Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.14.5 upstream stable release
       from git://git.kernel.org/

mm/vmscan: don't try to reclaim hwpoison folio
soc: qcom: ice: introduce devm_of_qcom_ice_get
mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
PM: EM: use kfree_rcu() to simplify the code
PM: EM: Address RCU-related sparse warnings
media: i2c: imx214: Use subdev active state
media: i2c: imx214: Simplify with dev_err_probe()
media: i2c: imx214: Convert to CCI register access helpers
media: i2c: imx214: Replace register addresses with macros
media: i2c: imx214: Check number of lanes from device tree
media: i2c: imx214: Fix link frequency validation
media: ov08x40: Move ov08x40_identify_module() function up
media: ov08x40: Add missing ov08x40_identify_module() call on stream-start
iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return 
value check
iio: adc: ad7768-1: Fix conversion result sign
of: resolver: Simplify of_resolve_phandles() using __free()
of: resolver: Fix device node refcount leakage in of_resolve_phandles()
scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
PCI/MSI: Convert pci_msi_ignore_mask to per MSI domain flag
PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends
PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
irqchip/renesas-rzv2h: Simplify rzv2h_icu_init()
irqchip/renesas-rzv2h: Add struct rzv2h_hw_info with t_offs variable
irqchip/renesas-rzv2h: Prevent TINT spurious interrupt
net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads
drm/xe/ptl: Apply Wa_14023061436
drm/xe/xe3lpg: Add Wa_13012615864
drm/xe: Add performance tunings to debugfs
drm/xe/rtp: Drop sentinels from arg to xe_rtp_process_to_sr()
drm/xe: Ensure fixed_slice_mode gets set after ccs_mode change
lib/Kconfig.ubsan: Remove 'default UBSAN' from UBSAN_INTEGER_WRAP
ceph: Fix incorrect flush end position calculation
cpufreq: sun50i: prevent out-of-bounds access
dma/contiguous: avoid warning about unused size_bytes
cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
virtio_pci: Use self group type for cap commands
cpufreq: cppc: Fix invalid return value in .get() callback
cpufreq: Do not enable by default during compile testing
cpufreq: fix compile-test defaults
btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
btrfs: zoned: return EIO on RAID1 block group write pointer mismatch
cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
vhost-scsi: Add better resource allocation failure handling
vhost-scsi: Fix vhost_scsi_send_bad_target()
vhost-scsi: Fix vhost_scsi_send_status()
net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()
net/mlx5: Move ttc allocation after switch case to prevent leaks
scsi: core: Clear flags for scsi_cmnd that did not complete
scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
net: enetc: register XDP RX queues with frag_size
net: enetc: refactor bulk flipping of RX buffers to separate function
net: enetc: fix frame corruption on bpf_xdp_adjust_head/tail() and XDP_PASS
nvmet: fix out-of-bounds access in nvmet_enable_port
net: lwtunnel: disable BHs when required
net: phylink: force link down on major_config failure
net: phylink: fix suspend/resume with WoL enabled and link down
net: phy: leds: fix memory leak
virtio-net: Refactor napi_enable paths
virtio-net: Refactor napi_disable paths
virtio-net: disable delayed refill when pausing rx
tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
net_sched: hfsc: Fix a UAF vulnerability in class handling
net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
pds_core: Prevent possible adminq overflow/stuck condition
pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
pds_core: Remove unnecessary check in pds_client_adminq_cmd()
pds_core: make wait_context part of q_info
net: phy: Add helper for getting tx amplitude gain
net: phy: dp83822: Add support for changing the transmit amplitude voltage
net: dp83822: Fix OF_MDIO config check
net: stmmac: fix dwmac1000 ptp timestamp status offset
net: stmmac: fix multiplication overflow when reading timestamp
block: never reduce ra_pages in blk_apply_bdi_limits
bdev: use bdev_io_min() for statx block size
block: move blkdev_{get,put} _no_open prototypes out of blkdev.h
block: remove the backing_inode variable in bdev_statx
block: don't autoload drivers on stat
iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
riscv: Replace function-like macro by static inline function
riscv: uprobes: Add missing fence.i after building the XOL buffer
ublk: remove io_cmds list in ublk_queue
ublk: comment on ubq->canceling handling in ublk_queue_rq()
ublk: implement ->queue_rqs()
ublk: remove unused cmd argument to ublk_dispatch_req()
ublk: call ublk_dispatch_req() for handling UBLK_U_IO_NEED_GET_DATA
splice: remove duplicate noinline from pipe_clear_nowait
fs/xattr: Fix handling of AT_FDCWD in setxattrat(2) and getxattrat(2)
bpf: Add namespace to BPF internal symbols
Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
drm/meson: use unsigned long long / Hz for frequency types
perf/x86: Fix non-sampling (counting) events on certain x86 platforms
LoongArch: Select ARCH_USE_MEMTEST
LoongArch: Make regs_irqs_disabled() more clear
LoongArch: Make do_xyz() exception handlers more robust
sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash
net: stmmac: simplify phylink_suspend() and phylink_resume() calls
net: phylink: add phylink_prepare_resume()
net: stmmac: address non-LPI resume failures properly
net: stmmac: socfpga: remove phy_resume() call
net: phylink: add functions to block/unblock rx clock stop
net: stmmac: block PHY RXC clock-stop
netfilter: fib: avoid lookup if socket is available
virtio_console: fix missing byte order handling for cols and rows
sched_ext: Use kvzalloc for large exit_dump allocation
crypto: atmel-sha204a - Set hwrng quality to lowest possible
xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
net: selftests: initialize TCP header and skb payload with zero
net: phy: microchip: force IRQ polling mode for lan88xx
mptcp: pm: Defer freeing of MPTCP userspace path manager entries
scsi: mpi3mr: Fix pending I/O counter
rust: firmware: Use `ffi::c_char` type in `FwFunc`
drm: panel: jd9365da: fix reset signal polarity in unprepare
drm/amd/display: Fix gpu reset in multidisplay config
drm/amd/display: Force full update in gpu reset
drm/amd/display: Fix ACPI edid parsing on some Lenovo systems
x86/insn: Fix CTEST instruction decoding
x86/mm: Fix _pgd_alloc() for Xen PV mode
selftests/pcie_bwctrl: Fix test progs list
irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
