<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="16">
<package pkgid="51f2f88938f8f8f3ad7700c431b0875bb3c4ba4c99a578dd2513aa76275ec1a9" name="bpftool" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="8df9d726d9b4fabc7128ce8b4589618bace726800cdff4478b53906532d469ab" name="bpftool-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="8b0ca75063384b7e8bf95555e5ac1a5bab608b301074d9bb6bc11e683bc5aa39" name="kernel" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="c2c4f459bcff44672406f90a2dee204df82188f6fda24584ef0066ec29034090" name="kernel" arch="src">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="3e90762f3fcbbff94446a26eaa4ebe437d691d3b544e306f81e73d08d459eb11" name="kernel-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="c7c9e6b801cbf22de44d0e41e241d374bd993d7f0980057b25996cb62ab59d68" name="kernel-debugsource" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="ab74fe59c77a4b31d23347ca9c89f1eec3938bd3e93830540dbed0ace908f9c0" name="kernel-devel" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="825ff4623aa92180db808e7cef601b2e1773979d7918edd928340e5d51a87545" name="kernel-headers" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="3cf14b275572908f9a428eb489441fe1e6b01a295ca409288741441eb642adc0" name="kernel-source" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="1b376d815148066df339066ca68ffeaa070ca813f0b64a7ffd046238feba5798" name="kernel-tools" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="a0d837d7dee7de80f9ae58a69e8d7b5764526b1e7e1be69dc94be806f7ea51bb" name="kernel-tools-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="ac2cb080bb286d20d261dcbbc8b4a7cffa325d8e2d851df8d6304cf7296f1a88" name="kernel-tools-devel" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="7ca662e10da11f0eb919b91d42f025008ed4f5aee6f3365aee34fc2827b99eb0" name="perf" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="f8aef668232b03a85d87aed6064cf87673ac65fba8d12d03b3db61d6394c1c97" name="perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="eff7833c2fda19c44e7ace0935a7b9a1c59410aaa1d3679611da2a3447002eea" name="python3-perf" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
<package pkgid="873990d512e41532ad8cbc50d1806642983259daca076bc95a35eb002124078c" name="python3-perf-debuginfo" arch="aarch64">
  <version epoch="0" ver="6.6.0" rel="55.0.0.58.oe2403"/>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-42.0.0.49" date="1726660800">- !11556  bpf: Fix a kernel verifier crash in stacksafe()
- bpf: Fix a kernel verifier crash in stacksafe()
- !11496 virtcca feature：Fix warnings
- virtcca feature: fix warnings
- !11531 [OLK-6.6]Some updates for HiSilicon PCIe PMU
- drivers/perf: hisi_pcie: Export supported Root Ports [bdf_min, bdf_max]
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- drivers/perf: hisi_pcie: Record hardware counts correctly
- !11546  ata: libata: Fix memory leak for error path in ata_host_alloc()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- !11551  mm/memory_hotplug: prevent accessing by index=-1
- mm/memory_hotplug: prevent accessing by index=-1
- !11522  ipv6: prevent UAF in ip6_send_skb()
- ipv6: prevent UAF in ip6_send_skb()
- !11518  ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: fix possible UAF in ip6_finish_output2()
- !11515  net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: Fix out-of-bound access
- !11513  ipv6: prevent possible UAF in ip6_xmit()
- ipv6: prevent possible UAF in ip6_xmit()
- !11503  mm: mTHP user controls to pagecache large folio
- mm/huge_memory: allow to enable 64K anouymous mapping align alone
- mm/huge_memory: mTHP user controls to pagecache large folio
- !5453 Add GM Driver Support for Hygon platform（Cryptographic Coprocessor，OLK-6.6)
- hct: fix fork issue when use hct in virtual machine
- hct: support 1024 processes simutaneously in the hct-mdev mode.
- hct: change the maximum number of supported ccps from 16 to 48.
- hct: fix build issue when the module mdev is disabled.
- hct: supporting memory encryption in host and wb set in vm
- hct: add mediated ccp driver support for hygon crypto technology.
- crypto: ccp: support sm2 on Hygon generation 4th CPU
- crypto: ccp: remove repeated sm4-hs mode
- crypto: ccp: Process multiple VQ commands once for SM4/SM4-CTR ccp.
- crypto: ccp: Process multiple VQ commands once for SM3 ccp.
- crypto: ccp: Modify value of COMMANDS_PER_QUEUE from 16 to 8192.
- crypto: ccp: fix bug that SM2 encryption of long data causes kernel crash
- crypto: ccp: fix sm2 test failed in testmgr because of missing DER coding
- crypto: ccp: Fix a problem that vq thread may stuck when do multi process test.
- crypto: ccp: Only handle interrupts by completion.
- crypto: ccp: It prompt ILLEGAL_MEM_ADDR when using PSPCCP.
- crypto: ccp: fix sm2 not return due to wrong complete callback parameter
- crypto: ccp: Support SM4 algorithm for hygon ccp.
- crypto: ccp: Support SM3 algorithm for hygon ccp.
- crypto: ccp: Support SM2 algorithm for hygon ccp.
- !11485  Bugfix introduced when support folio
- mm/shmem: replace HPAGE_PMD_ORDER with PMD_ORDER in shmem_alloc_folio()
- mm: huge_memory: add memory reliable count in __discard_anon_folio_pmd_locked()
- mm: limit order to 0 when allocated from dynamic pool
- !11469 OLK-6.6 Revert gpiolib bugfix
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match
- Revert "gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node match"
- !11464  mm/ksm: fix ksm_zero_pages accounting
- mm_types: Fix kabi breakage in struct mm_struct
- mm/ksm: fix ksm_zero_pages accounting
- !11411  f2fs: fix null reference error when checking end of zone
- f2fs: fix null reference error when checking end of zone
- !11465 【olk 6.6】net: hns3: some bugfixes for netdev
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- net: hns3: don't auto enable misc vector
- !11454  nfs: fix memory leak in error path of nfs4_do_reclaim
- nfs: fix memory leak in error path of nfs4_do_reclaim
- !11421  Some fixes About cpuset partition
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Fix remote root partition creation problem
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
- !11455 v2  CVE-2024-44972
- btrfs: fix invalid mapping of extent xarray state
- btrfs: do not clear page dirty inside extent_write_locked_range()</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-44.0.0.50" date="1727265600">- !11769  tools: move alignment-related macros to new &lt;linux/align.h&gt;
- tools: move alignment-related macros to new &lt;linux/align.h&gt;
- !11753  driver: iio: add missing checks on iio_info's callback access
- driver: iio: add missing checks on iio_info's callback access
- !11740  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- !11733  Input: MT - limit max slots
- Input: MT - limit max slots
- !11757  arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- arm64/mpam: Check mpam_detect_is_enabled() before accessing MPAM registers
- Revert "arm64: head.S: Initialise MPAM EL2 registers and disable traps"
- !11543  Fix CVE-2024-45025
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -&gt; idset_bitmap_size()
- !11713  btrfs: fix qgroup reserve leaks in cow_file_range
- btrfs: fix qgroup reserve leaks in cow_file_range
- !11725  Squashfs: sanity check symbolic link size
- Squashfs: sanity check symbolic link size
- !11715  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
- !11714  CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: remove superfluous metadata check at btrfs_lookup_extent_info()
- !11717  CVE-2024-43904
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
- !11718  CVE-2024-41008
- drm/amdgpu: change vm-&gt;task_info handling
- !11691  sch/netem: fix use after free in netem_dequeue
- sch/netem: fix use after free in netem_dequeue
- !11719  rtla/osnoise: Prevent NULL dereference in error handling
- rtla/osnoise: Prevent NULL dereference in error handling
- !11626  smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
- !11651  large folio: Performance and bugfix
- mm: remove invalidate_inode_page()
- mm: convert isolate_page() to mf_isolate_folio()
- mm: convert soft_offline_in_use_page() to use a folio
- mm: use mapping_evict_folio() in truncate_error_page()
- mm: convert __do_fault() to use a folio
- mm: make mapping_evict_folio() the preferred way to evict clean folios
- tmpfs: fault in smaller chunks if large folio allocation not allowed
- mm,tmpfs: consider end of file write in shmem_is_huge
- mm: shmem: move shmem_huge_global_enabled() into shmem_allowable_huge_orders()
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: simplify the suitable huge orders validation for tmpfs
- !11644  drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix dereference after null check
- !11675 【OLK 6.6】net: hns3: some bugfixes for hns3 driver
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev-&gt;features configuration too early
- net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: add sync command to sync io-pgtable
- net: hns3: default enable tx bounce buffer when smmu enabled
- net: hns3: don't add the len of vlan head if skb_vlan_pop failed
- net: hns3: void array out of bound when loop tnl_num
- net: hns3: use correct release function during uninitialization
- net: hns3: delete redundant enabling actions for Layer 2 fowarding
- !11721 v3  mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- mm/migration: do not folio copy in MIGRATE_SYNC_NO_COPY mode
- !8819 Add support for Hygon model 7h processors
- perf/x86/uncore: Add L3 PMU support for Hygon family 18h model 7h
- EDAC/amd64: Add support for Hygon family 18h model 7h
- x86/amd_nb: Add support for Hygon family 18h model 7h
- !11157 [OLK-6.6] Support Hygon Trusted Key Management run on CSV Guest
- drivers/crypto/ccp: add ioctl API to pin TKM hugepage
- driver/crypto/ccp: fix vtkm without C-bit when host SME deactivate
- drivers/crypto/ccp: support TKM run on CSV
- drivers/crypto/ccp: remove multi-level pointers processing for vpsp
- !11669  cgroup-psi-add-PSI_STATE_LAST-for-kabi-reserve
- cgroup/psi: add PSI_STATE_LAST for kabi reserve
- !11666  drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix the Out-of-bounds read warning
- !11607  tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- !11646  net: hns3: fix a deadlock problem when config TC during resetting
- net: hns3: fix a deadlock problem when config TC during resetting
- !11648  vsock: fix recursive -&gt;recvmsg calls
- vsock: fix recursive -&gt;recvmsg calls
- !11656  fix CVE-2024-46714
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- !11631  fix CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
- !11642  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- !11638  Fix CVE-2024-44991
- tcp: do not export tcp_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- !11608 v3  arm64: perf: Add support for event counting threshold
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- arm: perf: Fix ARCH=arm build with GCC
- Revert "perf/arm_dmc620: Remove duplicate format attribute #defines"
- Documentation: arm64: Document the PMU event counting threshold feature
- arm64: perf: Add support for event counting threshold
- arm: pmu: Move error message and -EOPNOTSUPP to individual PMUs
- perf/arm_dmc620: Remove duplicate format attribute #defines
- arm: pmu: Share user ABI format mechanism with SPE
- arm64: perf: Include threshold control fields in PMEVTYPER mask
- arm: perf: Convert remaining fields to use GENMASK
- arm: perf: Use GENMASK for PMMIR fields
- arm: perf/kvm: Use GENMASK for ARMV8_PMU_PMCR_N
- arm: perf: Remove inlines from arm_pmuv3.c
- drivers: perf: arm_pmuv3: Add new macro PMUV3_INIT_MAP_EVENT()
- KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0
- KVM: arm64: Add PMU event filter bits required if EL3 is implemented
- KVM: arm64: Make PMEVTYPER&lt;n&gt;_EL0.NSH RES0 if EL2 isn't advertised
- drivers: perf: arm_pmuv3: Drop some unused arguments from armv8_pmu_init()
- drivers: perf: arm_pmuv3: Read PMMIR_EL1 unconditionally
- !11629  CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
- !11641  mm: set hugepage to false when anon mthp allocation
- mm: set hugepage to false when anon mthp allocation
- !11559  mm/ksm: fix possible UAF of stable_node
- mm/ksm: fix possible UAF of stable_node
- !11613  Input: uinput - reject requests with unreasonable number of slots
- Input: uinput - reject requests with unreasonable number of slots
- !11460  mptcp: pm: avoid possible UaF when selecting endp
- mptcp: pm: avoid possible UaF when selecting endp
- !11598  net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Take state lock during tx timeout reporter
- !11618  RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/hns: Fix ah error counter in sw stat not increasing
- !11554 Some patches of RDMA from Linux to openEuler-6.6
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- !11566 v2  tracefs: Use generic inode RCU for synchronizing freeing
- tracefs: Use generic inode RCU for synchronizing freeing
- !11609  fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
- !11474  fs/netfs/fscache_cookie: add missing "n_accesses" check
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- !11563  iommu: Restore lost return in iommu_report_device_fault()
- iommu: Restore lost return in iommu_report_device_fault()
- !11569  support poison recover from migrate folio
- fs: hugetlbfs: support poisoned recover from hugetlbfs_migrate_folio()
- mm: migrate: support poisoned recover from migrate folio
- mm: migrate: split folio_migrate_mapping()
- mm: add folio_mc_copy()
- mm: move memory_failure_queue() into copy_mc_[user]_highpage()
- mm: migrate: remove migrate_folio_extra()
- mm: migrate_device: unify migrate folio for MIGRATE_SYNC_NO_COPY
- mm: migrate: simplify __buffer_migrate_folio()
- !8822 Add support for Hygon model 10h processors
- ALSA: hda: Add support for Hygon family 18h model 10h HD-Audio
- hwmon/k10temp: Add support for Hygon family 18h model 10h
- EDAC/amd64: Add support for Hygon family 18h model 10h
- x86/amd_nb: Add support for Hygon family 18h model 10h
- x86/cpu: Get LLC ID for Hygon family 18h model 10h
- !11594  gtp: pull network headers in gtp_dev_xmit()
- gtp: pull network headers in gtp_dev_xmit()
- !11573  btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- !11585  vfs: Don't evict inode under the inode lru traversing context
