'
- kbuild: exclude .rodata.(cst|str)* when building ranges
- jbd2: remove wrong sb->s_sequence check
- i3c: Add NULL pointer check in i3c_master_queue_ibi()
- i3c: master: svc: Use readsb helper for reading MDB
- igc: Fix XSK queue NAPI ID mapping
- ima: limit the number of ToMToU integrity violations
- ima: limit the number of open-writers integrity violations
- smb311 client: fix missing tcon check when mounting with linux/posix 
extensions
- soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
- svcrdma: do not unregister device for listeners
- tpm: do not start chip while suspended
- udf: Fix inode_getblk() return value
- vdpa/mlx5: Fix oversized null mkey longer than 32bit
- f2fs: fix to avoid atomicity corruption of atomic file
- f2fs: fix the missing write pointer correction
- ext4: fix off-by-one error in do_split
- bus: mhi: host: Fix race between unprepare and queue_buf
- arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch()
- arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch()
- accel/ivpu: Fix deadlock in ivpu_ms_cleanup()
- accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal()
- ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx
- ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
- ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
- ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
- ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
- ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
- ASoC: q6apm: add q6apm_get_hw_pointer helper
- ASoC: codecs: wcd937x: fix a potential memory leak in 
wcd937x_soc_codec_probe()
- io_uring/kbuf: reject zero sized provided buffers
- io_uring/net: fix io_req_post_cqe abuse by send bundle
- io_uring/net: fix accept multishot handling
- net: stmmac: Fix accessing freed irq affinity_hint
- scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag
- wifi: mt76: mt7925: update the power-saving flow
- wifi: mt76: mt7925: integrate *mlo_sta_cmd and *sta_cmd
- wifi: mt76: mt7925: adjust rm BSS flow to prevent next connection failure
- wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO
- wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present
- wifi: mt76: mt7925: fix country count limitation for CLC
- wifi: mt76: mt7925: ensure wow pattern command align fw format
- wifi: mac80211: fix integer overflow in hwmp_route_info_get()
- wifi: mt76: mt792x: re-register CHANCTX_STA_CSA only for the mt7921 series
- wifi: mt76: Add check for devm_kstrdup()
- Revert "wifi: mt76: mt7925: Update mt7925_mcu_uni_[tx,rx]_ba for MLO"
- clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
- mtd: Replace kcalloc() with devm_kcalloc()
- net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
- net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
- mtd: Add check for devm_kcalloc()
- block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone
- mptcp: sockopt: fix getting freebind & transparent
- mptcp: sockopt: fix getting IPV6_V6ONLY
- gve: unlink old napi only if page pool exists
- irqchip/renesas-rzv2h: Fix wrong variable usage in rzv2h_tint_set_type()
- media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster
- media: chips-media: wave5: Fix a hang after seeking
- media: chips-media: wave5: Avoid race condition in the interrupt handler
- media: chips-media: wave5: Fix gray color on screen
- media: i2c: imx214: Rectify probe error handling related to runtime PM
- media: i2c: imx219: Rectify runtime PM handling in probe and remove
- media: i2c: imx319: Rectify runtime PM handling probe and remove
- media: venus: hfi_parser: refactor hfi packet parsing logic
- media: venus: hfi_parser: add check to avoid out of bound access
- media: nuvoton: Fix reference handling of ece_pdev
- media: nuvoton: Fix reference handling of ece_node
- media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
- media: i2c: ov7251: Set enable GPIO low in probe
- media: i2c: ccs: Set the device's runtime PM status correctly in probe
- media: i2c: ccs: Set the device's runtime PM status correctly in remove
- Revert "media: imx214: Fix the error handling in imx214_probe()"
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
- media: imx219: Adjust PLL settings based on the number of MIPI lanes
- media: xilinx-tpg: fix double put in xtpg_parse_of()
- media: platform: stm32: Add check for clk_enable()
- media: visl: Fix ERANGE error when setting enum controls
- media: hi556: Fix memory leak (on error) in hi556_check_hwcfg()
- media: streamzap: prevent processing IR data on URB failure
- media: ov08x40: Properly turn sensor on/off when runtime-suspended
- accel/ivpu: Fix PM related deadlocks in MS IOCTLs
- tpm, tpm_tis: Fix timeout handling when waiting for TPM status
- mtd: rawnand: brcmnand: fix PM resume warning
- spi: cadence-qspi: Fix probe on AM62A LP SK
- KVM: arm64: Set HCR_EL2.TID1 unconditionally
- KVM: arm64: Tear down vGIC on failed vCPU creation
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
- arm64: cputype: Add MIDR_CORTEX_A76AE
- KVM: arm64: PMU: Set raw values from user to PM{C,I}NTEN{SET,CLR}, 
PMOVS{SET,CLR}
- xenfs/xensyms: respect hypervisor's "next" indication
- media: rockchip: rga: fix rga offset lookup
- media: siano: Fix error handling in smsdvb_module_init()
- media: vim2m: print device name after registering device
- media: venus: hfi: add check to handle incorrect queue size
- media: venus: hfi: add a check to handle OOB in sfr region
- media: intel/ipu6: set the dev_parent of video device to pdev
- media: mgb4: Fix switched CMT frequency range "magic values" sets
- media: i2c: adv748x: Fix test pattern selection mask
- media: mgb4: Fix CMT registers update logic
- media: uapi: rkisp1-config: Fix typo in extensible params example
- media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
- media: mediatek: vcodec: Fix a resource leak related to the scp device in FW 
initialization
- dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
- auxdisplay: hd44780: Fix an API misuse in hd44780.c
- HID: pidff: Fix set_device_control()
- HID: pidff: Fix 90 degrees direction name North -> East
- HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff
- HID: pidff: Clamp effect playback LOOP_COUNT value
- HID: pidff: Rename two functions to align them with naming convention
- HID: pidff: Remove redundant call to pidff_find_special_keys
- HID: pidff: Support device error response from PID_BLOCK_LOAD
- HID: pidff: Comment and code style update
- HID: hid-universal-pidff: Add Asetek wheelbases support
- HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX
- HID: pidff: Factor out pool report fetch and remove excess declaration
- HID: pidff: Use macros instead of hardcoded min/max values for shorts
- HID: pidff: Simplify pidff_rescale_signed
- HID: pidff: Move all hid-pidff definitions to a dedicated header
- HID: pidff: Factor out code for setting gain
- HID: pidff: Rescale time values to match field units
- HID: pidff: Define values used in pidff_find_special_fields
- HID: pidff: Simplify pidff_upload_effect function
- HID: pidff: Completely rework and fix pidff_reset function
- HID: pidff: Stop all effects before enabling actuators
- HID: pidff: Clamp PERIODIC effect period to device's logical range
- s390/pci: Fix s390_mmio_read/write syscall page fault handling
- ext4: don't treat fhandle lookup of ea_inode as FS corruption
- bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
- erofs: set error to bio if file-backed IO fails
- pwm: stm32: Search an appropriate duty_cycle if period cannot be modified
- pwm: fsl-ftm: Handle clk_get_rate() returning 0
- pwm: rcar: Improve register calculation
- pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
- tpm: End any active auth session before shutdown
- tpm, tpm_tis: Workaround failed command reception on Infineon devices
- ktest: Fix Test Failures Due to Missing LOG_FILE Directories
- tracing: probe-events: Add comments about entry data storing code
- tracing: probe-events: Log error for exceeding the number of arguments
- fbdev: omapfb: Add 'plane' value check
- drm/amdgpu: grab an additional reference on the gang fence v2
- PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
- PCI: Check BAR index for validity
- drm/amdgpu: Fix the race condition for draining retry fault
- PCI: Enable Configuration RRS SV early
- drm/amd/display: Prevent VStartup Overflow
- drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
- PCI: Add Rockchip Vendor ID
- drm/rockchip: stop passing non struct drm_device to drm_err() and friends
- drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
- drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
- drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds
- drm/amdkfd: debugfs hang_hws skip GPU with MES
- drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
- drm/amdkfd: Fix mode1 reset crash issue
- drm/amdkfd: clamp queue size to minimum
- drivers: base: devres: Allow to release group on device release
- drm/amd/display: stop DML2 from removing pipes based on planes
- drm/amd/display: Update FIXED_VS Link Rate Toggle Workaround Usage
- drm/bridge: panel: forbid initializing a panel with unknown connector type
- drm/debugfs: fix printk format for bridge index
- drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
- drm: panel-orientation-quirks: Add new quirk for GPD Win 2
- drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
- drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
- drm: panel-orientation-quirks: Add support for AYANEO 2S
- drm/amdgpu: Unlocked unmap only clear page table leaves
- drm/amd/display: add workaround flag to link to force FFE preset
- drm/amd/display: Guard Possible Null Pointer Dereference
- drm/amd/display: Update Cursor request mode to the beginning prefetch always
- drm/xe/vf: Don't try to trigger a full GT reset if VF
- drm/xe/pf: Don't send BEGIN_ID if VF has no context/doorbells
- drm/xe/ptl: Update the PTL pci id table
- drm/xe/bmg: Add new PCI IDs
- drm/rockchip: Don't change hdmi reference clock rate
- drm/virtio: Set missing bo->attached flag
- drm: allow encoder mode_set even when connectors change for crtc
- Bluetooth: qca: add WCN3950 support
- Bluetooth: qca: simplify WCN399x NVM loading
- Bluetooth: hci_qca: use the power sequencer for wcn6750
- Bluetooth: btusb: Add 2 HWIDs for MT7922
- Bluetooth: hci_uart: fix race during initialization
- Bluetooth: btusb: Add 13 USB device IDs for Qualcomm WCN785x
- Bluetooth: btintel_pcie: Add device id of Whale Peak
- Bluetooth: btusb: Add new VID/PID for WCN785x
- tracing: fix return value in __ftrace_event_enable_disable for 
TRACE_REG_UNREGISTER
- net: vlan: don't propagate flags on open
- wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
- btrfs: harden block_group::bg_list against list_del() races
- ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI
- scsi: st: Fix array overflow in st_setup()
- cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
- ext4: ignore xattrs past end
- wifi: mac80211: fix userspace_selectors corruption
- Revert "f2fs: rebuild nat_bits during umount"
- ext4: protect ext4_release_dquot against freezing
- ahci: add PCI ID for Marvell 88SE9215 SATA Controller
- net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module
- f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
- wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
- net: sfp: add quirk for 2.5G OEM BX SFP
- ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
- wifi: rtw88: Add support for Mercusys MA30N and D-Link DWA-T185 rev. A1
- jfs: add sanity check for agwidth in dbMount
- jfs: Prevent copying of nlink with value 0 from disk inode
- fs/jfs: Prevent integer overflow in AG size calculation
- fs/jfs: cast inactags to s64 to prevent potential overflow
- jfs: Fix uninit-value access of imap allocated in the diMount() function
- can: flexcan: add NXP S32G2/S32G3 SoC support
- can: flexcan: Add quirk to handle separate interrupt lines for mailboxes
- page_pool: avoid infinite loop to schedule delayed worker
- net: usb: asix_devices: add FiberGecko DeviceID
- scsi: target: spc: Fix RSOC parameter data header size
- wifi: mac80211: ensure sdata->work is canceled before initialized.