binder: fix offset calculation in debug log
LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
LoongArch: Return NULL from huge_pte_offset() for invalid PMD
LoongArch: Remove a bogus reference to ZONE_DMA
LoongArch: KVM: Fix multiple typos of KVM code
LoongArch: KVM: Fully clear some CSRs when VM reboot
LoongArch: KVM: Fix PMU pass-through issue if VM exits to host finally
io_uring: fix 'sync' handling of io_fallback_tw()
KVM: SVM: Allocate IR data using atomic allocation
cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
mcb: fix a double free bug in chameleon_parse_gdd()
ata: libata-scsi: Improve CDL control
ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
ata: libata-scsi: Fix ata_msense_control_ata_feature()
USB: storage: quirk for ADATA Portable HDD CH94
scsi: Improve CDL control
mei: me: add panther lake H DID
mei: vsc: Fix fortify-panic caused by invalid counted_by() use
KVM: x86: Explicitly treat routing entry type changes as changes
KVM: x86: Reset IRTE to host control if *new* route isn't postable
KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
char: misc: register chrdev region with all possible minors
misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
firmware: stratix10-svc: Add of_platform_default_populate()
tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT
serial: msm: Configure correct working mode before starting earlycon
serial: sifive: lock port in startup()/shutdown() callbacks
USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
USB: serial: option: add Sierra Wireless EM9291
USB: serial: simple: add OWON HDS200 series oscilloscope support
xhci: Limit time spent with xHC interrupts disabled during bus resume
usb: xhci: Fix invalid pointer dereference in Etron workaround
usb: cdns3: Fix deadlock when using NCM gadget
usb: chipidea: ci_hdrc_imx: fix usbmisc handling
usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
usb: dwc3: gadget: check that event count does not exceed event buffer length
usb: dwc3: xilinx: Prevent spike in reset signal
usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
USB: VLI disk crashes if LPM is used
usb: typec: class: Fix NULL pointer access
usb: typec: class: Invalidate USB device pointers on partner unregistration
usb: typec: class: Unlocked on error in typec_register_partner()
USB: wdm: handle IO errors in wdm_wwan_port_start
USB: wdm: close race between wdm_open and wdm_wwan_port_stop
USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
USB: wdm: add annotation
crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
selftests/bpf: Fix stdout race condition in traffic monitor
pinctrl: renesas: rza2: Fix potential NULL pointer dereference
pinctrl: mcp23s08: Get rid of spurious level interrupts
MIPS: cm: Detect CM quirks from device tree
crypto: ccp - Add support for PCI device 0x1134
crypto: lib/Kconfig - Fix lib built-in failure when arch is modular
crypto: null - Use spin lock instead of mutex
bpf: Fix kmemleak warning for percpu hashmap
bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
parisc: PDT: Fix missing prototype warning
s390/sclp: Add check for get_zeroed_page()
s390/tty: Fix a potential memory leak bug
clk: renesas: rzv2h: Adjust for CPG_BUS_m_MSTOP starting from m = 1
selftests/bpf: Fix cap_enable_effective() return code
bpf: bpftool: Setting error code in do_loader()
bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates 
storage
bpf: Reject attaching fexit/fmod_ret to __noreturn functions
mailbox: pcc: Fix the possible race in updation of chan_in_use flag
mailbox: pcc: Always clear the platform ack interrupt first
staging: gpib: Use min for calculating transfer length
usb: host: max3421-hcd: Add missing spi_device_id table
usb: typec: ucsi: return CCI and message from sync_control callback
usb: typec: ucsi: ccg: move command quirks to ucsi_ccg_sync_control()
iio: adc: ad4695: make ad4695_exit_conversion_mode() more robust
fs/ntfs3: Keep write operations atomic
fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
dmaengine: bcm2835-dma: fix warning when CONFIG_PM=n
usb: xhci: Complete 'error mid TD' transfers when handling Missed Service
usb: xhci: Fix isochronous Ring Underrun/Overrun event handling
xhci: Handle spurious events on Etron host isoc enpoints
i3c: master: svc: Add support for Nuvoton npcm845 i3c
dmaengine: dmatest: Fix dmatest waiting less when interrupted
usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
phy: rockchip: usbdp: Avoid call hpd_event_trigger in dp_phy_init
usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
thunderbolt: Scan retimers after device router has been enumerated
um: work around sched_yield not yielding in time-travel mode
iommu/arm-smmu-v3: Set MEV bit in nested STE for DoS mitigations
objtool: Silence more KCOV warnings
objtool, panic: Disable SMAP in __stack_chk_fail()
objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in 
wcd934x_slim_irq_handler()
objtool, regulator: rk808: Remove potential undefined behavior in 
rk806_set_mode_dcdc()
objtool, lkdtm: Obfuscate the do_nothing() pointer
qibfs: fix _another_ leak
riscv: tracing: Fix __write_overflow_field in ftrace_partial_regs()
ntb: reduce stack usage in idt_scan_mws
ntb_hw_amd: Add NTB PCI ID for new gen CPU
9p/net: fix improper handling of bogus negative read/write replies
9p/trans_fd: mark concurrent read and writes to p9_conn->err
rtc: pcf85063: do a SW reset if POR failed
tracing: Enforce the persistent ring buffer to be page aligned
io_uring: always do atomic put from iowq
kbuild, rust: use -fremap-path-prefix to make paths relative
kbuild: add dependency from vmlinux to sorttable
sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
KVM: s390: Don't use %pK through tracepoints
KVM: s390: Don't use %pK through debug printing
udmabuf: fix a buf size overflow issue during udmabuf creation
cgroup/cpuset: Don't allow creation of local partition over a remote one
selftests: ublk: fix test_stripe_04
perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
xen: Change xen-acpi-processor dom0 dependency
pwm: Let pwm_set_waveform() succeed even if lowlevel driver rounded up
pwm: axi-pwmgen: Let .round_waveform_tohw() signal when request was rounded up
nvme: requeue namespace scan on missed AENs
ACPI: EC: Set ec_no_wakeup for Lenovo Go S
ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
drm/amdkfd: sriov doesn't support per queue reset
drm/amdgpu: Increase KIQ invalidate_tlbs timeout
drm/xe/xe3lpg: Apply Wa_14022293748, Wa_22019794406
nvme: re-read ANA log page after ns scan completes
nvme: multipath: fix return value of nvme_available_path