- vfs: Don't evict inode under the inode lru traversing context
- !11461  bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-46.0.0.51" date="1728561600">- !12061  net/mlx5: Fix bridge mode operations when there are no VFs
- net/mlx5: Fix bridge mode operations when there are no VFs
- !12074  drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Check index for aux_rd_interval before using
- !12063  cpufreq: intel_pstate: Revise global turbo disable check
- cpufreq: intel_pstate: Revise global turbo disable check
- !12051  um: line: always fill *error_out in setup_one_line()
- um: line: always fill *error_out in setup_one_line()
- !12023  ASoC: meson: axg-card: fix 'use-after-free'
- ASoC: meson: axg-card: fix 'use-after-free'
- !12022  drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Check gpio_id before used as array index
- !12049  drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
- !11949  mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- !11763 [OLK-6.6] Intel: Backport to support Intel IFS(In Field Scan) SBAF on GNR
- platform/x86/intel/ifs: Fix SBAF title underline length
- trace: platform/x86/intel/ifs: Add SBAF trace support
- platform/x86/intel/ifs: Add SBAF test support
- platform/x86/intel/ifs: Add SBAF test image loading support
- platform/x86/intel/ifs: Refactor MSR usage in IFS test code
- selftests: ifs: verify IFS ARRAY BIST functionality
- selftests: ifs: verify IFS scan test functionality
- selftests: ifs: verify test image loading functionality
- selftests: ifs: verify test interfaces are created by the driver
- platform/x86/intel/ifs: Disable irq during one load stage
- platform/x86/intel/ifs: trace: display batch num in hex
- platform/x86/intel/ifs: Classify error scenarios correctly
- platform/x86/intel/ifs: Remove unnecessary initialization of 'ret'
- platform/x86/intel/ifs: Add an entry rendezvous for SAF
- platform/x86/intel/ifs: Replace the exit rendezvous with an entry rendezvous for ARRAY_BIST
- platform/x86/intel/ifs: Add current batch number to trace output
- platform/x86/intel/ifs: Trace on all HT threads when executing a test
- !12039  drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
- !12033  sysctl: always initialize i_uid/i_gid
- sysctl: always initialize i_uid/i_gid
- !12014  dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- !12009  rtmutex: Drop rt_mutex::wait_lock before scheduling
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- !11617 v2  Fix VSYNC referencing an unmapped VPE on GIC v4.0/v4.1
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.0
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- !12016  perf/x86/intel: Limit the period on Haswell
- perf/x86/intel: Limit the period on Haswell
- !12017  cppc_cpufreq: Fix possible null pointer dereference
- cppc_cpufreq: Fix possible null pointer dereference
- !11995  drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amd/display: Assign linear_pitch_alignment even for VM
- !11796  bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
- !12004  spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
- !12000  nvmet-tcp: fix kernel crash if commands allocation fails
- nvmet-tcp: fix kernel crash if commands allocation fails
- !11969  drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc
- !11963  serial: sc16is7xx: fix invalid FIFO access with special register set
- serial: sc16is7xx: fix invalid FIFO access with special register set
- !11985  Fix CVE-2024-46845
- tracing/osnoise: Fix build when timerlat is not enabled
- tracing/timerlat: Only clear timer if a kthread exists
- !11909  ksmbd: unset the binding mark of a reused connection
- ksmbd: unset the binding mark of a reused connection
- !11983  wifi: ath12k: fix firmware crash due to invalid peer nss
- wifi: ath12k: fix firmware crash due to invalid peer nss
- !11984  drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Add array index check for hdcp ddc access
- !11989  drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box
- !11992  scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
- !11979  CVE-2024-46814
- drm/amd/display: Check msg_id before processing transcation
- !11960  scsi: ufs: core: Remove SCSI host only if added
- scsi: ufs: core: Remove SCSI host only if added
- !11944  drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: Fix the warning division or modulo by zero
- !11971  sched: Support to enable/disable dynamic_affinity
- sched: Support to enable/disable dynamic_affinity
- !11951  net: phy: Fix missing of_node_put() for leds
- net: phy: Fix missing of_node_put() for leds
- !11956  Fix CVE-2024-44958 6.6
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- !11945  btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()
- !11919  btrfs: fix race between direct IO write and fsync when using same fd
- btrfs: fix race between direct IO write and fsync when using same fd
- !11920  hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- !11820  powerpc/qspinlock: Fix deadlock in MCS queue
- powerpc/qspinlock: Fix deadlock in MCS queue
- !11915  ethtool: check device is present when getting link settings
- ethtool: check device is present when getting link settings
- !11936  btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- btrfs: remove NULL transaction support for btrfs_lookup_extent_info()
- !11929  Merge some hns RoCE patches from the mainline to OLK-6.6
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- Revert "RDMA/hns: Fix Use-After-Free of rsv_qp"
- Revert "RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()"
- !11912  smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- !11908  HID: amd_sfh: free driver_data after destroying hid device
- HID: amd_sfh: free driver_data after destroying hid device
- !11926  nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: protect references to superblock parameters exposed in sysfs
- !11927  hwmon: (hp-wmi-sensors) Check if WMI event data exists
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
- !11844  fix CVE-2024-46771
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry().
- can: bcm: Remove proc entry when dev is unregistered.
- !11885  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- !11795  i2c: tegra: Do not mark ACPI devices as irq safe
- i2c: tegra: Do not mark ACPI devices as irq safe
- !11804  drm/amdgpu: Fix out-of-bounds write warning
- drm/amdgpu: Fix out-of-bounds write warning
- !11901  scsi: aacraid: Fix double-free on probe failure
- scsi: aacraid: Fix double-free on probe failure
- !11859  char: xillybus: Check USB endpoints when probing device
- char: xillybus: Check USB endpoints when probing device
- !11865  pktgen: use cpus_read_lock() in pg_net_init()
- pktgen: use cpus_read_lock() in pg_net_init()
- !11876  btrfs: handle errors from btrfs_dec_ref() properly
- btrfs: handle errors from btrfs_dec_ref() properly
- !11893  tracing/osnoise: Use a cpumask to know what threads are kthreads
- tracing/osnoise: Use a cpumask to know what threads are kthreads
- !11840  userfaultfd: fix checks for huge PMDs
- userfaultfd: fix checks for huge PMDs
- !11891  wifi: rtw88: usb: schedule rx work after everything is set up
- wifi: rtw88: usb: schedule rx work after everything is set up
- !11860  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- !11870  NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
- !11874  fix CVE-2024-46701
- libfs: fix infinite directory reads for offset dir
- fs: fix kabi kroken in struct offset_ctx
- libfs: Convert simple directory offsets to use a Maple Tree
- test_maple_tree: testing the cyclic allocation
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Add simple_offset_empty()
- libfs: Define a minimum directory offset
- libfs: Re-arrange locking in offset_iterate_dir()
- !11689  smb: client: fix double put of @cfile in smb2_rename_path()
- smb: client: fix double put of @cfile in smb2_rename_path()
- !11883  usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- !11884  PCI: Add missing bridge lock to pci_bus_lock()
- PCI: Add missing bridge lock to pci_bus_lock()
- !11862  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- !11758  smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- !11857  arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- arm64/mpam: Fix redefined reference of 'mpam_detect_is_enabled'
- !11823  mmc: mmc_test: Fix NULL dereference on allocation failure
- mmc: mmc_test: Fix NULL dereference on allocation failure
- !11819  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- !11495  ext4: Fix race in buffer_head read fault injection
- ext4: Fix race in buffer_head read fault injection
- !11845  bpf: verifier: prevent userspace memory access
- bpf: verifier: prevent userspace memory access
- !11748  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- !11624  Fix iBMA bug and change version
- BMA: Fix edma driver initialization problem and change the version number.
- !11850  misc: fastrpc: Fix double free of 'buf' in error path
- misc: fastrpc: Fix double free of 'buf' in error path
- !11655  drm/amd/display: Check denominator pbn_div before used
- drm/amd/display: Check denominator pbn_div before used
- !11686  udf: Avoid excessive partition lengths
- udf: Avoid excessive partition lengths
- !11685  binder: fix UAF caused by offsets overwrite
- binder: fix UAF caused by offsets overwrite
- !11798  CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
- !11814  selinux,smack: don't bypass permissions check in inode_setsecctx hook
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- !11811  apparmor: fix possible NULL pointer dereference
- apparmor: fix possible NULL pointer dereference
- !11681  net/mlx5e: SHAMPO, Fix incorrect page release
- net/mlx5e: SHAMPO, Fix incorrect page release
- !11679  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- !11672  netem: fix return value if duplicate enqueue fails
- netem: fix return value if duplicate enqueue fails
- !11783  mm: hwpoison: two more poison recovery
- mm: support poison recovery from copy_present_page()
- mm: support poison recovery from do_cow_fault()
- !11787  nilfs2: fix missing cleanup on rollforward recovery error
- nilfs2: fix missing cleanup on rollforward recovery error
- !11744  powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
- !11766  drm/amd/display: Check denominator crb_pipes before used
- drm/amd/display: Check denominator crb_pipes before used
- !11790  efi/libstub: add checking validity of memory regions
- efi/libstub: add checking validity of memory regions
- !11802  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
- !11747 [OLK 6.6] some bugfixes for hns3
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: fix snprintf() is printing too much problem
- net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
- net: hns3: fix spelling mistake "reg_um" -&gt; "reg_num"
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
- net: hns3:support enable or disable pfc strom prevent
- net: hns3: fix wrong use of semaphore up</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-47.0.0.52" date="1729684800">- !12168  crypto: stm32/cryp - call finalize with bh disabled
- crypto: stm32/cryp - call finalize with bh disabled
- !11502 Virtcca feature: modify vfio/msi/iommu driver to enable confidential device assignment
- virtcca feature: msi place modify
- virtcca feature: fix msi iova map
- virtcca feature: extract the function to the virtcca_coda.c file
- virtcca feature: read or write msi forwarding to the secure world
- virtcca feature: read or write bar space forwarding to the secure world
- virtcca feature: read or write config space forwarding to secure world
- virtcca feature: activate confidential vm to set security device s_s2ttbr
- virtcca feature: set device security properties
- virtcca feature: secure device page fault
- virtcca feature: vfio driver dma map
- virtcca feature: bind the kvm handle of cvm with smmu domain
- virtcca feature: vfio attach the device list to secure world
- !12304  btrfs: fix race setting file private on concurrent lseek using same fd
- btrfs: fix race setting file private on concurrent lseek using same fd
- !12314 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.52-6.6.53 LTS Patches
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
- can: mcp251xfd: properly indent labels
- x86/mm: Switch to new Intel CPU model defines
- nvme-pci: qdepth 1 quirk
- gpiolib: cdev: Ignore reconfiguration without direction
- Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- powercap/intel_rapl: Add support for AMD family 1Ah
- drm: Expand max DRM device number to full MINORBITS
- accel: Use XArray instead of IDR for minors
- drm: Use XArray instead of IDR for minors
- spi: spidev: Add missing spi_device_id for jg10309-01
- block: Fix where bio IO priority gets set
- tools: hv: rm .*.cmd when make clean
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- smb: client: fix hang in wait_for_response() for negproto
- spi: bcm63xx: Enable module autoloading
- drm: komeda: Fix an issue related to normalized zpos
- ALSA: hda: add HDMI codec ID for Intel PTL
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: intel: fix module autoloading
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- wifi: iwlwifi: clear trans-&gt;state earlier upon error
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: lower message level for FW buffer destination
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- net: ftgmac100: Ensure tx descriptor updates are visible
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- microblaze: don't treat zero reserved memory regions as error
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- pinctrl: at91: make it work with current gpiolib
- scsi: lpfc: Fix overflow build issue
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ASoC: allow module autoloading for table board_ids
- ASoC: allow module autoloading for table db1200_pids
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: SOF: mediatek: Add missing board compatible
- !12151  nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add poll mod list filling check
- !12141  drm/vmwgfx: Fix prime with external buffers
- drm/vmwgfx: Fix prime with external buffers
- !12129  bpf: Remove tst_run from lwt_seg6local_prog_ops.