- wifi: mac80211: add strict mode disabling workarounds
- f2fs: don't retry IO for corrupted data scenario
- net: page_pool: don't cast mp param to devmem
- scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
- scsi: mpi3mr: Avoid reply queue full condition
- ata: libata-core: Add 'external' to the libata.force kernel parameter
- wifi: ath12k: Avoid memory leak while enabling statistics
- wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
- wifi: ath12k: fix memory leak in ath12k_pci_remove()
- wifi: ath11k: fix memory leak in ath11k_xxx_remove()
- wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues
- wifi: ath9k: use unsigned long for activity check timestamp
- platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig
- ASoC: amd: yc: update quirk data for new Lenovo model
- ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247
- ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315
- ASoC: amd: Add DMI quirk for ACP6X mic support
- ALSA: usb-audio: Fix CME quirk for UF series keyboards
- mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
- media: s5p-mfc: Corrected NV12M/NV21M plane-sizes
- HID: lenovo: Fix to ensure the data as __le32 instead of u32
- media: uvcvideo: Add quirk for Actions UVC05
- ASoC: fsl_audmix: register card device depends on 'dais' property
- ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
- ALSA: hda: intel: Fix Optimus when GPU has no sound
- ASoC: amd: amd_sdw: Add quirks for Dell SKU's
- ASoC: amd: ps: use macro for ACP6.3 pci revision id
- HID: pidff: Fix null pointer dereference in pidff_find_fields
- HID: pidff: Add PERIODIC_SINE_ONLY quirk
- HID: Add hid-universal-pidff driver and supported device ids
- HID: pidff: Add FIX_WHEEL_DIRECTION quirk
- HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
- HID: pidff: Add PERMISSIVE_CONTROL quirk
- HID: pidff: Add MISSING_PBO quirk and its detection
- HID: pidff: Add MISSING_DELAY quirk and its detection
- HID: pidff: Do not send effect envelope if it's empty
- HID: pidff: Convert infinite length from Linux API to PID standard
- ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
- platform/chrome: cros_ec_lpc: Match on Framework ACPI device
- tracing: Disable branch profiling in noinstr code
- zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work 
around compiler segfault
- xen/mcelog: Add __nonstring annotations for unterminated strings
- arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
- cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend
- Flush console log from kernel_power_off()
- PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
- perf/dwc_pcie: fix duplicate pci_dev devices
- perf/dwc_pcie: fix some unreleased resources
- perf: arm_pmu: Don't disable counter in armpmu_add()
- x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when 
running in a virtual machine
- x86/ia32: Leave NULL selector values 0~3 unchanged
- x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC < 
14.2
- x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
- irqchip/gic-v3: Add Rockchip 3568002 erratum workaround
- pm: cpupower: bench: Prevent NULL dereference on malloc failure
- srcu: Force synchronization for srcu_get_delay()
- umount: Allow superblock owners to force umount
- fs: consistently deref the files table with rcu_dereference_raw()
- perf: Fix hang while freeing sigtrap event
- perf/core: Simplify the perf_event_alloc() error path
- net: libwx: Fix the wrong Rx descriptor field
- iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
- iommu/exynos: Fix suspend/resume with IDENTITY domain
- ethtool: cmis_cdb: Fix incorrect read / write length extension
- nft_set_pipapo: fix incorrect avx2 match of 5th field octet
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
- ipv6: Align behavior across nexthops during path selection
- net: phy: allow MDIO bus PM ops to start/stop state machine for 
phylink-controlled PHY
- net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
- smb: client: fix UAF in decryption with multichannel
- x86/cpu: Avoid running off the end of an AMD erratum table
- net_sched: sch_sfq: move the limit validation
- net_sched: sch_sfq: use a temporary work area for validating configuration
- nvmet-fcloop: swap list_add_tail arguments
- s390/cpumf: Fix double free on error in cpumf_pmu_event_init()
- drm/i915/huc: Fix fence not released on early probe errors
- ata: sata_sx4: Add error handling in pdc20621_i2c_read()
- cifs: Fix support for WSL-style symlinks
- net: libwx: handle page_pool_dev_alloc_pages error
- drm/tests: probe-helper: Fix drm_display_mode memory leak
- drm/tests: modes: Fix drm_display_mode memory leak
- drm/tests: cmdline: Fix drm_display_mode memory leak
- drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
- drm/tests: modeset: Fix drm_display_mode memory leak
- net: ethtool: Don't call .cleanup_data when prepare_data fails
- tc: Ensure we have enough buffer space when sending filter netlink 
notifications
- octeontx2-pf: qos: fix VF root node parent queue index
- net: tls: explicitly disallow disconnect
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
- tipc: fix memory leak in tipc_link_xmit
- objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
- ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
- drm/xe: Restore EIO errno return when GuC PC start fails
- drm/xe/hw_engine: define sysfs_ops on all directories
- net: ethtool: fix ethtool_ringparam_get_cfg() returns a hds_thresh value 
always as 0.