objtool: Stop UNRET validation on UD2
gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
x86/xen: disable CPU idle and frequency drivers for PVH dom0
selftests/mincore: Allow read-ahead pages to reach the end of the file
x86/bugs: Use SBPB in write_ibpb() if applicable
x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
x86/bugs: Don't fill RSB on context switch with eIBRS
nvmet-fc: take tgtport reference only once
nvmet-fc: put ref when assoc->del_work is already scheduled
cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
timekeeping: Add a lockdep override in tick_freeze()
cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
iommu: Clear iommu-dma ops on cleanup
ext4: make block validity check resistent to sb bh corruption
scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
scsi: ufs: exynos: Enable PRDT pre-fetching with UFSHCD_CAP_CRYPTO
scsi: ufs: exynos: Move phy calls to .exit() callback
scsi: ufs: exynos: gs101: Put UFS device in reset on .suspend()
scsi: pm80xx: Set phy_attached to zero when device is gone
ASoC: fsl_asrc_dma: get codec or cpu dai from backend
ASoC: codecs: Add of_match_table for aw888081 driver
x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
platform/x86: x86-android-tablets: Add "9v" to Vexia EDU ATLA 10 tablet symbols
platform/x86: x86-android-tablets: Add Vexia Edu Atla 10 tablet 5V data
netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS
iomap: skip unnecessary ifs_block_is_uptodate check
riscv: Provide all alternative macros all the time
ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"
spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
spi: tegra210-quad: add rate limiting and simplify timeout error message
ubsan: Fix panic from test_ubsan_out_of_bounds
nvmet: pci-epf: cleanup link state management
x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
md/raid1: Add check for missing source disk in process_checks()
drm/amdgpu: use a dummy owner for sysfs triggered cleaner shaders v4
drm/amd: Forbid suspending into non-default suspend states
drm/amdgpu: Use the right function for hdp flush
ublk: add ublk_force_abort_dev()
ublk: rely on ->canceling for dealing with ublk_nosrv_dev_should_queue_io
spi: spi-imx: Add check for spi_imx_setupxfer()
Revert "drivers: core: synchronize really_probe() and dev_uevent()"
driver core: introduce device_set_driver() helper
driver core: fix potential NULL pointer dereference in dev_uevent()
vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
comedi: jr3_pci: Fix synchronous deletion of timer
crypto: lib/Kconfig - Hide arch options from user
UBUNTU: [Config] updateconfigs for crypto libs
media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl()
MIPS: cm: Fix warning if MIPS_CM is disabled
net: phy: dp83822: fix transmit amplitude if CONFIG_OF_MDIO not defined
rust: kbuild: skip `--remap-path-prefix` for `rustdoc`
ublk: don't fail request for recovery & reissue in case of ubq->canceling
nvme: fixup scan failure for non-ANA multipath controllers
usb: xhci: Fix Short Packet handling rework ignoring errors
objtool: Ignore end-of-section jumps for KCOV/GCOV
objtool: Silence more KCOV warnings, part 2
crypto: Kconfig - Select LIB generic option
Linux 6.14.5
UBUNTU: Upstream stable to v6.14.5

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Plucky)
     Importance: Medium
     Assignee: Manuel Diewald (diewald)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Plucky)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Plucky)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Plucky)
       Status: New => In Progress

** Changed in: linux (Ubuntu Plucky)
     Assignee: (unassigned) => Manuel Diewald (diewald)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         v6.14.5 upstream stable release
         from git://git.kernel.org/
  
-             
+ mm/vmscan: don't try to reclaim hwpoison folio
+ soc: qcom: ice: introduce devm_of_qcom_ice_get
+ mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
+ PM: EM: use kfree_rcu() to simplify the code
+ PM: EM: Address RCU-related sparse warnings
+ media: i2c: imx214: Use subdev active state
+ media: i2c: imx214: Simplify with dev_err_probe()
+ media: i2c: imx214: Convert to CCI register access helpers
+ media: i2c: imx214: Replace register addresses with macros
+ media: i2c: imx214: Check number of lanes from device tree
+ media: i2c: imx214: Fix link frequency validation
+ media: ov08x40: Move ov08x40_identify_module() function up
+ media: ov08x40: Add missing ov08x40_identify_module() call on stream-start
+ iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary 
return value check
+ iio: adc: ad7768-1: Fix conversion result sign
+ of: resolver: Simplify of_resolve_phandles() using __free()
+ of: resolver: Fix device node refcount leakage in of_resolve_phandles()
+ scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
+ PCI/MSI: Convert pci_msi_ignore_mask to per MSI domain flag
+ PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends
+ PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
+ irqchip/renesas-rzv2h: Simplify rzv2h_icu_init()
+ irqchip/renesas-rzv2h: Add struct rzv2h_hw_info with t_offs variable
+ irqchip/renesas-rzv2h: Prevent TINT spurious interrupt
+ net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads
+ drm/xe/ptl: Apply Wa_14023061436
+ drm/xe/xe3lpg: Add Wa_13012615864
+ drm/xe: Add performance tunings to debugfs
+ drm/xe/rtp: Drop sentinels from arg to xe_rtp_process_to_sr()
+ drm/xe: Ensure fixed_slice_mode gets set after ccs_mode change
+ lib/Kconfig.ubsan: Remove 'default UBSAN' from UBSAN_INTEGER_WRAP
+ ceph: Fix incorrect flush end position calculation
+ cpufreq: sun50i: prevent out-of-bounds access
+ dma/contiguous: avoid warning about unused size_bytes
+ cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
+ cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
+ cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
+ scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
+ virtio_pci: Use self group type for cap commands
+ cpufreq: cppc: Fix invalid return value in .get() callback
+ cpufreq: Do not enable by default during compile testing
+ cpufreq: fix compile-test defaults
+ btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
+ btrfs: zoned: return EIO on RAID1 block group write pointer mismatch
+ cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
+ vhost-scsi: Add better resource allocation failure handling
+ vhost-scsi: Fix vhost_scsi_send_bad_target()
+ vhost-scsi: Fix vhost_scsi_send_status()
+ net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()