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
- !12296  drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- !12200  CVE-2024-38608
- net/mlx5e: Fix netif state handling
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args
- !12201  netfilter: nf_tables: use timestamp to check for set element timeout
- netfilter: nf_tables: use timestamp to check for set element timeout
- !12295  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- !12306 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.51-6.6.52 LTS Patches
- riscv: dts: starfive: add assigned-clock* to limit frquency
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- cifs: Fix signature miscalculation
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- drm/i915/guc: prevent a possible int overflow in wq offsets
- spi: geni-qcom: Fix incorrect free_irq() sequence
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/nouveau/fb: restore init() for ramgp102
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- tracing/osnoise: Fix build when timerlat is not enabled
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- selftests: net: csum: Fix checksums for packets with non-zero padding
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- octeontx2-af: Modify SMQ flush sequence to drop packets
- fou: fix initialization of grc
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- IB/mlx5: Rename 400G_8X speed to comply to naming convention
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5: Update the list of the PCI supported devices
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- ice: fix VSI lists confusion when adding VLANs
- ice: fix accounting for filters shared by multiple VSIs
- ice: Fix lldp packets dropping after changing the number of channels
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- cxl/core: Fix incorrect vendor debug UUID define
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- drm/amd/display: Fix FEC_READY write on DP LT
- drm/amd/display: Disable error correction if it's not supported
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- net: xilinx: axienet: Fix race in axienet_stop
- mm: avoid leaving partial pfn mappings around in error case
- x86/hyperv: fix kexec crash due to VP assist page corruption
- dm-integrity: fix a race condition when accessing recalc_sector
- net: tighten bad gso csum offset check in virtio_net_hdr
- minmax: reduce min/max macro expansion in atomisp driver
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- NFSv4: Fix clearing of layout segments in layoutreturn
- smb/server: fix return value of smb2_open()
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- drm/msm/adreno: Fix error return if missing firmware-name
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- scripts: kconfig: merge_config: config files: add a trailing newline
- HID: multitouch: Add support for GT7868Q
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- Input: ads7846 - ratelimit the spi_sync error message
- btrfs: update target inode's ctime on unlink
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- net: phy: vitesse: repair vsc73xx autonegotiation
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- net: ethernet: use ip_hdrlen() instead of bit shift
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: remove extraneous rx URB length check
- ksmbd: override fsids for smb2_query_info()
- ksmbd: override fsids for share path check
- nvmem: u-boot-env: error if NVMEM device is too small
- nvmem: u-boot-env: improve coding style
- nvmem: u-boot-env: use nvmem device helpers
- nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
- nvmem: core: add nvmem_dev_size() helper
- iio: adc: ad7124: fix DT configuration parsing
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- device property: Introduce device_for_each_child_node_scoped()
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
- !12301  bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- !12291 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.50-6.6.51 LTS Patches
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- x86/mm: Fix PTI for i386 some more
- membarrier: riscv: Add full memory barrier in switch_mm()
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
- riscv: Do not restrict memory size because of linear mapping on nommu
- riscv: Fix toolchain vector detection
- gpio: modepin: Enable module autoloading
- gpio: rockchip: fix OF node leak in probe()
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- nvme-pci: allocate tagset on reset if necessary
- ASoC: tegra: Fix CBB error during probe()
- powerpc/vdso: Don't discard rela sections
- powerpc/64e: Define mmu_pte_psize static
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: remove unused IBM HTW code
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- crypto: starfive - Fix nent assignment in rsa dec
- crypto: starfive - Align rsa input data to 32-bit
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- ata: libata-scsi: Remove redundant sense_buffer memsets
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- drm/amd: Add gfx12 swizzle mode defs
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
- workqueue: Improve scalability of workqueue watchdog touch
- workqueue: wq_watchdog_touch is always called with valid CPU
- Revert "mm: skip CMA pages when they are not available"
- mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- usb: dwc3: Avoid waking up gadget during startxfer
- usb: cdns2: Fix controller reset issue
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- iio: adc: ad7124: fix chip ID mismatch
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix config comparison
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- intel: legacy: Partial revert of field get conversion
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- ACPI: CPPC: Add helper to get the highest performance value
- riscv: Use accessors to page table entries instead of direct dereference
- riscv: mm: Only compile pgtable.c if MMU
- mm: Introduce pudp/p4dp/pgdp_get() functions
- riscv: Use WRITE_ONCE() when setting page table entries
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- usbnet: ipheth: race between ipheth_close and error handling
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
- i3c: master: svc: resend target address when get NACK
- vfs: Fix potential circular locking through setxattr() and removexattr()
- regmap: maple: work around gcc-14.1 false-positive warning
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- tcp: Don't drop SYN+ACK for simultaneous connect().
- riscv: set trap vector earlier
- cxl/region: Verify target positions using the ordered target list
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- fs/ntfs3: Check more cases when directory is corrupted
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- drm/amdgpu: reject gang submit on reserved VMIDs
- dma-mapping: benchmark: Don't starve others when doing the test
- ext4: fix possible tid_t sequence overflows
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- crypto: qat - fix unintentional re-enabling of error interrupts
- scsi: pm80xx: Set phy-&gt;enable_completion only when we wait for it
- virtio_ring: fix KMSAN error for premapped mode
- devres: Initialize an uninitialized struct member
- cgroup: Protect css-&gt;cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- phy: zynqmp: Take the phy mutex in xlate
- firmware: cs_dsp: Don't allow writes to read-only controls
- xen: privcmd: Fix possible access to a freed kirqfd instance
- selftests: net: enable bind tests
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- r8152: fix the firmware doesn't work
- fou: Fix null-ptr-deref in GRO.
- bareudp: Fix device stats updates.
- bpf, net: Fix a potential race in do_sock_getsockopt()
- net/socket: Break down __sys_getsockopt
- net/socket: Break down __sys_setsockopt
- bpf: Add sockptr support for setsockopt
- bpf: Add sockptr support for getsockopt
- usbnet: modern method to get random MAC
- ice: do not bring the VSI up, if it was down before the XDP setup
- ice: protect XDP configuration with a mutex
- igc: Unlock on error in igc_io_resume()
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- ice: Add netif_device_attach/detach into PF reset flow
- igb: Fix not clearing TimeSync interrupts for 82580
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- rust: kbuild: fix export of bss symbols
- rust: Use awk instead of recent xargs
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
- can: m_can: Release irq on error in m_can_open
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- ice: Check all ice_vsi_rebuild() errors in function
- vfio/spapr: Always clear TCEs before unsetting the window
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- drm/amdgpu: Fix smatch static checker warning
- drm/amd/display: Check HDCP returned status
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- leds: spi-byte: Call of_node_put() on error path
- media: vivid: fix wrong sizeimage value for mplane
- riscv: kprobes: Use patch_text_nosync() for insn slots
- fs/ntfs3: One more reason to mark inode bad
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
- netfilter: nf_conncount: fix wrong variable type
- iommu: sun50i: clear bypass register
- x86/kmsan: Fix hook for unaligned accesses
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- bpf, verifier: Correct tail_call_reachable for bpf prog
- smack: unix sockets: fix accept()ed socket label
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- ALSA: control: Apply sanity check of input values for user elements
- drm/i915: Do not attempt to load the GSC multiple times
- nilfs2: fix state management in error path of log writing function
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
- x86/apic: Make x2apic_disable() work correctly
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- net: mctp-serial: Fix missing escapes on transmit
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Only clear timer if a kthread exists
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- fuse: fix memory leak in fuse_create_open
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: cqhci: Fix checking of CQHCI_HALT state
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: core: apply SD quirks earlier during probe
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- rust: macros: provide correct provenance when constructing THIS_MODULE
- rust: types: Make Opaque::get const
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- x86/kaslr: Expose and use the end of the physical memory address space
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/tdx: Fix data leak in mmio_read()
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- net: microchip: vcap: Fix use-after-free error in kunit test
- !12289  CVE-2024-46691
- usb: typec: ucsi: Move unregister out of atomic section
- !12223 [sync] PR-11910:  ext4: dax: Fix inconsistent isize during writing
- ext4: dax: keep orphan list before truncate overflow allocated blocks
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- !12146  mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- mm: page_cache_ra_order: Restore 'PF_MEMALLOC_NOFS' flag in 'fallback' branch
- !12090  USB: usbtmc: prevent kernel-usb-infoleak
- USB: usbtmc: prevent kernel-usb-infoleak
- !12286 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.49-6.6.50 LTS Patches
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- virtio_net: Fix napi_skb_cache_put warning
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add skip_hw_access checks for sriov
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- f2fs: fix to do sanity check on blocks for inline_data inode
- wifi: cfg80211: make hash table duplicates more survivable
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
- gfs2: Revert "Add quota_change type"
- crypto: stm32/cryp - call finalize with bh disabled
- drm/meson: plane: Add error handling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- smack: tcp: ipv4, fix incorrect labeling
- regmap: spi: Fix potential off-by-one when calculating reserved size
- drm/amdgu: fix Unintentional integer overflow for mall size
- net: remove NULL-pointer net parameter in ip_metrics_convert
- fsnotify: clear PARENT_WATCHED flags lazily
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- media: v4l2-cci: Always assign *val
- rcu/nocb: Remove buggy bypass lock contention mitigation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- ionic: fix potential irq name truncation
- RDMA/efa: Properly handle unexpected AQ completions
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- hwspinlock: Introduce hwspin_lock_bust()
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- PCI: al: Check IORESOURCE_BUS existence during probe
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- wifi: iwlwifi: remove fw_running op
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/amd/pm: check negtive return for table entries
- drm/amd/pm: check specific index for smu13
- drm/amd/pm: check specific index for aldebaran
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix uninitialized variable warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: dump userspace addrs list
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: make pm_remove_addrs_and_subflows static
- ASoC: codecs: ES8326: button detect issue
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- i2c: Fix conditional for substituting empty ACPI functions
- ASoC: amd: yc: Support mic on HP 14-em0002la
- smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- btrfs: tree-checker: validate dref root and objectid
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- scsi: ufs: core: Check LSDBS cap when !mcq
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- !12281 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.48-6.6.49 LTS Patches
- apparmor: fix policy_unpack_test on big endian systems
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- ARM: dts: omap3-n900: correct the accelerometer orientation
- usb: cdnsp: fix for Link TRB with TC
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- USB: serial: option: add MeiG Smart SRM825L
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: pmic_glink: Fix race during initialization
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- drm/amd/display: avoid using null object of framebuffer
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- gtp: fix a potential NULL pointer dereference
- bonding: change ipsec_lock from spin lock to mutex
- bonding: extract the use of real_device into local variable
- bonding: implement xdo_dev_state_free and call it after deletion
- selftests: forwarding: local_termination: Down ports on cleanup
- selftests: forwarding: no_forwarding: Down ports on cleanup
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- iommu: Do not return 0 from map_pages if it doesn't do anything
- Bluetooth: hci_core: Fix not handling hibernation actions
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- dmaengine: dw: Add memory bus width verification
- dmaengine: dw: Add peripheral bus width verification
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- soundwire: stream: fix programming slave ports for non-continous port maps
- phy: fsl-imx8mq-usb: fix tuning parameter name
- iommufd: Do not allow creating areas without READ or WRITE
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- mm: Fix missing folio invalidation calls during truncation
- ovl: ovl_parse_param_lowerdir: Add missed '
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE
- ASoC: SOF: amd: Fix for acp init sequence
- ASoC: amd: acp: fix module autoloading
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration"
- drm/vmwgfx: Fix prime with external buffers
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/amdgpu: align pp_power_profile_mode with kernel docs
- selftests: mptcp: join: check re-re-adding ID 0 endp
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check removing ID 0 endpoint
- mptcp: pm: ADD_ADDR 0 is not a new address
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: sched: check both backup in retrans
- mptcp: close subflow when receiving TCP+FIN
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- wifi: mwifiex: duplicate static structs used in driver instances
- wifi: wfx: repair open network AP mode
- of: Add cleanup.h based auto release via __free(device_node) markings
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- btrfs: run delayed iputs when flushing delalloc
- LoongArch: Remove the unused dma-direct.h
- ALSA: seq: Skip event type filtering for UMP events
- !12276  mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- mm: mem_reliable: Initialize reliable_nr_page when mm_init()
- !12178  net: stmmac: move the EST lock to struct stmmac_priv
- net: stmmac: move the EST lock to struct stmmac_priv
- !12181  net: ena: Add validation for completion descriptors consistency
- net: ena: Add validation for completion descriptors consistency
- !12255  drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Ensure index calculation will not overflow
- !12214  platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- !12147  wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- !9955 [OLK-6.6]HYGON: CSV3 patch series part 1 (Secure memory management and initialization for CSV3)
- crypto: ccp: Add SET_SMR/SET_SMCR commands for CSV3
- x86/mm: Manage CSV3 guest's private memory by CMA
- crypto: ccp: Define CSV3 key management command id
- KVM: SEV: Pin SEV guest memory out of CMA area
- !12253  RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- !12217 v2  RDMA/hns: Fix new mmaped pages during resetting
- RDMA/hns: Fix new mmaped pages during resetting
- !12216 ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- !12209  net/hinic3: fix version showed in ethtool
- net/hinic3: fix version showed in ethtool
- !12218  KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS
- !11667 Adds Nebula S1000 series network snic driver
- Net:nbl_core: Add nbl_core-driver for nebula-matrix S1055AS series smart NIC.