- x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI
- drm/i915: Disable RPG during live selftest
- drm/virtio: Fix flickering issue seen with imported dmabufs
- ublk: fix handling recovery & reissue in ublk_abort_queue()
- selftests/futex: futex_waitv wouldblock test should fail
- gpiolib: of: Fix the choice for Ingenic NAND quirk
- tracing: fprobe: Cleanup fprobe hash when module unloading
- cgroup/cpuset: Fix race between newly created partition and dying one
- cgroup/cpuset: Fix error handling in remote_partition_disable()
- cgroup/cpuset: Fix incorrect isolated_cpus update in 
update_parent_effective_cpumask()
- ASoC: Intel: adl: add 2xrt1316 audio configuration
+ UBUNTU: Upstream stable to v6.14.3

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2108854

Title:
  Plucky update: v6.14.3 upstream stable release

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Plucky:
  In Progress

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v6.14.3 upstream stable release
         from git://git.kernel.org/

  ASoC: Intel: adl: add 2xrt1316 audio configuration
  cgroup/cpuset: Fix incorrect isolated_cpus update in 
update_parent_effective_cpumask()
  cgroup/cpuset: Fix error handling in remote_partition_disable()
  cgroup/cpuset: Fix race between newly created partition and dying one
  tracing: fprobe: Cleanup fprobe hash when module unloading
  gpiolib: of: Fix the choice for Ingenic NAND quirk
  selftests/futex: futex_waitv wouldblock test should fail
  ublk: fix handling recovery & reissue in ublk_abort_queue()
  drm/virtio: Fix flickering issue seen with imported dmabufs
  drm/i915: Disable RPG during live selftest
  x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI
  net: ethtool: fix ethtool_ringparam_get_cfg() returns a hds_thresh value 
always as 0.
  drm/xe/hw_engine: define sysfs_ops on all directories
  drm/xe: Restore EIO errno return when GuC PC start fails
  ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
  objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
  tipc: fix memory leak in tipc_link_xmit
  codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  net: tls: explicitly disallow disconnect
  octeontx2-pf: qos: fix VF root node parent queue index
  tc: Ensure we have enough buffer space when sending filter netlink 
notifications
  net: ethtool: Don't call .cleanup_data when prepare_data fails
  drm/tests: modeset: Fix drm_display_mode memory leak
  drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
  drm/tests: cmdline: Fix drm_display_mode memory leak
  drm/tests: modes: Fix drm_display_mode memory leak
  drm/tests: probe-helper: Fix drm_display_mode memory leak
  net: libwx: handle page_pool_dev_alloc_pages error
  cifs: Fix support for WSL-style symlinks
  ata: sata_sx4: Add error handling in pdc20621_i2c_read()
  drm/i915/huc: Fix fence not released on early probe errors
  s390/cpumf: Fix double free on error in cpumf_pmu_event_init()
  nvmet-fcloop: swap list_add_tail arguments
  net_sched: sch_sfq: use a temporary work area for validating configuration
  net_sched: sch_sfq: move the limit validation
  x86/cpu: Avoid running off the end of an AMD erratum table
  smb: client: fix UAF in decryption with multichannel
  net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
  net: phy: allow MDIO bus PM ops to start/stop state machine for 
phylink-controlled PHY
  ipv6: Align behavior across nexthops during path selection
  net: ppp: Add bound checking for skb data on ppp_sync_txmung
  nft_set_pipapo: fix incorrect avx2 match of 5th field octet
  ethtool: cmis_cdb: Fix incorrect read / write length extension
  iommu/exynos: Fix suspend/resume with IDENTITY domain
  iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
  net: libwx: Fix the wrong Rx descriptor field
  perf/core: Simplify the perf_event_alloc() error path
  perf: Fix hang while freeing sigtrap event
  fs: consistently deref the files table with rcu_dereference_raw()
  umount: Allow superblock owners to force umount
  srcu: Force synchronization for srcu_get_delay()
  pm: cpupower: bench: Prevent NULL dereference on malloc failure
  irqchip/gic-v3: Add Rockchip 3568002 erratum workaround
  UBUNTU: [Config] updateconfigs for ROCKCHIP_ERRATUM_3568002
  x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
  x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC < 
14.2
  x86/ia32: Leave NULL selector values 0~3 unchanged
  x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when 
running in a virtual machine
  perf: arm_pmu: Don't disable counter in armpmu_add()
  perf/dwc_pcie: fix some unreleased resources
  perf/dwc_pcie: fix duplicate pci_dev devices
  PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
  Flush console log from kernel_power_off()
  cpufreq/amd-pstate: Invalidate cppc_req_cached during suspend
  arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
  xen/mcelog: Add __nonstring annotations for unterminated strings
  zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work 
around compiler segfault
  tracing: Disable branch profiling in noinstr code
  platform/chrome: cros_ec_lpc: Match on Framework ACPI device
  ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
  HID: pidff: Convert infinite length from Linux API to PID standard
  HID: pidff: Do not send effect envelope if it's empty
  HID: pidff: Add MISSING_DELAY quirk and its detection
  HID: pidff: Add MISSING_PBO quirk and its detection
  HID: pidff: Add PERMISSIVE_CONTROL quirk
  HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
  HID: pidff: Add FIX_WHEEL_DIRECTION quirk
  HID: Add hid-universal-pidff driver and supported device ids
  UBUNTU: [Config] enable new hid-universal-pidff driver module