+ net/mlx5: Move ttc allocation after switch case to prevent leaks
+ scsi: core: Clear flags for scsi_cmnd that did not complete
+ scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
+ net: enetc: register XDP RX queues with frag_size
+ net: enetc: refactor bulk flipping of RX buffers to separate function
+ net: enetc: fix frame corruption on bpf_xdp_adjust_head/tail() and XDP_PASS
+ nvmet: fix out-of-bounds access in nvmet_enable_port
+ net: lwtunnel: disable BHs when required
+ net: phylink: force link down on major_config failure
+ net: phylink: fix suspend/resume with WoL enabled and link down
+ net: phy: leds: fix memory leak
+ virtio-net: Refactor napi_enable paths
+ virtio-net: Refactor napi_disable paths
+ virtio-net: disable delayed refill when pausing rx
+ tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
+ net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
+ fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
+ net_sched: hfsc: Fix a UAF vulnerability in class handling
+ net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
+ net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
+ pds_core: Prevent possible adminq overflow/stuck condition
+ pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
+ pds_core: Remove unnecessary check in pds_client_adminq_cmd()
+ pds_core: make wait_context part of q_info
+ net: phy: Add helper for getting tx amplitude gain
+ net: phy: dp83822: Add support for changing the transmit amplitude voltage
+ net: dp83822: Fix OF_MDIO config check
+ net: stmmac: fix dwmac1000 ptp timestamp status offset
+ net: stmmac: fix multiplication overflow when reading timestamp
+ block: never reduce ra_pages in blk_apply_bdi_limits
+ bdev: use bdev_io_min() for statx block size
+ block: move blkdev_{get,put} _no_open prototypes out of blkdev.h
+ block: remove the backing_inode variable in bdev_statx
+ block: don't autoload drivers on stat
+ iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
+ riscv: Replace function-like macro by static inline function
+ riscv: uprobes: Add missing fence.i after building the XOL buffer
+ ublk: remove io_cmds list in ublk_queue
+ ublk: comment on ubq->canceling handling in ublk_queue_rq()
+ ublk: implement ->queue_rqs()
+ ublk: remove unused cmd argument to ublk_dispatch_req()
+ ublk: call ublk_dispatch_req() for handling UBLK_U_IO_NEED_GET_DATA
+ splice: remove duplicate noinline from pipe_clear_nowait
+ fs/xattr: Fix handling of AT_FDCWD in setxattrat(2) and getxattrat(2)
+ bpf: Add namespace to BPF internal symbols
+ Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
+ drm/meson: use unsigned long long / Hz for frequency types
+ perf/x86: Fix non-sampling (counting) events on certain x86 platforms
+ LoongArch: Select ARCH_USE_MEMTEST
+ LoongArch: Make regs_irqs_disabled() more clear
+ LoongArch: Make do_xyz() exception handlers more robust
+ sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash
+ net: stmmac: simplify phylink_suspend() and phylink_resume() calls
+ net: phylink: add phylink_prepare_resume()
+ net: stmmac: address non-LPI resume failures properly
+ net: stmmac: socfpga: remove phy_resume() call
+ net: phylink: add functions to block/unblock rx clock stop
+ net: stmmac: block PHY RXC clock-stop
+ netfilter: fib: avoid lookup if socket is available
+ virtio_console: fix missing byte order handling for cols and rows
+ sched_ext: Use kvzalloc for large exit_dump allocation
+ crypto: atmel-sha204a - Set hwrng quality to lowest possible
+ xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
+ net: selftests: initialize TCP header and skb payload with zero
+ net: phy: microchip: force IRQ polling mode for lan88xx
+ mptcp: pm: Defer freeing of MPTCP userspace path manager entries
+ scsi: mpi3mr: Fix pending I/O counter
+ rust: firmware: Use `ffi::c_char` type in `FwFunc`
+ drm: panel: jd9365da: fix reset signal polarity in unprepare
+ drm/amd/display: Fix gpu reset in multidisplay config
+ drm/amd/display: Force full update in gpu reset
+ drm/amd/display: Fix ACPI edid parsing on some Lenovo systems
+ x86/insn: Fix CTEST instruction decoding
+ x86/mm: Fix _pgd_alloc() for Xen PV mode
+ selftests/pcie_bwctrl: Fix test progs list
+ irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
+ binder: fix offset calculation in debug log
+ LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
+ LoongArch: Return NULL from huge_pte_offset() for invalid PMD
+ LoongArch: Remove a bogus reference to ZONE_DMA
+ LoongArch: KVM: Fix multiple typos of KVM code
+ LoongArch: KVM: Fully clear some CSRs when VM reboot
+ LoongArch: KVM: Fix PMU pass-through issue if VM exits to host finally
+ io_uring: fix 'sync' handling of io_fallback_tw()
+ KVM: SVM: Allocate IR data using atomic allocation
+ cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
+ mcb: fix a double free bug in chameleon_parse_gdd()
+ ata: libata-scsi: Improve CDL control
+ ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
+ ata: libata-scsi: Fix ata_msense_control_ata_feature()
+ USB: storage: quirk for ADATA Portable HDD CH94
+ scsi: Improve CDL control
+ mei: me: add panther lake H DID
+ mei: vsc: Fix fortify-panic caused by invalid counted_by() use
+ KVM: x86: Explicitly treat routing entry type changes as changes
+ KVM: x86: Reset IRTE to host control if *new* route isn't postable
+ KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
+ char: misc: register chrdev region with all possible minors
+ misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
+ misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
+ firmware: stratix10-svc: Add of_platform_default_populate()
+ tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT
+ serial: msm: Configure correct working mode before starting earlycon
+ serial: sifive: lock port in startup()/shutdown() callbacks
+ USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
+ USB: serial: option: add Sierra Wireless EM9291
+ USB: serial: simple: add OWON HDS200 series oscilloscope support
+ xhci: Limit time spent with xHC interrupts disabled during bus resume
+ usb: xhci: Fix invalid pointer dereference in Etron workaround
+ usb: cdns3: Fix deadlock when using NCM gadget
+ usb: chipidea: ci_hdrc_imx: fix usbmisc handling
+ usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
+ usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
+ USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
+ usb: dwc3: gadget: check that event count does not exceed event buffer length
+ usb: dwc3: xilinx: Prevent spike in reset signal
+ usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
+ usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
+ USB: VLI disk crashes if LPM is used
+ usb: typec: class: Fix NULL pointer access
+ usb: typec: class: Invalidate USB device pointers on partner unregistration
+ usb: typec: class: Unlocked on error in typec_register_partner()
+ USB: wdm: handle IO errors in wdm_wwan_port_start
+ USB: wdm: close race between wdm_open and wdm_wwan_port_stop
+ USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
+ USB: wdm: add annotation
+ crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
+ selftests/bpf: Fix stdout race condition in traffic monitor
+ pinctrl: renesas: rza2: Fix potential NULL pointer dereference
+ pinctrl: mcp23s08: Get rid of spurious level interrupts
+ MIPS: cm: Detect CM quirks from device tree
+ crypto: ccp - Add support for PCI device 0x1134
+ crypto: lib/Kconfig - Fix lib built-in failure when arch is modular
+ crypto: null - Use spin lock instead of mutex
+ bpf: Fix kmemleak warning for percpu hashmap
+ bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
+ clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
+ parisc: PDT: Fix missing prototype warning
+ s390/sclp: Add check for get_zeroed_page()
+ s390/tty: Fix a potential memory leak bug
+ clk: renesas: rzv2h: Adjust for CPG_BUS_m_MSTOP starting from m = 1
+ selftests/bpf: Fix cap_enable_effective() return code
+ bpf: bpftool: Setting error code in do_loader()
+ bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates 
storage
+ bpf: Reject attaching fexit/fmod_ret to __noreturn functions
+ mailbox: pcc: Fix the possible race in updation of chan_in_use flag
+ mailbox: pcc: Always clear the platform ack interrupt first
+ staging: gpib: Use min for calculating transfer length
+ usb: host: max3421-hcd: Add missing spi_device_id table
+ usb: typec: ucsi: return CCI and message from sync_control callback
+ usb: typec: ucsi: ccg: move command quirks to ucsi_ccg_sync_control()
+ iio: adc: ad4695: make ad4695_exit_conversion_mode() more robust
+ fs/ntfs3: Keep write operations atomic
+ fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
+ usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
+ usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
+ sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
+ dmaengine: bcm2835-dma: fix warning when CONFIG_PM=n
+ usb: xhci: Complete 'error mid TD' transfers when handling Missed Service
+ usb: xhci: Fix isochronous Ring Underrun/Overrun event handling
+ xhci: Handle spurious events on Etron host isoc enpoints
+ i3c: master: svc: Add support for Nuvoton npcm845 i3c
+ dmaengine: dmatest: Fix dmatest waiting less when interrupted
+ usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
+ phy: rockchip: usbdp: Avoid call hpd_event_trigger in dp_phy_init
+ usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
+ usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
+ thunderbolt: Scan retimers after device router has been enumerated
+ um: work around sched_yield not yielding in time-travel mode
+ iommu/arm-smmu-v3: Set MEV bit in nested STE for DoS mitigations
+ objtool: Silence more KCOV warnings
+ objtool, panic: Disable SMAP in __stack_chk_fail()
+ objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in 
wcd934x_slim_irq_handler()
+ objtool, regulator: rk808: Remove potential undefined behavior in 
rk806_set_mode_dcdc()
+ objtool, lkdtm: Obfuscate the do_nothing() pointer
+ qibfs: fix _another_ leak
+ riscv: tracing: Fix __write_overflow_field in ftrace_partial_regs()
+ ntb: reduce stack usage in idt_scan_mws
+ ntb_hw_amd: Add NTB PCI ID for new gen CPU
+ 9p/net: fix improper handling of bogus negative read/write replies
+ 9p/trans_fd: mark concurrent read and writes to p9_conn->err
+ rtc: pcf85063: do a SW reset if POR failed
+ tracing: Enforce the persistent ring buffer to be page aligned
+ io_uring: always do atomic put from iowq
+ kbuild, rust: use -fremap-path-prefix to make paths relative
+ kbuild: add dependency from vmlinux to sorttable
+ sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
+ KVM: s390: Don't use %pK through tracepoints
+ KVM: s390: Don't use %pK through debug printing
+ udmabuf: fix a buf size overflow issue during udmabuf creation
+ cgroup/cpuset: Don't allow creation of local partition over a remote one
+ selftests: ublk: fix test_stripe_04
+ perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
+ xen: Change xen-acpi-processor dom0 dependency
+ pwm: Let pwm_set_waveform() succeed even if lowlevel driver rounded up
+ pwm: axi-pwmgen: Let .round_waveform_tohw() signal when request was rounded up
+ nvme: requeue namespace scan on missed AENs
+ ACPI: EC: Set ec_no_wakeup for Lenovo Go S
+ ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
+ drm/amdkfd: sriov doesn't support per queue reset
+ drm/amdgpu: Increase KIQ invalidate_tlbs timeout
+ drm/xe/xe3lpg: Apply Wa_14022293748, Wa_22019794406
+ nvme: re-read ANA log page after ns scan completes
+ nvme: multipath: fix return value of nvme_available_path
+ objtool: Stop UNRET validation on UD2
+ gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
+ x86/xen: disable CPU idle and frequency drivers for PVH dom0
+ selftests/mincore: Allow read-ahead pages to reach the end of the file
+ x86/bugs: Use SBPB in write_ibpb() if applicable
+ x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
+ x86/bugs: Don't fill RSB on context switch with eIBRS
+ nvmet-fc: take tgtport reference only once
+ nvmet-fc: put ref when assoc->del_work is already scheduled
+ cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
+ timekeeping: Add a lockdep override in tick_freeze()
+ cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
+ iommu: Clear iommu-dma ops on cleanup
+ ext4: make block validity check resistent to sb bh corruption
+ scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
+ scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
+ scsi: ufs: exynos: Enable PRDT pre-fetching with UFSHCD_CAP_CRYPTO
+ scsi: ufs: exynos: Move phy calls to .exit() callback
+ scsi: ufs: exynos: gs101: Put UFS device in reset on .suspend()
+ scsi: pm80xx: Set phy_attached to zero when device is gone
+ ASoC: fsl_asrc_dma: get codec or cpu dai from backend
+ ASoC: codecs: Add of_match_table for aw888081 driver
+ x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
+ platform/x86: x86-android-tablets: Add "9v" to Vexia EDU ATLA 10 tablet 
symbols
+ platform/x86: x86-android-tablets: Add Vexia Edu Atla 10 tablet 5V data
+ netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS
+ iomap: skip unnecessary ifs_block_is_uptodate check
+ riscv: Provide all alternative macros all the time
+ ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"
+ spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
+ spi: tegra210-quad: add rate limiting and simplify timeout error message
+ ubsan: Fix panic from test_ubsan_out_of_bounds
+ nvmet: pci-epf: cleanup link state management
+ x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
+ md/raid1: Add check for missing source disk in process_checks()
+ drm/amdgpu: use a dummy owner for sysfs triggered cleaner shaders v4
+ drm/amd: Forbid suspending into non-default suspend states
+ drm/amdgpu: Use the right function for hdp flush
+ ublk: add ublk_force_abort_dev()
+ ublk: rely on ->canceling for dealing with ublk_nosrv_dev_should_queue_io
+ spi: spi-imx: Add check for spi_imx_setupxfer()
+ Revert "drivers: core: synchronize really_probe() and dev_uevent()"
+ driver core: introduce device_set_driver() helper
+ driver core: fix potential NULL pointer dereference in dev_uevent()
+ vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
+ comedi: jr3_pci: Fix synchronous deletion of timer
+ crypto: lib/Kconfig - Hide arch options from user
+ UBUNTU: [Config] updateconfigs for crypto libs
+ media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl()
+ MIPS: cm: Fix warning if MIPS_CM is disabled
+ net: phy: dp83822: fix transmit amplitude if CONFIG_OF_MDIO not defined
+ rust: kbuild: skip `--remap-path-prefix` for `rustdoc`
+ ublk: don't fail request for recovery & reissue in case of ubq->canceling
+ nvme: fixup scan failure for non-ANA multipath controllers
+ usb: xhci: Fix Short Packet handling rework ignoring errors
+ objtool: Ignore end-of-section jumps for KCOV/GCOV
+ objtool: Silence more KCOV warnings, part 2
+ crypto: Kconfig - Select LIB generic option
  Linux 6.14.5
- crypto: Kconfig - Select LIB generic option
- objtool: Silence more KCOV warnings, part 2
- objtool: Ignore end-of-section jumps for KCOV/GCOV
- usb: xhci: Fix Short Packet handling rework ignoring errors
- nvme: fixup scan failure for non-ANA multipath controllers
- ublk: don't fail request for recovery & reissue in case of ubq->canceling
- rust: kbuild: skip `--remap-path-prefix` for `rustdoc`
- net: phy: dp83822: fix transmit amplitude if CONFIG_OF_MDIO not defined
- MIPS: cm: Fix warning if MIPS_CM is disabled
- media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl()
- crypto: lib/Kconfig - Hide arch options from user
- comedi: jr3_pci: Fix synchronous deletion of timer
- vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
- driver core: fix potential NULL pointer dereference in dev_uevent()
- driver core: introduce device_set_driver() helper
- Revert "drivers: core: synchronize really_probe() and dev_uevent()"
- spi: spi-imx: Add check for spi_imx_setupxfer()
- ublk: rely on ->canceling for dealing with ublk_nosrv_dev_should_queue_io
- ublk: add ublk_force_abort_dev()
- drm/amdgpu: Use the right function for hdp flush
- drm/amd: Forbid suspending into non-default suspend states
- drm/amdgpu: use a dummy owner for sysfs triggered cleaner shaders v4
- md/raid1: Add check for missing source disk in process_checks()
- x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores
- nvmet: pci-epf: cleanup link state management
- ubsan: Fix panic from test_ubsan_out_of_bounds
- spi: tegra210-quad: add rate limiting and simplify timeout error message
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
- ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"
- riscv: Provide all alternative macros all the time
- iomap: skip unnecessary ifs_block_is_uptodate check
- netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS
- platform/x86: x86-android-tablets: Add Vexia Edu Atla 10 tablet 5V data
- platform/x86: x86-android-tablets: Add "9v" to Vexia EDU ATLA 10 tablet 
symbols
- x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
- ASoC: codecs: Add of_match_table for aw888081 driver
- ASoC: fsl_asrc_dma: get codec or cpu dai from backend
- scsi: pm80xx: Set phy_attached to zero when device is gone
- scsi: ufs: exynos: gs101: Put UFS device in reset on .suspend()
- scsi: ufs: exynos: Move phy calls to .exit() callback
- scsi: ufs: exynos: Enable PRDT pre-fetching with UFSHCD_CAP_CRYPTO
- scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init()
- scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
- ext4: make block validity check resistent to sb bh corruption
- iommu: Clear iommu-dma ops on cleanup
- cifs: Fix querying of WSL CHR and BLK reparse points over SMB1
- timekeeping: Add a lockdep override in tick_freeze()
- cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode
- nvmet-fc: put ref when assoc->del_work is already scheduled
- nvmet-fc: take tgtport reference only once
- x86/bugs: Don't fill RSB on context switch with eIBRS
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Use SBPB in write_ibpb() if applicable
- selftests/mincore: Allow read-ahead pages to reach the end of the file
- x86/xen: disable CPU idle and frequency drivers for PVH dom0
- gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
- objtool: Stop UNRET validation on UD2
- nvme: multipath: fix return value of nvme_available_path
- nvme: re-read ANA log page after ns scan completes
- drm/xe/xe3lpg: Apply Wa_14022293748, Wa_22019794406
- drm/amdgpu: Increase KIQ invalidate_tlbs timeout
- drm/amdkfd: sriov doesn't support per queue reset
- ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
- ACPI: EC: Set ec_no_wakeup for Lenovo Go S
- nvme: requeue namespace scan on missed AENs
- pwm: axi-pwmgen: Let .round_waveform_tohw() signal when request was rounded up
- pwm: Let pwm_set_waveform() succeed even if lowlevel driver rounded up
- xen: Change xen-acpi-processor dom0 dependency
- perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
- selftests: ublk: fix test_stripe_04
- cgroup/cpuset: Don't allow creation of local partition over a remote one
- udmabuf: fix a buf size overflow issue during udmabuf creation
- KVM: s390: Don't use %pK through debug printing
- KVM: s390: Don't use %pK through tracepoints
- sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
- kbuild: add dependency from vmlinux to sorttable
- kbuild, rust: use -fremap-path-prefix to make paths relative
- io_uring: always do atomic put from iowq
- tracing: Enforce the persistent ring buffer to be page aligned
- rtc: pcf85063: do a SW reset if POR failed
- 9p/trans_fd: mark concurrent read and writes to p9_conn->err
- 9p/net: fix improper handling of bogus negative read/write replies