- !12036  KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- KVM: arm64: Add new HiSi CPU type for supporting DVMBM
- !12112 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.47-6.6.48 LTS Patches
- Revert "s390/dasd: Establish DMA alignment"
- ksmbd: fix race condition between destroy_previous_session() and smb2 operations()
- drm/amdgpu/vcn: not pause dpg for unified queue
- drm/amdgpu/vcn: identify unified queue in sw init
- selftests/bpf: Add a test to verify previous stacksafe() fix
- ALSA: timer: Relax start tick time check for slave timer elements
- igc: Fix qbv tx latency by setting gtxoffset
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- drm/msm/mdss: specify cfg bandwidth for SDM670
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- Revert "drm/amd/display: Validate hw_points_num before using it"
- Revert "usb: gadget: uvc: cleanup request when not in correct state"
- selftests: mptcp: join: check re-using ID of closed subflow
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- nouveau/firmware: use dma non-coherent allocator
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- pmdomain: imx: scu-pd: Remove duplicated clocks
- mmc: dw_mmc: allow biu and ciu clocks to defer
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- cxgb4: add forgotten u64 ivlan cast before shift
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3
- HID: wacom: Defer calculation of resolution until resolution_code is known
- MIPS: Loongson64: Set timer mode in cpu-probe
- net: dsa: microchip: fix PTP config failure when using multiple ports
- drm/amdgpu: Validate TA binary size
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- scsi: core: Fix the return value of scsi_logical_block_count()
- smb: client: ignore unhandled reparse tags
- drm/msm: fix the highest_bank_bit for sc7180
- drm/msm/mdss: Handle the reg bus ICC path
- drm/msm/mdss: Rename path references to mdp_path
- drm/msm/mdss: switch mdss to use devm_of_icc_get()
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm/dpu: try multirect based on mdp clock limits
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: drop MSM_ENC_VBLANK support
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: don't play tricks with debug macros
- net: ovs: fix ovs_drop_reasons error
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- octeontx2-af: Fix CPT AF register offset calculation
- netfilter: flowtable: validate vlan header
- udp: fix receiving fraglist GSO packets
- igb: cope with large MAX_SKB_FRAGS
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- ice: fix truesize operations for PAGE_SIZE &gt;= 8192
- ice: fix ICE_LAST_OFFSET formula
- ice: fix page reuse when PAGE_SIZE is over 8k
- bonding: fix xfrm state handling when clearing active slave
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix bond_ipsec_offload_ok return type
- ip6_tunnel: Fix broken GRO
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- net: mctp: test: Use correct skb for route input check
- selftests: udpgro: report error when receive failed
- tc-testing: don't access non-existent variable on exception
- net: mscc: ocelot: serialize access to the injection/extraction groups
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- Bluetooth: hci_core: Fix LE quote calculation
- drm/amdkfd: reserve the BO before validating it
- ALSA: hda/tas2781: Use correct endian conversion
- platform/surface: aggregator: Fix warning when controller is destroyed in probe
- drm/amd/amdgpu: command submission parser for JPEG
- drm/amd/display: fix cursor offset on rotation 180
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: Adjust cursor position
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- selftests/mm: log run_vmtests.sh results in TAP format
- tools/testing/selftests/mm/run_vmtests.sh: lower the ptrace permissions
- dm suspend: return -ERESTARTSYS instead of -EINTR
- riscv: entry: always initialize regs-&gt;a0 to -ENOSYS
- i2c: stm32f7: Add atomic_xfer method to driver
- jfs: define xtree root and page independently
- nvme: fix namespace removal list
- EDAC/skx_common: Allow decoding of SGX addresses
- ionic: check cmd_regs before copying in or out
- ionic: use pci_is_enabled not open code
- hrtimer: Prevent queuing of hrtimer without a function callback
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent
- nvme: use srcu for iterating namespace list
- selftests/bpf: Fix a few tests for GCC related warnings.
- nvmet-rdma: fix possible bad dereference when freeing rsps
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- platform/x86: lg-laptop: fix %s null argument warning
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- rtc: nct3018y: fix possible NULL dereference
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: push errors up from add_async_extent()
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- f2fs: stop checkpoint when get a out-of-bounds segment
- rxrpc: Don't pick values out of the wire header when setting up security
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- memory: stm32-fmc2-ebi: check regmap_read return value
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- netlink: hold nlk-&gt;cb_mutex longer in __netlink_dump_start()
- tick: Move got_idle_tick away from common flags
- clocksource/drivers/arm_global_timer: Guard against division by zero
- accel/habanalabs: fix debugfs files permissions
- virtiofs: forbid newlines in tags
- hrtimer: Select housekeeping CPU during migration
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- wifi: iwlwifi: mvm: avoid garbage iPN
- media: drivers/media/dvb-core: copy user arrays safely
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- riscv: blacklist assembly symbols for kprobe
- quota: Remove BUG_ON from dqget()
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- fuse: fix UAF in rcu pathwalks
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race
- btrfs: zlib: fix and simplify the inline extent decompression
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- EDAC/skx_common: Filter out the invalid address
- gfs2: Refcounting fix in gfs2_thaw_super
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload
- evm: don't copy up 'security.evm' xattr
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode
- ionic: no fw read when PCI reset failed
- ionic: prevent pci disable of already disabled device
- powerpc/pseries/papr-sysparm: Validate buffer object lengths
- hwmon: (pc87360) Bounds check data-&gt;innr usage
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- memory: tegra: Skip SID programming if SID registers aren't set
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs
- arm64: Fix KASAN random tag seed initialization
- powerpc/topology: Check if a core is online
- cpu/SMT: Enable SMT only if a core is online
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: work around `bindgen` 0.69.0 issue
- hwmon: (ltc2992) Avoid division by zero
- IB/hfi1: Fix potential deadlock on &amp;irq_src_lock and &amp;dd-&gt;uctxt_lock
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware()
- wifi: iwlwifi: fw: Fix debugfs command sending
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- wifi: mac80211: flush STA queues on unauthorization
- scsi: spi: Fix sshdr use
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend
- iommu/arm-smmu-qcom: Add SDM670 MDSS compatible
- media: qcom: venus: fix incorrect return value
- drm/tegra: Zero-initialize iosys_map
- binfmt_misc: cleanup on filesystem umount
- accel/habanalabs: fix bug in timestamp interrupt handling
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE
- accel/habanalabs/gaudi2: unsecure tpc count registers
- media: s5p-mfc: Fix potential deadlock on condlock
- staging: ks7010: disable bh on tx_dev_lock
- drm/amd/display: Validate hw_points_num before using it
- usb: gadget: uvc: cleanup request when not in correct state
- wifi: mt76: fix race condition related to checking tx queue fill status
- staging: iio: resolver: ad2s1210: fix use before initialization
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage
- media: radio-isa: use dev_name to fill in bus_info
- drm/amdkfd: Move dma unmapping after TLB flush
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan
- drm/bridge: tc358768: Attempt to fix DSI horizontal timings
- s390/smp,mcck: fix early IPI handling
- RDMA/rtrs: Fix the problem of variable not initialized fully
- i2c: riic: avoid potential division by zero
- cgroup: Avoid extra dereference in css_populate_dir()
- wifi: cw1200: Avoid processing an invalid TIM IE
- sched/topology: Handle NUMA_NO_NODE in sched_numa_find_nth_cpu()
- net: ethernet: mtk_wed: check update_wo_rx_stats in mtk_wed_update_rx_stats()
- rcu: Eliminate rcu_gp_slow_unregister() false positive
- rcu: Dump memory object info if callback function is invalid
- mm: Remove kmem_valid_obj()
- wifi: iwlwifi: mvm: fix recovery flow in CSA
- wifi: mac80211: fix BA session teardown race
- wifi: cfg80211: check wiphy mutex is held for wdev mutex
- wifi: mac80211: lock wiphy in IP address notifier
- ASoC: cs35l45: Checks index of cs35l45_irqs[]
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- drm/amdgpu: access RLC_SPM_MC_CNTL through MMIO in SRIOV runtime
- drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored
- drm/amd/pm: fix error flow in sensor fetching
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- gpio: mlxbf3: Support shutdown() function
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx
- netfilter: nf_tables: nft_obj_filter fits into cb-&gt;ctx
- netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx
- netfilter: nf_tables: A better name for nft_obj_filter
- netfilter: nf_tables: Unconditionally allocate nft_obj_filter
- netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: flowtable: initialise extack before use
- netfilter: allow ipv6 fragments to arrive on different devices
- tcp: Update window clamping condition
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- mlxbf_gige: disable RX filters until RX path initialized
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- igc: Fix reset adapter logics when tx mode change
- igc: Fix qbv_config_change_errors logics
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- bpf: Fix updating attached freplace prog in prog_array map
- s390/uv: Panic for set and remove shared access UVC errors
- drm/amdgpu/jpeg4: properly set atomics vmid field
- drm/amdgpu/jpeg2: properly set atomics vmid field
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- btrfs: tree-checker: add dev extent item checks
- btrfs: zoned: properly take lock to read/update block group's zoned variables
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- selinux: add the processing of the failure of avc_add_xperms_decision()
- selinux: fix potential counting error in avc_add_xperms_decision()
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- btrfs: rename bitmap_set_bits() -&gt; btrfs_bitmap_set_bits()
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- KVM: s390: fix validity interception issue when gisa is switched off
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- ALSA: hda/tas2781: fix wrong calibrated data order
- thunderbolt: Mark XDomain as unplugged when router is removed
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- char: xillybus: Refine workqueue handling
- char: xillybus: Don't destroy workqueue from work item running on it
- selinux: revert our use of vma_is_initial_heap()
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- tty: atmel_serial: use the correct RTS flag.
- !12087  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- !6996  sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- sched/fair: Optimize performance by inlining cpu_util_without() and cpu_util()
- !12080  btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: clean up our handling of refs == 0 in snapshot delete
- !12052  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- !12082  userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
- !12077  ELF: fix kernel.randomize_va_space double read
- ELF: fix kernel.randomize_va_space double read
- !12068  usb: gadget: aspeed_udc: validate endpoint index for ast udc
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
- !12057  netfilter: nft_socket: fix sk refcount leaks
- netfilter: nft_socket: fix sk refcount leaks
- !11954  drm/amdgpu: fix the waring dereferencing hive
- drm/amdgpu: fix the waring dereferencing hive
- !12059  mptcp: pm: Fix uaf in __timer_delete_sync
- mptcp: pm: Fix uaf in __timer_delete_sync
- !12058  net: dpaa: Pad packets to ETH_ZLEN
- net: dpaa: Pad packets to ETH_ZLEN
- !12076  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
- !11966  drm/amd/pm: Fix negative array index read
- drm/amd/pm: Fix negative array index read

' for pr_err</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-48.0.0.53" date="1730289600">- !12565  KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- !12498  nbd: fix race between timeout and normal completion
- nbd: fix race between timeout and normal completion
- !10861 [OLK-6.6] perf/x86/uncore: Add support for Hygon family 18h model 4h-7h   and 10h DF PMU
- perf/x86/uncore: Add DF PMU support for Hygon family 18h model 4h-7h and 10h
- !12673  ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- !12653  usb: typec: tipd: Free IRQ only if it was requested before
- usb: typec: tipd: Free IRQ only if it was requested before
- !12632  ALSA: asihpi: Fix potential OOB array access
- ALSA: asihpi: Fix potential OOB array access
- !12635  bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- !12491  LoongArch: fix some 3C6000&amp;LS7A related problems
- LoongArch: Add workaround for 3C6000 about io wr/rd
- Loongarch: Dynamic enable writecombine
- acpi: mcfg quirk: Increased multi-chip support for the 3C6000
- pci/quirks: LS7A2000 enable msi
- !12331  LoongArch: prevent LS7A Bus Master clearing on kexec
- LoongArch: prevent LS7A Bus Master clearing on kexec
- !12321  LoongArch: backport 3 patches from upstream
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- LoongArch: Add writecombine support for DMW-based ioremap()
- LoongArch: Change SHMLBA from SZ_64K to PAGE_SIZE
- !12557  ntfs3: Change to non-blocking allocation in ntfs_d_hash
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- !12554  NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
- !12444  nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- !12631  some bugfixs for khuegpaged
- mm: khugepaged: fix the incorrect statistics when collapsing large file folios
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point
- selftests: mm: support shmem mTHP collapse testing
- mm: khugepaged: support shmem mTHP collapse
- mm: khugepaged: support shmem mTHP copy
- mm: khugepaged: use the number of pages in the folio to check the reference count
- mm: khugepaged: expand the is_refcount_suitable() to support file folios
- khugepaged: use a folio throughout hpage_collapse_scan_file()
- khugepaged: use a folio throughout collapse_file()
- khugepaged: remove hpage from collapse_file()
- khugepaged: pass a folio to __collapse_huge_page_copy()
- khugepaged: remove hpage from collapse_huge_page()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: inline hpage_collapse_alloc_folio()
- !12634 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.53-6.6.54 LTS Patches
- Revert: "dm-verity: restart or panic on an I/O error"
- spi: atmel-quadspi: Fix wrong register value written to MR
- x86/tdx: Fix "in-kernel MMIO" check
- thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
- thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
- thunderbolt: Send uevent after asymmetric/symmetric switch
- wifi: brcmfmac: add linefeed at end of file
- iio: magnetometer: ak8975: Fix 'Unexpected device' error
- perf/arm-cmn: Fail DTC counter allocation correctly
- usb: yurex: Fix inconsistent locking bug in yurex_read()
- Documentation: KVM: fix warning in "make htmldocs"
- i2c: isch: Add missed 'else'
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
- module: Fix KCOV-ignored file name
- spi: fspi: add support for imx8ulp
- mm: only enforce minimum stack gap size if it's sensible
- lockdep: fix deadlock issue between lockdep and rcu
- dm-verity: restart or panic on an I/O error
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- thunderbolt: Configure asymmetric link if needed and bandwidth allows
- thunderbolt: Add support for asymmetric link
- thunderbolt: Introduce tb_switch_depth()
- thunderbolt: Introduce tb_for_each_upstream_port_on_path()
- thunderbolt: Introduce tb_port_path_direction_downstream()
- thunderbolt: Change bandwidth reservations to comply USB4 v2
- thunderbolt: Make is_gen4_link() available to the rest of the driver
- thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
- thunderbolt: Use constants for path weight and priority
- thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
- thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
- thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
- thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- btrfs: reorder btrfs_inode to fill gaps
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- lib/bitmap: add bitmap_{read,write}()
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- serial: don't use uninitialized value in uart_poll_init()
- tty: serial: kgdboc: Fix 8250_* kgdb over serial
- pps: add an error check in parport_attach
- pps: remove usage of the deprecated ida_simple_xx() API
- usb: xhci: fix loss of data on Cadence xHC
- xhci: Add a quirk for writing ERST in high-low order
- USB: misc: yurex: fix race between read and write
- usb: yurex: Replace snprintf() with the safer scnprintf() variant