  HID: pidff: Add PERIODIC_SINE_ONLY quirk
  HID: pidff: Fix null pointer dereference in pidff_find_fields
  ASoC: amd: ps: use macro for ACP6.3 pci revision id
  ASoC: amd: amd_sdw: Add quirks for Dell SKU's
  ALSA: hda: intel: Fix Optimus when GPU has no sound
  ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
  ASoC: fsl_audmix: register card device depends on 'dais' property
  media: uvcvideo: Add quirk for Actions UVC05
  HID: lenovo: Fix to ensure the data as __le32 instead of u32
  media: s5p-mfc: Corrected NV12M/NV21M plane-sizes
  mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
  ALSA: usb-audio: Fix CME quirk for UF series keyboards
  ASoC: amd: Add DMI quirk for ACP6X mic support
  ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315
  ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247
  ASoC: amd: yc: update quirk data for new Lenovo model
  platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig
  wifi: ath9k: use unsigned long for activity check timestamp
  wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues
  wifi: ath11k: fix memory leak in ath11k_xxx_remove()
  wifi: ath12k: fix memory leak in ath12k_pci_remove()
  wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
  wifi: ath12k: Avoid memory leak while enabling statistics
  ata: libata-core: Add 'external' to the libata.force kernel parameter
  scsi: mpi3mr: Avoid reply queue full condition
  scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
  net: page_pool: don't cast mp param to devmem
  f2fs: don't retry IO for corrupted data scenario
  wifi: mac80211: add strict mode disabling workarounds
  wifi: mac80211: ensure sdata->work is canceled before initialized.
  scsi: target: spc: Fix RSOC parameter data header size
  net: usb: asix_devices: add FiberGecko DeviceID
  page_pool: avoid infinite loop to schedule delayed worker
  can: flexcan: Add quirk to handle separate interrupt lines for mailboxes
  can: flexcan: add NXP S32G2/S32G3 SoC support
  jfs: Fix uninit-value access of imap allocated in the diMount() function
  fs/jfs: cast inactags to s64 to prevent potential overflow
  fs/jfs: Prevent integer overflow in AG size calculation
  jfs: Prevent copying of nlink with value 0 from disk inode
  jfs: add sanity check for agwidth in dbMount
  wifi: rtw88: Add support for Mercusys MA30N and D-Link DWA-T185 rev. A1
  ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
  net: sfp: add quirk for 2.5G OEM BX SFP
  wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
  f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
  net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module
  ahci: add PCI ID for Marvell 88SE9215 SATA Controller
  ext4: protect ext4_release_dquot against freezing
  Revert "f2fs: rebuild nat_bits during umount"
  wifi: mac80211: fix userspace_selectors corruption
  ext4: ignore xattrs past end
  cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
  scsi: st: Fix array overflow in st_setup()
  ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI
  btrfs: harden block_group::bg_list against list_del() races
  wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
  net: vlan: don't propagate flags on open
  tracing: fix return value in __ftrace_event_enable_disable for 
TRACE_REG_UNREGISTER
  Bluetooth: btusb: Add new VID/PID for WCN785x
  Bluetooth: btintel_pcie: Add device id of Whale Peak
  Bluetooth: btusb: Add 13 USB device IDs for Qualcomm WCN785x
  Bluetooth: hci_uart: fix race during initialization
  Bluetooth: btusb: Add 2 HWIDs for MT7922
  Bluetooth: hci_qca: use the power sequencer for wcn6750
  Bluetooth: qca: simplify WCN399x NVM loading
  Bluetooth: qca: add WCN3950 support
  drm: allow encoder mode_set even when connectors change for crtc
  drm/virtio: Set missing bo->attached flag
  drm/rockchip: Don't change hdmi reference clock rate
  drm/xe/ptl: Update the PTL pci id table
  drm/xe/pf: Don't send BEGIN_ID if VF has no context/doorbells
  drm/xe/vf: Don't try to trigger a full GT reset if VF
  drm/amd/display: Update Cursor request mode to the beginning prefetch always
  drm/amd/display: Guard Possible Null Pointer Dereference
  drm/amd/display: add workaround flag to link to force FFE preset
  drm/amdgpu: Unlocked unmap only clear page table leaves
  drm: panel-orientation-quirks: Add support for AYANEO 2S
  drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
  drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
  drm: panel-orientation-quirks: Add new quirk for GPD Win 2
  drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
  drm/debugfs: fix printk format for bridge index
  drm/bridge: panel: forbid initializing a panel with unknown connector type
  drm/amd/display: Update FIXED_VS Link Rate Toggle Workaround Usage
  drm/amd/display: stop DML2 from removing pipes based on planes
  drivers: base: devres: Allow to release group on device release
  drm/amdkfd: clamp queue size to minimum
  drm/amdkfd: Fix mode1 reset crash issue
  drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
  drm/amdkfd: debugfs hang_hws skip GPU with MES
  drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds
  drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
  drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
  drm/rockchip: stop passing non struct drm_device to drm_err() and friends
  PCI: Add Rockchip Vendor ID
  drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
  drm/amd/display: Prevent VStartup Overflow
  PCI: Enable Configuration RRS SV early
  drm/amdgpu: Fix the race condition for draining retry fault
  PCI: Check BAR index for validity
  PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