- ntb_hw_amd: Add NTB PCI ID for new gen CPU
- ntb: reduce stack usage in idt_scan_mws
- riscv: tracing: Fix __write_overflow_field in ftrace_partial_regs()
- qibfs: fix _another_ leak
- objtool, lkdtm: Obfuscate the do_nothing() pointer
- objtool, regulator: rk808: Remove potential undefined behavior in 
rk806_set_mode_dcdc()
- objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in 
wcd934x_slim_irq_handler()
- objtool, panic: Disable SMAP in __stack_chk_fail()
- objtool: Silence more KCOV warnings
- iommu/arm-smmu-v3: Set MEV bit in nested STE for DoS mitigations
- um: work around sched_yield not yielding in time-travel mode
- thunderbolt: Scan retimers after device router has been enumerated
- usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
- usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
- phy: rockchip: usbdp: Avoid call hpd_event_trigger in dp_phy_init
- usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
- dmaengine: dmatest: Fix dmatest waiting less when interrupted
- i3c: master: svc: Add support for Nuvoton npcm845 i3c
- xhci: Handle spurious events on Etron host isoc enpoints
- usb: xhci: Fix isochronous Ring Underrun/Overrun event handling
- usb: xhci: Complete 'error mid TD' transfers when handling Missed Service
- dmaengine: bcm2835-dma: fix warning when CONFIG_PM=n
- sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
- usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
- usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
- fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
- fs/ntfs3: Keep write operations atomic
- iio: adc: ad4695: make ad4695_exit_conversion_mode() more robust
- usb: typec: ucsi: ccg: move command quirks to ucsi_ccg_sync_control()
- usb: typec: ucsi: return CCI and message from sync_control callback
- usb: host: max3421-hcd: Add missing spi_device_id table
- staging: gpib: Use min for calculating transfer length
- mailbox: pcc: Always clear the platform ack interrupt first
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- bpf: Reject attaching fexit/fmod_ret to __noreturn functions
- bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates 
storage
- bpf: bpftool: Setting error code in do_loader()
- selftests/bpf: Fix cap_enable_effective() return code
- clk: renesas: rzv2h: Adjust for CPG_BUS_m_MSTOP starting from m = 1
- s390/tty: Fix a potential memory leak bug
- s390/sclp: Add check for get_zeroed_page()
- parisc: PDT: Fix missing prototype warning
- clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
- bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
- bpf: Fix kmemleak warning for percpu hashmap
- crypto: null - Use spin lock instead of mutex
- crypto: lib/Kconfig - Fix lib built-in failure when arch is modular
- crypto: ccp - Add support for PCI device 0x1134
- MIPS: cm: Detect CM quirks from device tree
- pinctrl: mcp23s08: Get rid of spurious level interrupts
- pinctrl: renesas: rza2: Fix potential NULL pointer dereference
- selftests/bpf: Fix stdout race condition in traffic monitor
- crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
- USB: wdm: add annotation
- USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
- USB: wdm: close race between wdm_open and wdm_wwan_port_stop
- USB: wdm: handle IO errors in wdm_wwan_port_start
- usb: typec: class: Unlocked on error in typec_register_partner()
- usb: typec: class: Invalidate USB device pointers on partner unregistration
- usb: typec: class: Fix NULL pointer access
- USB: VLI disk crashes if LPM is used
- usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
- usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
- usb: dwc3: xilinx: Prevent spike in reset signal
- usb: dwc3: gadget: check that event count does not exceed event buffer length
- USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
- usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
- usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
- usb: chipidea: ci_hdrc_imx: fix usbmisc handling
- usb: cdns3: Fix deadlock when using NCM gadget
- usb: xhci: Fix invalid pointer dereference in Etron workaround
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- USB: serial: simple: add OWON HDS200 series oscilloscope support
- USB: serial: option: add Sierra Wireless EM9291
- USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
- serial: sifive: lock port in startup()/shutdown() callbacks
- serial: msm: Configure correct working mode before starting earlycon
- tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT
- firmware: stratix10-svc: Add of_platform_default_populate()
- misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
- misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration
- char: misc: register chrdev region with all possible minors
- KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
- KVM: x86: Reset IRTE to host control if *new* route isn't postable
- KVM: x86: Explicitly treat routing entry type changes as changes
- mei: vsc: Fix fortify-panic caused by invalid counted_by() use
- mei: me: add panther lake H DID
- scsi: Improve CDL control
- USB: storage: quirk for ADATA Portable HDD CH94
- ata: libata-scsi: Fix ata_msense_control_ata_feature()
- ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
- ata: libata-scsi: Improve CDL control
- mcb: fix a double free bug in chameleon_parse_gdd()
- cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
- KVM: SVM: Allocate IR data using atomic allocation
- io_uring: fix 'sync' handling of io_fallback_tw()
- LoongArch: KVM: Fix PMU pass-through issue if VM exits to host finally
- LoongArch: KVM: Fully clear some CSRs when VM reboot
- LoongArch: KVM: Fix multiple typos of KVM code
- LoongArch: Remove a bogus reference to ZONE_DMA
- LoongArch: Return NULL from huge_pte_offset() for invalid PMD
- LoongArch: Handle fp, lsx, lasx and lbt assembly symbols
- binder: fix offset calculation in debug log
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
- selftests/pcie_bwctrl: Fix test progs list
- x86/mm: Fix _pgd_alloc() for Xen PV mode
- x86/insn: Fix CTEST instruction decoding
- drm/amd/display: Fix ACPI edid parsing on some Lenovo systems
- drm/amd/display: Force full update in gpu reset
- drm/amd/display: Fix gpu reset in multidisplay config
- drm: panel: jd9365da: fix reset signal polarity in unprepare
- rust: firmware: Use `ffi::c_char` type in `FwFunc`
- scsi: mpi3mr: Fix pending I/O counter
- mptcp: pm: Defer freeing of MPTCP userspace path manager entries
- net: phy: microchip: force IRQ polling mode for lan88xx