- soc: versatile: realview: fix soc_dev leak during device remove
- soc: versatile: realview: fix memory leak during device remove
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
- icmp: change the order of rate limits
- EDAC/igen6: Fix conversion of system address to physical memory address
- fs: Fix file_set_fowner LSM hook inconsistencies
- vfs: fix race between evice_inodes() and find_inode()&amp;iput()
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: mtk - Use devm_pm_runtime_enable
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: fix several potential integer overflows in file offsets
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- btrfs: tree-checker: fix the wrong output of data backref objectid
- debugobjects: Fix conditions in fill_pool()
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- perf/x86/intel/pt: Fix sampling synchronization
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- ACPI: sysfs: validate return type of _STR method
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- serial: qcom-geni: fix fifo polling timeout
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- firmware_loader: Block path traversal
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- bus: integrator-lm: fix OF node leak in probe()
- usb: dwc2: drd: fix clock gating on USB role switch
- usb: cdnsp: Fix incorrect usb_request status
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: cypress_cy7c63: check for short transfer
- USB: appledisplay: close race between probe and completion handler
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usbnet: fix cyclical race on disconnect with work queue
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- scsi: mac_scsi: Disallow bus errors during PDMA send
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- ksmbd: handle caseless file creation
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: make __dir_empty() compatible with POSIX
- fs: Create a generic is_dot_dotdot() utility
- powerpc/atomic: Use YZ constraints for DS-form instructions
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: adp5588-keys - fix check on return code
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
- soc: versatile: integrator: fix OF node leak in probe() error path
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: Use an error code with PCIe failed link retraining
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: Clear the LBMS bit after a link retrain
- PCI: Revert to the original speed after PCIe failed link retraining
- Remove *.orig pattern from .gitignore
- io_uring/sqpoll: do not put cpumask on stack
- io_uring/sqpoll: retain test for whether the CPU is valid
- xen: move checks for e820 conflicts further up
- Revert "net: libwx: fix alloc msix vectors failed"
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- io_uring/sqpoll: do not allow pinning outside of cpuset
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
- netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- virtio_net: Fix mismatched buf address when unmapping for small packets
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- net: qrtr: Update packets cloning when broadcasting
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
- net: xilinx: axienet: Fix packet counting
- net: xilinx: axienet: Schedule NAPI in two steps
- Revert "dm: requeue IO if mapping table not yet available"
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- vhost_vdpa: assign irq bypass producer token correctly
- cxl/pci: Fix to record only non-zero ranges
- interconnect: icc-clk: Add missed num_nodes initialization
- coresight: tmc: sg: Do not leak sg_table
- serial: 8250: omap: Cleanup on error in request_irq
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- iio: magnetometer: ak8975: Convert enum-&gt;pointer for data in the match tables
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- ABI: testing: fix admv8818 attr description
- driver core: Fix error handling in driver API device_rename()
- iio: adc: ad7606: fix standby gpio state to match the documentation
- iio: adc: ad7606: fix oversampling gpio array
- nvme-multipath: system fails to create generic nvme device
- spi: atmel-quadspi: Avoid overwriting delay register settings
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- f2fs: get rid of online repaire on corrupted directory
- f2fs: clean up w/ dotdot_name
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: support .shutdown in f2fs_sops
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: atomic: fix to avoid racing w/ GC
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- crypto: caam - Pad SG length when allocating hash edesc
- ntb: Force physically contiguous allocation of rx ring buffers
- ntb_perf: Fix printk format
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- RDMA/cxgb4: Added NULL check for lookup_atid
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/mlx5: Obtain upper net device only when needed
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/erdma: Return QP state in erdma_query_qp
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- IB/core: Fix ib_cache_setup_one error flow cleanup
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- nfsd: fix refcount leak when file is unhashed after being found
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
- clk: ti: dra7-atl: Fix leak of of_nodes
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- pinctrl: single: fix missing error code in pcs_probe()
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- PCI: xilinx-nwl: Fix register misspelling
- nvdimm: Fix devs leaks in scan_labels()
- x86/PCI: Check pcie_find_root_port() return for NULL
- leds: pca995x: Fix device child node usage in pca995x_probe()
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: leds-pca995x: Add support for NXP PCA9956B
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- firewire: core: correct range of block for case of switch statement
- PCI: Wait for Link before restoring Downstream Buses
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- Input: ilitek_ts_i2c - add report id message validation
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: Use device_get_match_data()
- pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- remoteproc: imx_rproc: Initialize workqueue earlier
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- ext4: check stripe size compatibility on remount as well
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: return error on ext4_find_inline_entry
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- kthread: fix task state in kthread worker if being frozen
- xz: cleanup CRC32 edits from 2018
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix include of &lt;sys/fcntl.h&gt;
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Use pid_t consistently in test_progs.c
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Fix wrong binary in Makefile log output
- selftests/bpf: Add CFLAGS per source file and runner
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Use -Wno-error in certain tests when building with GCC
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Workaround strict bpf_lsm return value check.
- tpm: Clean up TPM space after command failure
- xen/swiotlb: fix allocated size
- xen/swiotlb: add alignment check for dma buffers
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen: add capability to remap non-RAM pages to different PFNs
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: introduce generic helper checking for memory map conflicts
- minmax: avoid overly complex min()/max() macro arguments in xen
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- HID: wacom: Do not warn about dropped packets for first packet
- HID: wacom: Support sequence numbers smaller than 16-bit
- xen: use correct end address of kernel for conflict checking
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/msm: fix %s null argument error
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- powerpc/vdso: Inconditionally use CFUNC macro
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/8xx: Fix initial memory mapping
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/rockchip: vop: Allow 4096px width scaling
- drm/amd/amdgpu: Properly tune the size of struct
- scsi: NCR5380: Check for phase match during PDMA fixup
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- drm/radeon: properly handle vbios fake edid sizing
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- pmdomain: core: Harden inter-column space in debug summary
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- mtd: rawnand: mtk: Fix init error path
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: powernv: Add check devm_kasprintf() returned value
- iommu/amd: Do not set the D bit on AMD v2 table entries
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- power: supply: axp20x_battery: Remove design from min and max voltage
- hwmon: (ntc_thermistor) fix module autoloading
- mtd: slram: insert break after errors in parsing the map
- hwmon: (max16065) Fix alarm attributes
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix overflows seen when writing limits
- ASoC: loongson: fix error release
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Add required dependency for kprobe tests
- ASoC: tas2781-i2c: Get the right GPIO line
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- x86/mm: Use IPIs to synchronize LAM enablement
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
- reset: k210: fix OF node leak in probe() error path
- reset: berlin: fix OF node leak in probe() error path
- ARM: versatile: fix OF node leak in CPUs prepare
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: dts: microchip: sama7g5: Fix RTT clock
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- regulator: Return actual error in of_regulator_bulk_get_all()
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: arm_scmi: Fix double free in OPTEE transport
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- block: fix potential invalid pointer dereference in blk_add_partition
- block: print symbolic error name instead of error code
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- io_uring/io-wq: do not allow pinning outside of cpuset
- block, bfq: fix procress reference leakage for bfqq in merge chain
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- erofs: fix incorrect symlink detection in fast symlink
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- block, bfq: don't break merge chain in bfq_split_bfqq()
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: fix possible UAF for bfqq-&gt;bic with merge chain
- nbd: fix race between timeout and normal completion
- ublk: move zone report data out of request pdu
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- net: tipc: avoid possible garbage value
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- r8169: disable ALDPS per default for RTL8125
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- bareudp: Pull inner IP header on xmit.
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- can: m_can: m_can_close(): stop clocks after device has been shut down
- can: m_can: enable NAPI before enabling interrupts
- sock_map: Add a cond_resched() in sock_hash_free()
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7603: fix mixed declarations and code
- crypto: hisilicon/qm - inject error before stopping queue
- pm:cpupower: Add missing powercap_set_enabled() stub function
- x86/sgx: Fix deadlock in SGX NUMA node search
- wifi: mt76: mt7996: fix EHT beamforming capability check
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- perf/arm-cmn: Ensure dtm_idx is big enough
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Rework DTC counters (again)
- netfilter: nf_tables: remove annotation to access set timeout while holding lock
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- ACPI: CPPC: Fix MASK_VAL() usage
- can: j1939: use correct function name in comment
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- padata: Honor the caller's alignment in case of chunk_size 0
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: mac80211: don't use rate mask for offchannel TX either
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- powercap: intel_rapl: Fix off by one in get_rpi()
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- mount: handle OOM on mnt_warn_timestamp_expiry
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- wifi: rtw88: remove CPT execution branch never used
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: brcmfmac: introducing fwil query functions
- wifi: brcmfmac: export firmware interface functions
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- crypto: xor - fix template benchmarking
- wifi: rtw88: always wait for both firmware loading attempts
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- !12612 Hygon model 4h~fh and 10h ATL issue fix
- EDAC/amd64: Don't use the ATL for Hygon model 4h~fh and 10h processors
- !12464  f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- !12584  drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
- !12461  NFSD: Limit the number of concurrent async COPY operations
- NFSD: Limit the number of concurrent async COPY operations
- !12559  fix CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
- !12462  drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
- !12455  drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func
- !12448  drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer
- !12443  drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- !12533  drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- !12065 Fix VMAPP/VMOVP races
- irqchip/gic-v4: Fix ordering between vmapp and vpe locks
- irqchip/gic-v4: Make sure a VPE is locked when VMAPP is issued
- irqchip/gic-v4: Substitute vmovp_lock for a per-VM lock
- irqchip/gic-v4: Always configure affinity on VPE activation
- !12400  drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- !12429  jfs: Fix uaf in dbFreeBits
- jfs: Fix uaf in dbFreeBits
- !12428  jfs: check if leafidx greater than num leaves per dmap tree
- jfs: check if leafidx greater than num leaves per dmap tree
- !12426  btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- !12427  btrfs: wait for fixup workers before stopping cleaner kthread during umount
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- !12524  netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- !12515  drm/amd/display: Validate function returns
- drm/amd/display: Validate function returns
- !12365  x86/ioapic: Handle allocation failures gracefully
- x86/ioapic: Handle allocation failures gracefully
- !12361  cpufreq: Avoid a bad reference count on CPU node
- cpufreq: Avoid a bad reference count on CPU node
- !12476  fix CVE-2024-40965
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- clk: Add a devm variant of clk_rate_exclusive_get()
- !12300 [OLK-6.6] AMD Address Translation Library (ATL) patches
- RAS/AMD/ATL: Fix MI300 bank hash
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation
- RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300()
- RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2()
- RAS: Avoid build errors when CONFIG_DEBUG_FS=n
- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA
- RAS/AMD/FMPM: Safely handle saved records of various sizes
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records()
- RAS/AMD/FMPM: Fix off by one when unwinding on error
- RAS/AMD/FMPM: Add debugfs interface to print record entries
- RAS/AMD/FMPM: Save SPA values
- RAS: Introduce a FRU memory poison manager
- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization
- RAS/AMD/ATL: Validate address map when information is gathered
- RAS/AMD/ATL: Expand helpers for adding and removing base and hole
- RAS/AMD/ATL: Read DRAM hole base early
- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix
- EDAC/amd64: Use new AMD Address Translation Library
- RAS: Export helper to get ras_debugfs_dir
- RAS/AMD/ATL: Add MI300 row retirement support
- RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support
- RAS/AMD/ATL: Add MI300 support
- RAS: Introduce AMD Address Translation Library
- !12440  CVE-2024-35964
- Bluetooth: ISO: Fix not validating setsockopt user input
- !12438  CVE-2024-35949
- btrfs: make sure that WRITTEN is set on all metadata blocks
- !12410  iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- !12389  mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/swapfile: skip HugeTLB pages for unuse_vma
- !12363  md: use RCU lock to protect traversal in md_spares_need_change()
- md: use RCU lock to protect traversal in md_spares_need_change()
- !12351  i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- !12394  tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix a race during cpuhp processing
- !12397  tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Drop interface_lock in stop_kthread()
- !12399  wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- !12390  RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- RDMA/hns: Fix missing spin_lock_init() for qp flush lock
- !12273  drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix mc_data out-of-bounds read warning
- !12263  drm/amd/display: Avoid overflow from uint32_t to uint8_t
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- !12288 [OLK-6.6] AMD Turin perf vendor event patches
- perf vendor events amd: Add Zen 5 mapping
- perf vendor events amd: Add Zen 5 metrics
- perf vendor events amd: Add Zen 5 uncore events
- perf vendor events amd: Add Zen 5 core events
- tracing: Add the ::microcode field to the mce_record tracepoint