  drm/amdgpu: grab an additional reference on the gang fence v2
  fbdev: omapfb: Add 'plane' value check
  tracing: probe-events: Log error for exceeding the number of arguments
  tracing: probe-events: Add comments about entry data storing code
  ktest: Fix Test Failures Due to Missing LOG_FILE Directories
  tpm, tpm_tis: Workaround failed command reception on Infineon devices
  tpm: End any active auth session before shutdown
  pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
  pwm: rcar: Improve register calculation
  pwm: fsl-ftm: Handle clk_get_rate() returning 0
  pwm: stm32: Search an appropriate duty_cycle if period cannot be modified
  erofs: set error to bio if file-backed IO fails
  bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
  ext4: don't treat fhandle lookup of ea_inode as FS corruption
  s390/pci: Fix s390_mmio_read/write syscall page fault handling
  HID: pidff: Clamp PERIODIC effect period to device's logical range
  HID: pidff: Stop all effects before enabling actuators
  HID: pidff: Completely rework and fix pidff_reset function
  HID: pidff: Simplify pidff_upload_effect function
  HID: pidff: Define values used in pidff_find_special_fields
  HID: pidff: Rescale time values to match field units
  HID: pidff: Factor out code for setting gain
  HID: pidff: Move all hid-pidff definitions to a dedicated header
  HID: pidff: Simplify pidff_rescale_signed
  HID: pidff: Use macros instead of hardcoded min/max values for shorts
  HID: pidff: Factor out pool report fetch and remove excess declaration
  HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX
  HID: hid-universal-pidff: Add Asetek wheelbases support
  HID: pidff: Comment and code style update
  HID: pidff: Support device error response from PID_BLOCK_LOAD
  HID: pidff: Remove redundant call to pidff_find_special_keys
  HID: pidff: Rename two functions to align them with naming convention
  HID: pidff: Clamp effect playback LOOP_COUNT value
  HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff
  HID: pidff: Fix 90 degrees direction name North -> East
  HID: pidff: Fix set_device_control()
  auxdisplay: hd44780: Fix an API misuse in hd44780.c
  dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
  media: mediatek: vcodec: Fix a resource leak related to the scp device in FW 
initialization
  media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
  media: uapi: rkisp1-config: Fix typo in extensible params example
  media: mgb4: Fix CMT registers update logic
  media: i2c: adv748x: Fix test pattern selection mask
  media: mgb4: Fix switched CMT frequency range "magic values" sets
  media: intel/ipu6: set the dev_parent of video device to pdev
  media: venus: hfi: add a check to handle OOB in sfr region
  media: venus: hfi: add check to handle incorrect queue size
  media: vim2m: print device name after registering device
  media: siano: Fix error handling in smsdvb_module_init()
  media: rockchip: rga: fix rga offset lookup
  xenfs/xensyms: respect hypervisor's "next" indication
  KVM: arm64: PMU: Set raw values from user to PM{C,I}NTEN{SET,CLR}, 
PMOVS{SET,CLR}
  arm64: cputype: Add MIDR_CORTEX_A76AE
  arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
  arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
  arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
  KVM: arm64: Tear down vGIC on failed vCPU creation
  KVM: arm64: Set HCR_EL2.TID1 unconditionally
  spi: cadence-qspi: Fix probe on AM62A LP SK
  mtd: rawnand: brcmnand: fix PM resume warning
  tpm, tpm_tis: Fix timeout handling when waiting for TPM status
  accel/ivpu: Fix PM related deadlocks in MS IOCTLs
  media: ov08x40: Properly turn sensor on/off when runtime-suspended
  media: streamzap: prevent processing IR data on URB failure
  media: hi556: Fix memory leak (on error) in hi556_check_hwcfg()
  media: visl: Fix ERANGE error when setting enum controls
  media: platform: stm32: Add check for clk_enable()
  media: xilinx-tpg: fix double put in xtpg_parse_of()
  media: imx219: Adjust PLL settings based on the number of MIPI lanes
  media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
  Revert "media: imx214: Fix the error handling in imx214_probe()"
  media: i2c: ccs: Set the device's runtime PM status correctly in remove
  media: i2c: ccs: Set the device's runtime PM status correctly in probe
  media: i2c: ov7251: Set enable GPIO low in probe
  media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
  media: nuvoton: Fix reference handling of ece_node
  media: nuvoton: Fix reference handling of ece_pdev
  media: venus: hfi_parser: add check to avoid out of bound access
  media: venus: hfi_parser: refactor hfi packet parsing logic
  media: i2c: imx319: Rectify runtime PM handling probe and remove
  media: i2c: imx219: Rectify runtime PM handling in probe and remove
  media: i2c: imx214: Rectify probe error handling related to runtime PM
  media: chips-media: wave5: Fix gray color on screen
  media: chips-media: wave5: Avoid race condition in the interrupt handler
  media: chips-media: wave5: Fix a hang after seeking
  media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster
  irqchip/renesas-rzv2h: Fix wrong variable usage in rzv2h_tint_set_type()
  mptcp: sockopt: fix getting IPV6_V6ONLY
  mptcp: sockopt: fix getting freebind & transparent
  block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone
  mtd: Add check for devm_kcalloc()
  net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
  net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
  mtd: Replace kcalloc() with devm_kcalloc()
  clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
  Revert "wifi: mt76: mt7925: Update mt7925_mcu_uni_[tx,rx]_ba for MLO"