- net: selftests: initialize TCP header and skb payload with zero
- xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
- crypto: atmel-sha204a - Set hwrng quality to lowest possible
- sched_ext: Use kvzalloc for large exit_dump allocation
- virtio_console: fix missing byte order handling for cols and rows
- netfilter: fib: avoid lookup if socket is available
- net: stmmac: block PHY RXC clock-stop
- net: phylink: add functions to block/unblock rx clock stop
- net: stmmac: socfpga: remove phy_resume() call
- net: stmmac: address non-LPI resume failures properly
- net: phylink: add phylink_prepare_resume()
- net: stmmac: simplify phylink_suspend() and phylink_resume() calls
- sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash
- LoongArch: Make do_xyz() exception handlers more robust
- LoongArch: Make regs_irqs_disabled() more clear
- LoongArch: Select ARCH_USE_MEMTEST
- perf/x86: Fix non-sampling (counting) events on certain x86 platforms
- drm/meson: use unsigned long long / Hz for frequency types
- Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
- bpf: Add namespace to BPF internal symbols
- fs/xattr: Fix handling of AT_FDCWD in setxattrat(2) and getxattrat(2)
- splice: remove duplicate noinline from pipe_clear_nowait
- ublk: call ublk_dispatch_req() for handling UBLK_U_IO_NEED_GET_DATA
- ublk: remove unused cmd argument to ublk_dispatch_req()
- ublk: implement ->queue_rqs()
- ublk: comment on ubq->canceling handling in ublk_queue_rq()
- ublk: remove io_cmds list in ublk_queue
- riscv: uprobes: Add missing fence.i after building the XOL buffer
- riscv: Replace function-like macro by static inline function
- iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
- block: don't autoload drivers on stat
- block: remove the backing_inode variable in bdev_statx
- block: move blkdev_{get,put} _no_open prototypes out of blkdev.h
- bdev: use bdev_io_min() for statx block size
- block: never reduce ra_pages in blk_apply_bdi_limits
- net: stmmac: fix multiplication overflow when reading timestamp
- net: stmmac: fix dwmac1000 ptp timestamp status offset
- net: dp83822: Fix OF_MDIO config check
- net: phy: dp83822: Add support for changing the transmit amplitude voltage
- net: phy: Add helper for getting tx amplitude gain
- pds_core: make wait_context part of q_info
- pds_core: Remove unnecessary check in pds_client_adminq_cmd()
- pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
- pds_core: Prevent possible adminq overflow/stuck condition
- net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
- net_sched: hfsc: Fix a UAF vulnerability in class handling
- fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
- net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
- tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
- virtio-net: disable delayed refill when pausing rx
- virtio-net: Refactor napi_disable paths
- virtio-net: Refactor napi_enable paths
- net: phy: leds: fix memory leak
- net: phylink: fix suspend/resume with WoL enabled and link down
- net: phylink: force link down on major_config failure
- net: lwtunnel: disable BHs when required
- nvmet: fix out-of-bounds access in nvmet_enable_port
- net: enetc: fix frame corruption on bpf_xdp_adjust_head/tail() and XDP_PASS
- net: enetc: refactor bulk flipping of RX buffers to separate function
- net: enetc: register XDP RX queues with frag_size
- scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
- scsi: core: Clear flags for scsi_cmnd that did not complete
- net/mlx5: Move ttc allocation after switch case to prevent leaks
- net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()
- vhost-scsi: Fix vhost_scsi_send_status()
- vhost-scsi: Fix vhost_scsi_send_bad_target()
- vhost-scsi: Add better resource allocation failure handling
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- btrfs: zoned: return EIO on RAID1 block group write pointer mismatch
- btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
- cpufreq: fix compile-test defaults
- cpufreq: Do not enable by default during compile testing
- cpufreq: cppc: Fix invalid return value in .get() callback
- virtio_pci: Use self group type for cap commands
- scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
- cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
- cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
- cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
- dma/contiguous: avoid warning about unused size_bytes
- cpufreq: sun50i: prevent out-of-bounds access
- ceph: Fix incorrect flush end position calculation
- lib/Kconfig.ubsan: Remove 'default UBSAN' from UBSAN_INTEGER_WRAP
- drm/xe: Ensure fixed_slice_mode gets set after ccs_mode change
- drm/xe/rtp: Drop sentinels from arg to xe_rtp_process_to_sr()
- drm/xe: Add performance tunings to debugfs
- drm/xe/xe3lpg: Add Wa_13012615864
- drm/xe/ptl: Apply Wa_14023061436
- net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads
- irqchip/renesas-rzv2h: Prevent TINT spurious interrupt
- irqchip/renesas-rzv2h: Add struct rzv2h_hw_info with t_offs variable
- irqchip/renesas-rzv2h: Simplify rzv2h_icu_init()
- PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
- PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends
- PCI/MSI: Convert pci_msi_ignore_mask to per MSI domain flag
- scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
- of: resolver: Fix device node refcount leakage in of_resolve_phandles()
- of: resolver: Simplify of_resolve_phandles() using __free()
- iio: adc: ad7768-1: Fix conversion result sign
- iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary 
return value check
- media: ov08x40: Add missing ov08x40_identify_module() call on stream-start
- media: ov08x40: Move ov08x40_identify_module() function up
- media: i2c: imx214: Fix link frequency validation
- media: i2c: imx214: Check number of lanes from device tree
- media: i2c: imx214: Replace register addresses with macros
- media: i2c: imx214: Convert to CCI register access helpers
- media: i2c: imx214: Simplify with dev_err_probe()
- media: i2c: imx214: Use subdev active state
- PM: EM: Address RCU-related sparse warnings
- PM: EM: use kfree_rcu() to simplify the code
- mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
- soc: qcom: ice: introduce devm_of_qcom_ice_get
- mm/vmscan: don't try to reclaim hwpoison folio
+ UBUNTU: Upstream stable to v6.14.5

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2111268

Title:
  Plucky update: v6.14.5 upstream stable release

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2111268/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to