- tracing: Add the ::ppin field to the mce_record tracepoint
- x86/mce: Clean up TP_printk() output line of the 'mce_record' tracepoint
- !12322  LoongArch: fix dma-direct.h not found
- LoongArch: fix dma-direct.h not found
- !12293  nfsd: return -EINVAL when namelen is 0
- nfsd: return -EINVAL when namelen is 0
- !12335  ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- !12338  drm/amd/display: Add NULL pointer check for kzalloc
- drm/amd/display: Add NULL pointer check for kzalloc
- !12317  nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: call cache_put if xdr_reserve_space returns NULL
- !12066  drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: added NULL check at start of dc_validate_stream</changelog>
  <changelog author="jchzhou &lt;zhoujiacheng@iscas.ac.cn&gt; - 6.6.0-48.0.0.54" date="1730289601">- create &amp; package symvers-kernelver.gz unconditionally to fix ISO installation
faliures like in issue #I7MARC</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-50.0.0.55" date="1730894400">- !12979  ext4: fix timer use-after-free on failed mount
- ext4: fix timer use-after-free on failed mount
- !12980  ext4: no need to continue when the number of entries is 1
- ext4: no need to continue when the number of entries is 1
- !12983  CVE-2024-49968
- ext4: fix error message when rejecting the default hash
- ext4: filesystems without casefold feature cannot be mounted with siphash
- !12981  ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- !12982  ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- !12978  exfat: fix memory leak in exfat_load_bitmap()
- exfat: fix memory leak in exfat_load_bitmap()
- !12977  ext4: fix access to uninitialised lock in fc replay path
- ext4: fix access to uninitialised lock in fc replay path
- !13018 nebula-matrix: fix ci build warning when use clang
- Net: nebula_matrix: fix ci build warning
- !12866  fix CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
- !12595  scsi: fnic: Move flush_work initialization out of if block
- scsi: fnic: Move flush_work initialization out of if block
- !13004  CVE-2024-50064
- zram: don't free statically defined names
- zram: free secondary algorithms names
- !13044  Some patches of RDMA/hns from Linux to OLK-6.6
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Modify debugfs name
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- Revert "RDMA/hns: Fix flush cqe error when racing with destroy qp"
- Revert "RDMA/hns: Fix missing spin_lock_init() for qp flush lock"
- !13049  ext4: some dependencies of CVE-2024-47701
- ext4: explicitly exit when ext4_find_inline_entry returns an error
- ext4: ext4_search_dir should return a proper error
- !12682  smb: client: fix UAF in async decryption
- smb: client: fix UAF in async decryption
- !13023  l2tp: prevent possible tunnel refcount underflow
- l2tp: prevent possible tunnel refcount underflow
- !13025  wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
- !13024  wifi: cfg80211: Set correct chandef when starting CAC
- wifi: cfg80211: Set correct chandef when starting CAC
- !12993  igb: Do not bring the device up after non-fatal error
- igb: Do not bring the device up after non-fatal error
- !12988  mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- !12800  cachefiles: fix dentry leak in cachefiles_open_file()
- cachefiles: fix dentry leak in cachefiles_open_file()
- !12900  ext4: fix double brelse() the buffer of the extents path
- ext4: fix double brelse() the buffer of the extents path
- !12896  ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- !12960  ext4: update orig_path in ext4_find_extent()
- ext4: update orig_path in ext4_find_extent()
- !13012  drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- drm/amd/display: Revert "drm/amd/display: Fix potential index out of bounds in color transformation function"
- !12909  btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- !12906  io_uring: fix CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
- io_uring: always lock __io_cqring_overflow_flush
- !12892  ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- !12957  rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- rseq/mm_cid: change the mm_cid macro default status and keep KABI consistent
- !12377  ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- !12497  drm/stm: Avoid use-after-free issues with crtc and plane
- drm/stm: Avoid use-after-free issues with crtc and plane
- !12775  vt: prevent kernel-infoleak in con_font_get()
- vt: prevent kernel-infoleak in con_font_get()
- !12883  CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- !12774  net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- !12776  drm/amd/display: Check stream before comparing them
- drm/amd/display: Check stream before comparing them
- !12940 virtCCA feature: GPU supports maximum 1G page table mapping
- virtcca feature : GPU supports maximum 1G page table mapping.
- !12952  drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
- !12942  fix CVE-2024-47704
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- drm/amd/display: Check link_res-&gt;hpo_dp_link_enc before using it
- !12953  mm: gup: stop abusing try_grab_folio
- mm: gup: stop abusing try_grab_folio
- !9209 [OLK-6.6] perf/x86/zhaoxin/uncore: update KX-7000 support
- perf/x86/zhaoxin/uncore: update KX-7000 support
- !9191 [OLK-6.6]  x86/cpu: Remove pointless evaluation of x86_coreid_bits
- x86/cpu: Remove pointless evaluation of x86_coreid_bits
- !9156 [OLK-6.6] USB: Fix kernel NULL pointer when unbind UHCI form vfio-pci
- USB:Fix kernel NULL pointer when unbind UHCI form vfio-pci
- !7927 [OLK-6.6] fix intel-lkp compilation issues for DMA patch
- x86/cpu/zhaoxin: kx-40000: Apply the static modifier to some symbols
- x86/cpu/zhaoxin: Encapsulate access to kh40000_dma_direct_ops within function
- x86/cpu/zhaoxin: Encapsulate access to global variables within functions
- x86/cpu/zhaoxin: Adjust the configuration options for zhaoxin-kx40000.c
- x86/cpu/zhaoxin: kx40000: fix bitwise warning issue
- !7874 [OLK-6.6] iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- iommu/dma: Move iova_reserve_domain_addr to header dma-iommu.h
- !12835 Net: nebula-matrix: fix ci build warning
- Net: nebula_matrix: fix ci build warning
- !12550  fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- !12871  Fix CVE-2024-47703
- selftests/bpf: Add return value checks for failed tests
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fix kabi breakage in struct bpf_func_state
- bpf: Fix compare error in function retval_range_within
- bpf, lsm: Add check for BPF LSM return value
- bpf, lsm: Add disabled BPF LSM hook list
- bpf: enforce precise retval range on program exit
- bpf: enforce exact retval range on subprog/callback exit
- !12712  drm: omapdrm: Add missing check for alloc_ordered_workqueue
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- !12838  ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: reserve space for inline xattr before attaching reflink tree
- !12372  fix CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- !12358  fix CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- !12822  i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
- !12918  Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix NULL pointer dereference
- !12874  tipc: guard against string buffer overrun
- tipc: guard against string buffer overrun
- !12916  serial: protect uart_port_dtr_rts() in uart_shutdown() too
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
- !12843 v4  CVE-2024-50063
- selftests/bpf: Add test for lsm tail call
- bpf: Fix kabi breakage in struct bpf_map
- bpf: Prevent tail call between progs attached to different hooks
- !12932  gso: fix udp gso fraglist segmentation after pull from frag_list
- gso: fix udp gso fraglist segmentation after pull from frag_list
- !12933  tcp: fix mptcp DSS corruption due to large pmtu xmit
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- !12922  ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- !12913  drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- drm/msm/adreno: Assign msm_gpu-&gt;pdev earlier to avoid nullptrs
- !12888  drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr-&gt;funcs in dcn30_init_hw
- !12769  uprobes: fix kernel info leak via "[uprobes
- uprobes: fix kernel info leak via "[uprobes]" vma
- !12717  wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath12k: fix array out-of-bound access in SoC stats
- !12742  net/xen-netback: prevent UAF in xenvif_flush_hash()
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- !12738  r8169: add tally counter fields added with RTL8125
- r8169: add tally counter fields added with RTL8125
- !12805  ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- !12637  kthread: unpark only parked kthread
- kthread: unpark only parked kthread
- !12473  scsi: wd33c93: Don't use stale scsi_pointer value
- scsi: wd33c93: Don't use stale scsi_pointer value
- !12688  security/keys: fix slab-out-of-bounds in key_task_permission
- security/keys: fix slab-out-of-bounds in key_task_permission
- !12791  slip: make slhc_remember() more robust against malicious packets
- slip: make slhc_remember() more robust against malicious packets
- !12607 virtcca compile warning clean and coda bugfix
- virtcca bugfix: compile warning clean
- virtcca bugfix: clear device msi address
- virtcca bugfix: compile warning clean
- !12773 v4  add vdpa support for x86 and enable vdpa migration.
- vdpa: add support for x86 and open vdpa migration build config
- virtio_blk: remove the broken zone revalidation support
- !12759  CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
- !12772 MPTCP Upstream part 16
- selftests: mptcp: diag: avoid extra waiting
- configs/debug: add NET debug config
- MAINTAINERS: update Geliang's email address
- !12771 MPTCP Upstream part 15
- selftests: mptcp: diag: change timeout_poll to 30
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: simult flows: define missing vars
- selftests: mptcp: netlink: drop duplicate var ret
- !12834 [OLK-6.6] drivers: load Yunsilicon ethernet driver when xsc_pci probing
- drivers: load Yunsilicon ethernet driver when xsc_pci probing
- !12817  media: venus: fix use after free bug in venus_remove due to race condition
- media: venus: fix use after free bug in venus_remove due to race condition
- !12599  iommufd: Require drivers to supply the cache_invalidate_user ops
- iommufd: Require drivers to supply the cache_invalidate_user ops
- !12793  uprobe: avoid out-of-bounds memory access of fetching args
- uprobe: avoid out-of-bounds memory access of fetching args
- !12821 v4  openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- openeuler_defconfig: Disable CONFIG_DEBUG_INFO_BTF_MODULES
- !12829  drm/amd/display: Check null-initialized variables
- drm/amd/display: Check null-initialized variables
- !12826  media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- !12827  drm/amd/display: Check null pointers before using them
- drm/amd/display: Check null pointers before using them
- !12767  x86/bugs: Use code segment selector for VERW operand
- x86/bugs: Use code segment selector for VERW operand
- !12506  ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: cancel dqi_sync_work before freeing oinfo
- !12482  device-dax: correct pgoff align in dax_set_mapping()
- device-dax: correct pgoff align in dax_set_mapping()
- !12795  platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- !12816 v2  bpf lts backport
- Fix kabi breakage in struct bpf_map
- bpf: Optimize the free of inner map
- !12747  parport: Proper fix for array out-of-bounds access
- parport: Proper fix for array out-of-bounds access
- !12780 drivers: misc: uacce: bugfix for MAX_ORDER
- drivers: misc: uacce: bugfix for MAX_ORDER
- !12718  thermal: core: Reference count the zone in thermal_zone_get_by_id()
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
- !12707  drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func
- !12768  Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
- !12674  net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- !12736  drm/amd/display: Fix system hang while resume with TBT monitor
- drm/amd/display: Fix system hang while resume with TBT monitor
- !12604  drm/amd/display: Check null pointer before dereferencing se
- drm/amd/display: Check null pointer before dereferencing se
- !12591  cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
- !12465  drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- !12755  pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: stm32: check devm_kasprintf() returned value
- !12715 MPTCP Upstream part 14
- mptcp: check the protocol in mptcp_sk() with DEBUG_NET
- mptcp: check the protocol in tcp_sk() with DEBUG_NET
- mptcp: token kunit: set protocol
- !12711  btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free in add_inode_ref()
- !12728  Backport "ima: Avoid blocking in RCU read-side critical section"
- ima: Avoid blocking in RCU read-side critical section
- Revert "ima: Avoid blocking in RCU read-side critical section"
- !12516  fix CVE-2024-47742
- firmware_loader: Block path traversal
- !12710  fix CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- !12729  CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
- !12720 drivers/crypto/ccp: fix a build error
- drivers/crypto/ccp: fix a build error
- !12666  block: fix integer overflow in BLKSECDISCARD
- block: fix integer overflow in BLKSECDISCARD
- !12608  blk_iocost: fix more out of bound shifts
- blk_iocost: fix more out of bound shifts
- !12656  CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
- ACPI: battery: Simplify battery hook locking
- !12662  drm/amd/display: fix double free issue during amdgpu module unload
- drm/amd/display: fix double free issue during amdgpu module unload
- !12698  mm: memcg: don't periodically flush stats when memcg is disabled
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats
- mm: memcg: don't periodically flush stats when memcg is disabled
- !12345 [OLK-6.6] drivers: update Yunsilicon driver to version rel_2406_rc16
- drivers: update Yunsilicon driver to version 2406_rc16
- !12617  drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
- !12545  Fix TX fifo corruption in patch [3
- serial: sc16is7xx: fix TX fifo corruption
- kfifo: add kfifo_out_linear{,_ptr}()
- serial: sc16is7xx: refactor FIFO access functions to increase commonality
- !12648  net: do not delay dst_entries_add() in dst_release()
- net: do not delay dst_entries_add() in dst_release()
- !12553  Fix CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
- smb: client: fix parsing of device numbers</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-52.0.0.56" date="1731067200">- !13117 nebula-matrix: fix ci build err
- Net: nebula_matrix: fix ci build err
- !12280 fix Hygon TKM may execute fail in CSV VM
- drivers/crypto/ccp: fix the increase in page references caused by gfn_to_pfn
- crypto: ccp: fix the sev_do_cmd panic on non-Hygon platforms
- !13108  nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- !13109  RDMA/hns: Fix DCA mmap area PUAF
- RDMA/hns: Fix DCA mmap area PUAF
- !12848  Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- !13112  fix CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in rcu_tasks_need_gpcb()
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Pull sampling of -&gt;percpu_dequeue_lim out of loop
- !13087 MPTCP Upstream part 18
- selftests: mptcp: add mptcp_lib_check_output helper
- selftests: mptcp: add token for dump_addr
- selftests: mptcp: add userspace pm subflow flag
- mptcp: check userspace pm flags
- !13086 MPTCP Upstream part 17
- mptcp: dump addrs in userspace pm list
- mptcp: add token for get-addr in yaml
- mptcp: implement mptcp_userspace_pm_dump_addr
- mptcp: export mptcp_genl_family &amp; mptcp_nl_fill_addr
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup writer wake-up
- !13084  ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: add refcnt to ksmbd_conn struct
- !12943  bpf: Fix a sdiv overflow issue
- bpf: Fix a sdiv overflow issue
- !13088  drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- !13081  sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- !13066  Fix UAF of rpc_task
- nfs: fix rpc_task use-after-free when open and close different files concurrently
- NFSv4: release seqid when open failed for nfs4.0
- !13069  NFSD: Mark filecache "down" if init fails
- NFSD: Mark filecache "down" if init fails
- !13077 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.54-6.6.55 LTS Patches
- perf python: Allow checking for the existence of warning options in clang
- Revert "ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path"
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: Revert Avoid overflow assignment
- crypto: octeontx* - Select CRYPTO_AUTHENC
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- rxrpc: Fix a race between socket set up and I/O thread creation
- platform/x86: think-lmi: Fix password opcode ordering for workstations
- drm/bridge: adv7511: fix crash on irq during probe
- net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
- netfilter: nf_tables: restore set elements when delete set fails
- netfilter: nf_tables: fix memleak in map from abort path
- ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- btrfs: drop the backref cache during relocation if we commit
- btrfs: relocation: constify parameters where possible
- btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Allow multiple chips id per family of devices
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- remoteproc: k3-r5: Delay notification of wakeup event
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- media: imx335: Fix reset-gpio handling
- media: i2c: imx335: Enable regulator supplies