  wifi: mt76: Add check for devm_kstrdup()
  wifi: mt76: mt792x: re-register CHANCTX_STA_CSA only for the mt7921 series
  wifi: mac80211: fix integer overflow in hwmp_route_info_get()
  wifi: mt76: mt7925: ensure wow pattern command align fw format
  wifi: mt76: mt7925: fix country count limitation for CLC
  wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present
  wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO
  wifi: mt76: mt7925: adjust rm BSS flow to prevent next connection failure
  wifi: mt76: mt7925: integrate *mlo_sta_cmd and *sta_cmd
  wifi: mt76: mt7925: update the power-saving flow
  scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag
  net: stmmac: Fix accessing freed irq affinity_hint
  io_uring/net: fix accept multishot handling
  io_uring/net: fix io_req_post_cqe abuse by send bundle
  io_uring/kbuf: reject zero sized provided buffers
  ASoC: codecs: wcd937x: fix a potential memory leak in 
wcd937x_soc_codec_probe()
  ASoC: q6apm: add q6apm_get_hw_pointer helper
  ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
  ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
  ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
  ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
  ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
  ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx
  accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal()
  accel/ivpu: Fix deadlock in ivpu_ms_cleanup()
  arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch()
  arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch()
  bus: mhi: host: Fix race between unprepare and queue_buf
  ext4: fix off-by-one error in do_split
  f2fs: fix the missing write pointer correction
  f2fs: fix to avoid atomicity corruption of atomic file
  vdpa/mlx5: Fix oversized null mkey longer than 32bit
  udf: Fix inode_getblk() return value
  tpm: do not start chip while suspended
  svcrdma: do not unregister device for listeners
  soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
  smb311 client: fix missing tcon check when mounting with linux/posix 
extensions
  ima: limit the number of open-writers integrity violations
  ima: limit the number of ToMToU integrity violations
  igc: Fix XSK queue NAPI ID mapping
  i3c: master: svc: Use readsb helper for reading MDB
  i3c: Add NULL pointer check in i3c_master_queue_ibi()
  jbd2: remove wrong sb->s_sequence check
  kbuild: exclude .rodata.(cst|str)* when building ranges
  kbuild: Add '-fno-builtin-wcslen'
  leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
  leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
  mfd: ene-kb3930: Fix a potential NULL pointer dereference
  mailbox: tegra-hsp: Define dimensioning masks in SoC data
  locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
  lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
  mptcp: fix NULL pointer in can_accept_new_subflow
  mptcp: only inc MPJoinAckHMacFailure for HMAC failures
  mtd: inftlcore: Add error check for inftl_read_oob()
  mtd: rawnand: Add status chack in r852_ready()
  mtd: spinand: Fix build with gcc < 7.5
  arm64: mops: Do not dereference src reg for a set operation
  arm64: tegra: Remove the Orin NX/Nano suspend key
  arm64: mm: Correct the update of max_pfn
  arm64: dts: ti: k3-j784s4-j742s2-main-common: Correct the GICD size
  arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix serdes_ln_ctrl reg-masks
  arm64: dts: mediatek: mt8188: Assign apll1 clock as parent to avoid hang
  arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
  arm64: dts: exynos: gs101: disable pinctrl_gsacore node
  backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
  btrfs: fix non-empty delayed iputs list on unmount due to compressed write 
workers
  btrfs: tests: fix chunk map leak after failure to add it to the tree
  btrfs: zoned: fix zone activation with missing devices
  btrfs: zoned: fix zone finishing with missing devices
  iommufd: Fix uninitialized rc in iommufd_access_rw()
  iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent()
  iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled
  iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes
  iommu/vt-d: Fix possible circular locking dependency
  iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs
  sparc/mm: disable preemption in lazy mmu mode
  sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
  net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
  mm/damon/ops: have damon_get_folio return folio even for tail pages
  mm/damon: avoid applying DAMOS action to same entity multiple times
  mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
  mm: make page_mapped_in_vma() hugetlb walk aware
  mm: fix lazy mmu docs and usage
  mm/mremap: correctly handle partial mremap() of VMA starting at 0
  mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
  mm/userfaultfd: fix release hang over concurrent GUP
  mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
  mm/hugetlb: move hugetlb_sysctl_init() to the __init section
  mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper
  sctp: detect and prevent references to a freed transport in sendmsg
  x86/xen: fix balloon target initialization for PVH dom0
  uprobes: Avoid false-positive lockdep splat on CONFIG_PREEMPT_RT=y in the 
ri_timer() uprobe timer callback, use raw_write_seqcount_*()
  tracing: fprobe: Fix to lock module while registering fprobe
  tracing: fprobe events: Fix possible UAF on modules
  tracing: Do not add length to print format in synthetic events
  thermal/drivers/rockchip: Add missing rk3328 mapping entry
  CIFS: Propagate min offload along with other parameters from primary to 
secondary channels.
  cifs: avoid NULL pointer dereference in dbg call
  cifs: fix integer overflow in match_server()
  cifs: Ensure that all non-client-specific reparse points are processed by the 
server
  clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
  clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks
  clk: qcom: gdsc: Release pm subdomains in reverse add order
  clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
  clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
  crypto: ccp - Fix check for the primary ASP device
  crypto: ccp - Fix uAPI definitions of PSP errors
  dlm: fix error if inactive rsb is not hashed
  dlm: fix error if active rsb is not hashed
  dm-ebs: fix prefetch-vs-suspend race
  dm-integrity: set ti->error on memory allocation failure
  dm-integrity: fix non-constant-time tag verification
  dm-verity: fix prefetch-vs-suspend race
  dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
  dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
  firmware: cs_dsp: test_control_parse: null-terminate test strings
  ftrace: Add cond_resched() to ftrace_graph_set_hash()
  ftrace: Properly merge notrace hashes
  fuse: {io-uring} Fix a possible req cancellation race
  gpio: mpc8xxx: Fix wakeup source leaks on device unbind
  gpio: tegra186: fix resource handling in ACPI probe path
  gpio: zynq: Fix wakeup source leaks on device unbind
  gve: handle overflow when reporting TX consumed descriptors
  KVM: Allow building irqbypass.ko as as module when kvm.ko is a module
  UBUNTU: [Config] updateconfigs for HAVE_KVM_IRQ_BYPASS
  KVM: x86: Explicitly zero-initialize on-stack CPUID unions
  KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses
  landlock: Move code to ease future backports
  landlock: Add the errata interface
  landlock: Add erratum for TCP fix
  landlock: Always allow signals between threads of the same process
  landlock: Prepare to add second errata
  selftests/landlock: Split signal_scoping_threads tests
  selftests/landlock: Add a new test for setuid()
  misc: pci_endpoint_test: Avoid issue of interrupts remaining after 
request_irq error
  misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
  misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
  net: mana: Switch to page pool for jumbo frames
  ntb: use 64-bit arithmetic for the MSI doorbell mask
  of/irq: Fix device node refcount leakage in API of_irq_parse_one()
  of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
  of/irq: Fix device node refcount leakages in of_irq_count()
  of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
  of/irq: Fix device node refcount leakages in of_irq_init()
  PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
  PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4
  PCI: layerscape: Fix arg_count to syscon_regmap_lookup_by_phandle_args()
  PCI: pciehp: Avoid unnecessary device replacement check
  PCI: Fix reference leak in pci_alloc_child_bus()
  PCI: Fix reference leak in pci_register_host_bridge()
  PCI: Fix wrong length of devres array
  phy: freescale: imx8m-pcie: assert phy reset and perst in power off
  pinctrl: qcom: Clear latched interrupt status when changing IRQ type
  pinctrl: samsung: add support for eint_fltcon_offset
  ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio()
  s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
  s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
  s390: Fix linker error when -no-pie option is unavailable
  sched_ext: create_dsq: Return -EEXIST on duplicate request
  selftests: mptcp: close fd_in before returning in main_loop
  selftests: mptcp: fix incorrect fd checks in main_loop
  spi: fsl-qspi: use devm function instead of driver remove
  spi: fsl-qspi: Fix double cleanup in probe error path
  thermal/drivers/mediatek/lvts: Disable monitor mode during suspend
  thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold
  wifi: ath11k: update channel list in worker when wait flag is set
  arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
  iommufd: Make attach_handle generic than fault specific
  iommufd: Fail replace if device has not been attached
  x86/e820: Fix handling of subpage regions when calculating nosave ranges in 
e820__register_nosave_regions()
  Bluetooth: hci_uart: Fix another race during initialization
  HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver 
Due to Race Condition
  Linux 6.14.3
  UBUNTU: Upstream stable to v6.14.3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2108854/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to