- RDMA/mana_ib: use the correct page table index based on hardware page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- net: mana: Enable MANA driver on ARM64 with 4K page size
- lib/buildid: harden build ID parsing logic
- build-id: require program headers to be right after ELF header
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- io_uring/net: harden multishot termination case for recv
- arm64: cputype: Add Neoverse-N3 definitions
- platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
- platform/x86: x86-android-tablets: Create a platform_device from module_init()
- kconfig: qconf: fix buffer overflow in debug links
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- drm/amd/display: Add HDR workaround for specific eDP
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/i915/gem: fix bitwise and logical AND mixup
- close_range(): fix the logics in descriptor table trimming
- rtla: Fix the help text in osnoise and timerlat top tools
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- tracing/hwlat: Fix a race during cpuhp processing
- ceph: fix cap ref leak via netfs init_request
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- net: pcs: xpcs: fix the wrong register that was written back
- gpio: davinci: fix lazy disable
- btrfs: send: fix invalid clone operation for file that got its size decreased
- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- rtc: at91sam9: fix OF node leak in probe() error path
- net: stmmac: Fix zero-division error when disabling tc cbs
- tomoyo: fallback to realpath if symlink's pathname does not exist
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- smb3: fix incorrect mode displayed for read-only files
- smb: client: use actual path when queryfs
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- media: qcom: camss: Fix ordering of pm_runtime_enable
- media: qcom: camss: Remove use_count guard in stop_streaming
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: rockchip: fix error for unknown clocks
- media: ov5675: Fix power on/off delay timings
- aoe: fix the potential use-after-free problem in more places
- riscv: Fix kernel stack size when KASAN is enabled
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- NFSD: Fix NFSv4's PUTPUBFH operation
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- perf hist: Update hist symbol when updating maps
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- mm: krealloc: consider spare memory for __GFP_ZERO
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- resource: fix region_intersects() vs add_memory_driver_managed()
- of/irq: Support #msi-cells=&lt;0&gt; in of_msi_get_domain
- of: address: Report error on resource bounds overflow
- drm/rockchip: vop: clear DMA stop bit on RK3066
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix 64-bit userspace syscall path
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: correct encrypted dentry name hash when not casefolded
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: core: add isascii() check to card ID generator
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- parisc: Fix itlb miss handler for 64-bit programs
- perf/core: Fix small negative period being ignored
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- spi: bcm63xx: Fix missing pm_runtime_disable()
- spi: bcm63xx: Fix module autoloading
- dt-bindings: clock: exynos7885: Fix duplicated binding
- memory: tegra186-emc: drop unused to_tegra186_emc()
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- ovl: fail if trusted xattrs are needed but caller lacks permission
- rust: sync: require `T: Sync` for `LockedBy::access`
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- selftests: vDSO: fix vdso_config for s390
- selftests: vDSO: fix ELF hash table entry size for s390x
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests/mm: fix charge_reserved_hugetlb.sh test
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO name for powerpc
- perf: Really fix event_function_call() locking
- perf callchain: Fix stitch LBR memory leaks
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- selftests: breakpoints: use remaining time to check if suspend succeed
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Use helper function devm_clk_get_enabled()
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- bpf: Make the pointer returned by iter next method valid
- ksmbd: add refcnt to ksmbd_conn struct
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/pm: ensure the fw_info is not null before using it
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- perf: Fix event_function_call() locking
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/printer: Allow NULL data in devcoredump printer
- drm/amd/display: Fix index out of bounds in degamma hardware format translation
- drm/stm: ltdc: reset plane transparency after plane disable
- platform/x86: touchscreen_dmi: add nanote-next quirk
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- drm/amdkfd: Fix resource leak in criu restore queue
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdgpu: add raven1 gfxoff quirk
- scsi: smartpqi: correct stream detection
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: Check null pointers before using dc-&gt;clk_mgr
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- iommu/vt-d: Always reserve a domain ID for identity setup
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- rcuscale: Provide clear error when async specified without primitives
- fbdev: efifb: Register sysfs groups through driver core
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- selftests/nolibc: avoid passing NULL to printf("%s")
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- ALSA: hdsp: Break infinite MIDI input flush loop
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- x86/pkeys: Restore altstack access in sigreturn()
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: usb-audio: Add logitech Audio profile quirk
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Add input value sanity checks for standard types
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mt76: mt7915: hold dev-&gt;mt76.mutex while disabling tx worker
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- ACPICA: iasl: handle empty connection_node
- wifi: mac80211: fix RCU list iterations
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- wifi: iwlwifi: mvm: use correct key iteration
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- netpoll: Ensure clean state on setup failures
- crypto: simd - Do not call crypto_alloc_tfm during registration
- net: atlantic: Avoid warning about potential string truncation
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- bnxt_en: Extend maximum length of version string by 1 byte
- net: mvpp2: Increase size of queue_name buffer
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
- ACPI: EC: Do not release locks during operation region accesses
- wifi: rtw88: select WANT_DEV_COREDUMP
- wifi: ath11k: fix array out-of-bound access in SoC stats
- ACPI: CPPC: Add support for setting EPP register in FFH
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- e1000e: avoid failing the system during pm_suspend
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPI: PAD: fix crash in exit_round_robin()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hip04: fix OF node leak in probe()
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
- crypto: octeontx2 - Fix authenc setkey
- crypto: octeontx - Fix authenc setkey
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- cifs: Remove intermediate object of failed create reparse call
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- loop: don't set QUEUE_FLAG_NOMERGES
- i2c: xiic: Try re-initialization on bus busy timeout
- i2c: xiic: improve error message when transfer fails to start
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- iomap: constrain the file range passed to iomap_file_unshare
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- net: fec: Reload PTP registers after link-state change
- net: fec: Restart PPS after link state change
- net: ethernet: lantiq_etop: fix memory disclosure
- net: Fix gso_features_check to check for both dev-&gt;gso_{ipv4_,}max_size
- net: Add netif_get_gro_max_size helper for GRO
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5: Fix error path in multi-packet WQE transmit
- net: sparx5: Fix invalid timestamps
- ieee802154: Fix build error
- ceph: remove the incorrect Fw reference check when dirtying pages
- mailbox: bcm2835: Fix timeout during suspend mode
- mailbox: rockchip: fix a typo in module autoloading
- drm/amdgpu: Fix get each xcp macro
- scsi: pm8001: Do not overwrite PCI queue mapping
- scsi: st: Fix input/output error on empty drive reset
- jump_label: Fix static_key_slow_dec() yet again
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- static_call: Handle module init failure correctly in static_call_del_module()
- !13043  tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- !13062  net: test for not too small csum_start in virtio_net_hdr_to_skb()
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- !13060  net: add more sanity checks to qdisc_pkt_len_init()
- net: add more sanity checks to qdisc_pkt_len_init()
- !13061  net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-54.0.0.57" date="1731499200">- !12859 intel: backport GNR and SRF intel_idle fix for 6.6
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- intel_idle: add Granite Rapids Xeon support
- !13172  sched: smart_grid: Prevent double-free in sched_grid_qos_free
- sched: smart_grid: Prevent double-free in sched_grid_qos_free
- !13181  drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- !13161  Some patches of RDMA from Linux to olk-6.6
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- !13133  CVE-2024-50145
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- octeon_ep: Implement helper for iterating packets in Rx queue
- !13142  tracing: Consider the NULL character when validating the event length
- tracing: Consider the NULL character when validating the event length
- !13137  drm/amd/display: Check null pointers before multiple uses
- drm/amd/display: Check null pointers before multiple uses
- !13120  smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix possible double free in smb2_set_ea()
- !13096 Update ASPM sysfs on MFD function removal to avoid use-after-free
- PCI/ASPM: Update ASPM sysfs on MFD function removal to avoid use-after-free
- !12877  Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- Revert "LoongArch: Add workaround for 3C6000 about io wr/rd"
- !12886  LoongArch: disable cpufreq driver
- LoongArch: disable cpufreq driver
- cpufreq: loongson3-acpi: Initialize scaling_cur_freq correctly
- !12840  drm/loongson: use old version of ast driver for LoongArch platform
- drm/loongson: use old version of ast driver for LoongArch platform
- !12496  LoongArch: add loongson SE support
- LoongArch: add loongson SE SDF support
- dt-bindings: security: add loongson_se
- !12492  LoongArch: Add AVEC irqchip support
- LoongArch: Add AVEC irqchip support
- !13111 MPTCP Upstream part 20
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: set error messages for set_flags
- mptcp: update set_flags interfaces
- mptcp: drop duplicate header inclusions
- !13110 MPTCP Upstream part 19
- selftests: mptcp: add token for get_addr
- mptcp: get addr in userspace pm list
- mptcp: implement mptcp_userspace_pm_get_addr
- mptcp: add userspace_pm_lookup_addr_by_id helper
- !13115  smb: client: Handle kstrdup failures for passwords
- smb: client: Handle kstrdup failures for passwords
- !13130 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.57-6.6.58 LTS Patches
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
- nilfs2: propagate directory read errors from nilfs_find_entry()
- serial: qcom-geni: fix receiver enable
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix polled console initialisation
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- pinctrl: apple: check devm_kasprintf() returned value
- pinctrl: ocelot: fix system hang on level based interrupts
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/resctrl: Annotate get_mem_config() functions as __init
- serial: imx: Update mctrl old_status on RTSD interrupt
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM device
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- USB: serial: option: add Telit FN920C04 MBIM compositions
- USB: serial: option: add support for Quectel EG916Q-GL
- xhci: Mitigate failed set dequeue pointer commands
- xhci: Fix incorrect stream context type macro
- xhci: tegra: fix checked USB2 port number
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: Call iso_exit() on module unload
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: light: opt3001: add missing full-scale range value
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: veml6030: fix ALS sensor resolution
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/vmwgfx: Handle surface check failure correctly
- drm/radeon: Fix encoder-&gt;possible_clones
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- Input: xpad - add support for MSI Claw A1M
- selftest: hid: add the missing tests directory
- ublk: don't allow user copy for unprivileged device
- io_uring/sqpoll: close race on waiting for sqring entries
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- x86/bugs: Skip RSB fill at VMEXIT
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- KVM: s390: gaccess: Check if guest address is in memslot
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- s390/sclp: Deactivate sclp after all its users
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- mptcp: prevent MPC handshake on port-based signal endpoints
- net: fec: Remove duplicated code
- net: fec: Move `fec_ptp_read()` to the top of the file
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: make sure sb_fdblocks is non-negative
- xfs: allow symlinks with short remote targets
- xfs: use dontcache for grabbing inodes during scrub
- xfs: revert commit 44af6c7e59b12
- xfs: enforce one namespace per attribute
- xfs: validate recovered name buffers when recovering xattr items
- xfs: check shortform attr entry flags specifically
- xfs: fix missing check for invalid attr flags
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: fix error returns from xfs_bmapi_write
- mm/mglru: only clear kswapd_failures if reclaimable
- selftests/mm: fix deadlock for fork after pthread_create on ARM
- selftests/mm: replace atomic_bool with pthread_barrier_t
- fat: fix uninitialized variable
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
- arm64: probes: Fix uprobes for big-endian kernels
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Remove broken LDR (literal) uprobe support
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- net: enetc: add missing static descriptor and inline keyword
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- ksmbd: fix user-after-free from session log off
- !13122  fs: 6.6 performance improve patches
- mm/rmap: minimize folio-&gt;_nr_pages_mapped updates when batching PTE (un)mapping
- mm: batch unlink_file_vma calls in free_pgd_range
- maple_tree: remove rcu_read_lock() from mt_validate()
- fs: rearrange general fastpath check now that O_CREAT uses it
- fs: remove audit dummy context check
- fs: pull up trailing slashes check for O_CREAT
- fs: move audit parent inode
- fs: try an opportunistic lookup for O_CREAT opens too
- fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd()
- fs/file.c: add fast path in find_next_fd()
- !13092 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.55-6.6.57 LTS Patches
- e1000e: fix force smbus during suspend flow
- net: ethernet: cortina: Restore TSO support
- secretmem: disable memfd_secret() if arch cannot set direct map
- fs/proc/kcore.c: allow translation of physical memory addresses
- btrfs: split remaining space to discard in chunks
- selftests/rseq: Fix mm_cid test failure
- selftests/mm: fix incorrect buffer-&gt;mirror size in hmm2 double_map test
- powercap: intel_rapl_tpmi: Fix bogus register reading
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
- mptcp: pm: do not remove closing subflows
- mptcp: handle consistently DSS corruption
- net: phy: Remove LED entry from LEDs list on unregister
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: Fix an unsafe loop on the list
- net: explicitly clear the sk pointer, when pf-&gt;create fails
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- mptcp: fallback when MPTCP opts are dropped after 1st data
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- drm/i915/hdcp: fix connector refcounting
- drm/vc4: Stop the active perfmon before being destroyed
- drm/v3d: Stop the active perfmon before being destroyed
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
- usb: gadget: core: force synchronous registration
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: xhci: Fix problem with xhci resume from suspend
- usb: dwc3: core: Stop processing of pending events if controller is halted
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hid-asus: add ROG Ally X prod ID to quirk list
- HID: asus: add ROG Z13 lightbar
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on system suspend
- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines
- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
- rcu/nocb: Fix rcuog wake-up from offline softirq
- rcu/nocb: Make IRQs disablement symmetric
- ppp: fix ppp_async_encode() illegal access
- mctp: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- vxlan: Handle error of rtnl_register_module().
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- netfilter: fib: check correct rtable in vrf setups
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- btrfs: zoned: fix missing RCU locking in error message when loading zone info
- net: ibm: emac: mal: fix wrong goto
- net/sched: accept TCA_STAB only for root qdisc
- e1000e: change I219 (19) devices to ADP
- ice: Flush FDB entries before reset
- ice: rename switchdev to eswitch
- ice: Fix netif_is_ice() in Safe Mode
- powercap: intel_rapl_tpmi: Ignore minor version change
- platform/x86/intel/tpmi: Add defines to get version information
- gpio: aspeed: Use devm_clk api to manage clock source
- gpio: aspeed: Add the flush write to ensure the write complete.
- nouveau/dmem: Fix privileged error in copy engine channel
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- net: dsa: b53: fix jumbo frames on 10/100 ports
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix jumbo frame mtu check
- net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- thermal: intel: int340x: processor: Fix warning during module unload
- thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
- net: phy: bcm84881: Fix some error handling paths
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test
- netfilter: br_netfilter: fix panic with metadata_dst skb
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- tcp: new TCP_INFO stats for RTO events
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix to allow timestamp undo if no retransmits were sent
- net: phy: dp83869: fix memory corruption when enabling fiber
- SUNRPC: Fix integer overflow in decode_rc_list()
- ice: fix VLAN replay after reset
- ice: set correct dst VSI in only LAN filters
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- fbdev: sisfb: Fix strbuf array overflow
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
- staging: vme_user: added bound check to geoid
- tools/iio: Add memory allocation failure check for trigger_name
- virtio_pmem: Check device status before requesting flush
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir clash
- LoongArch: Fix memleak in pci_acpi_scan_root()
- comedi: ni_routing: tools: Check when the file could not be opened
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
- usb: chipidea: udc: enable suspend interrupt after usb reset
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown
- soundwire: cadence: re-check Peripheral status with delayed_work
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- riscv: avoid Imbalance in RAS
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Add ACS quirk for Qualcomm SA8775P
- clk: bcm: bcm53573: fix OF node leak in init
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- soundwire: intel_bus_common: enable interrupts before exiting reset
- RDMA/mad: Improve handling of timed out WRs of mad agent
- ktest.pl: Avoid false positives with grub2 skip regex
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ext4: nested locking for xattr inode
- bpf, x64: Fix a jit convergence issue
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- s390/facility: Disable compile time optimization for decompressor code
- bpf: Check percpu map value size first
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
- virtio_console: fix misc probe bugs
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Do not call file_modified if collapse range failed
- drm/amd/display: Revert "Check HDCP returned status"
- drm/amd/display: Remove a redundant check in authenticated_dp
- lib/build_OID_registry: avoid non-destructive substitution for Perl &lt; 5.13.2 compat
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- selftests: Introduce Makefile variable to list shared bash scripts
- selftests: net: Remove executable bits from library scripts
- libsubcmd: Don't free the usage string
- perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()
- bootconfig: Fix the kerneldoc of _xbc_exit()
- e1000e: move force SMBUS near the end of enable_ulp function
- i40e: Include types.h to some headers
- i40e: Fix ST code value for Clause 45
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- ata: ahci: Add mask_port_map module parameter
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- riscv: cpufeature: Fix thead vector hwcap removal
- tracing: Have saved_cmdlines arrays all in one allocation
- libceph: init the cursor when preparing sparse read in msgr2
- pds_core: no health-thread in VF path
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- bus: mhi: ep: Add support for async DMA read operation
- bus: mhi: ep: Add support for async DMA write operation
- bus: mhi: ep: Introduce async read/write callbacks
- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
- drm/crtc: fix uninitialized variable use even harder
- ALSA: hda/realtek: cs35l41: Fix device ID / model name
- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks table
- tracing: Remove precision vsnprintf() check from print event
- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel HFP and HBP (again)
- net: ethernet: cortina: Drop TSO support
- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro
- gfs2: Revert "ignore negated quota changes"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "introduce qd_bh_get_or_undo"
- phy: qualcomm: eusb2-repeater: Rework init to drop redundant zero-out loop
- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
- ASoC: cs35l56: Load tunings for the correct speaker models
- Revert "PCI/MSI: Provide stubs for IMS functions"
- net: fec: don't save PTP state if PTP is unsupported
- unicode: Don't special case ignorable code points
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !12160 Add the spidev.ko to OLK-6.6
- Open the CONFIG for spidev.ko
- !13113  f2fs: fix to wait dio completion
- f2fs: fix to wait dio completion
- !13121  blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- !13126  Revert "perf callchain: Fix stitch LBR memory leaks"
- Revert "perf callchain: Fix stitch LBR memory leaks"
- !13064  CVE-2024-47702
- bpf: Fix kabi breakage in struct bpf_insn_access_aux
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta</changelog>
  <changelog author="ZhangPeng &lt;zhangpeng362@huawei.com&gt; - 6.6.0-55.0.0.58" date="1732017600">- !13235  nvmet-auth: assign dh_key to NULL after kfree_sensitive
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- !9157 [OLK-6.6] cpufreq: ACPI: add ITMT support when CPPC enabled
- Set ASYM_PACKING Flag on Zhaoxin KH-40000 platform
- cpufreq: ACPI: add ITMT support when CPPC enabled
- !13287 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.60-6.6.61 LTS Patches
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans
- hv_sock: Initializing vsk-&gt;trans to NULL to prevent a dangling pointer
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
- irqchip/gic-v3: Force propagation of the active state with a read-back
- USB: serial: option: add Quectel RG650V
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: io_edgeport: fix use after free in debug printk
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
- usb: dwc3: fix fault at system suspend if device was already runtime suspended
- usb: musb: sunxi: Fix accessing an released usb phy
- signal: restore the override_rlimit logic
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- filemap: Fix bounds checking in filemap_read()
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
- Revert "selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size"
- Revert "wifi: mac80211: fix RCU list iterations"
- btrfs: reinitialize delayed ref list after deleting it from the list
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- arm64: Kconfig: Make SME depend on BROKEN for now
- arm64/sve: Discard stale CPU state when handling SVE traps
- mptcp: use sock_kfree_s instead of kfree
- net: vertexcom: mse102x: Fix possible double free of TX skb
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow
- dm cache: fix potential out-of-bounds access on the first resume
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
- dm cache: correct the number of origin blocks to match the target length
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- rpmsg: glink: Handle rejected intent request better
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
- ksmbd: Fix the missing xa_store error check
- ksmbd: check outstanding simultaneous SMB operations
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- media: v4l2-tpg: prevent the risk of a division by zero
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: cx24116: prevent overflows on SNR calculus
- media: s5p-jpeg: prevent buffer overflows
- media: ar0521: don't overflow when checking PLL values
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
- thermal/of: support thermal zones w/o trips subnode
- tools/lib/thermal: Fix sampling handler context ptr
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- media: adv7604: prevent underflow condition when reporting colorspace
- media: dvb_frontend: don't play tricks with underflow values
- media: dvbdev: prevent the risk of out of memory access
- media: stb0899_algo: initialize cfr before using it
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- rxrpc: Fix missing locking causing hanging calls
- net: arc: rockchip: fix emac mdio node support
- net: arc: fix the device for dma_map_single/dma_unmap_single
- virtio_net: Add hash_key_length check
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: cleanup documentation
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: hns3: fix kernel crash when uninstalling driver
- e1000e: Remove Meteor Lake SMBUS workarounds
- i40e: fix race condition by adding filter's intermediate sync state
- ice: change q_index variable type to s16 to store -1 value
- can: c_can: fix {rx,tx}_errors statistics
- net: enetc: allocate vf_state during PF probes
- sctp: properly validate chunk size in sctp_sf_ootb()
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- net: enetc: set MAC address to the VF net_device
- regulator: rtq2208: Fix uninitialized use of regulator_config
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- platform/x86/amd/pmc: Detect when STB is not available
- HID: core: zero-initialize the report buffer
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: fix rk3036 acodec node
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8qxp: Add VPU subsystem file
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- !13269  Revert "Loongarch: Dynamic enable writecombine"
- Revert "Loongarch: Dynamic enable writecombine"
- !13193  fix CVE-2024-50115
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- !13179  bpf: Use raw_spinlock_t in ringbuf
- bpf: Use raw_spinlock_t in ringbuf
- !13263  bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- !12249  Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
- !13259 v2  mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: enable PMD anouymous mapping by default
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- !13215  fork: do not expose incomplete mm on fork
- fork: only invoke khugepaged, ksm hooks if no error
- fork: do not invoke uffd on fork if error occurs
- mm/ksm: remove redundant code in ksm_fork
- !13047 virtcca feature :SM Cryptographic Acceleration
- virtcca feature : SM Cryptographic Aacceleration.
- !13210  Script execution control
- fix kabi breakage due to exec is_check
- IMA support script execution check
- exec: Add a new AT_CHECK flag to execveat(2)
- uselib: remove use of __FMODE_EXEC
- exec: Check __FMODE_EXEC instead of in_execve for LSMs
- execve: open the executable file before doing anything else
- !13257  IMA RoT
- ima: rot: Adapt VirtCCA into Rot
- ima: Rename ima_cvm to ima_virtcca
- ima: rot: Make RoT kick in
- ima: rot: Prepare TPM as an RoT
- ima: rot: Introduce basic framework
- !13240 virtcca feature: support transfer smmu_vmid to tmm
- virtcca feature : transfer smmu_vmid
- !13244 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.59-6.6.60 LTS Patches
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- ASoC: SOF: ipc4-control: Add support for ALSA enum control
- ASoC: SOF: ipc4-control: Add support for ALSA switch control
- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control
- SUNRPC: Remove BUG_ON call sites
- mtd: spi-nor: winbond: fix w25q128 regression
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- arm64: dts: imx8ulp: correct the flexspi compatible string
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
- kasan: remove vmalloc_percpu test
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
- mctp i2c: handle NULL header address
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- x86/traps: move kmsan check after instrumentation_begin
- x86/traps: Enable UBSAN traps on x86
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mei: use kvmalloc for read buffer
- mptcp: init: protect sched with rcu_read_lock
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- Input: edt-ft5x06 - fix regmap leak when probe fails
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- block: fix sanity checks in blk_rq_map_user_bvec
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shmem: fix data-race in shmem_getattr()
- RISC-V: ACPI: fix early_ioremap to early_memremap
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table()
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: cfg80211: clear wdev-&gt;cqm_config pointer on free
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "selftests/mm: replace atomic_bool with pthread_barrier_t"
- Revert "selftests/mm: fix deadlock for fork after pthread_create on ARM"
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- USB: gadget: dummy-hcd: Fix "task hung" problem
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- cifs: Fix creating native symlinks pointing to current or parent directory
- cifs: Improve creating native symlinks pointing to directory
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ntfs_file_release
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Add rough attr alloc_size check
- fs/ntfs3: Stale inode instead of bad
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ntfs3: Add bounds checking to mi_enum_attr()
- cxl/events: Fix Trace DRAM Event Record
- smb: client: set correct device number on nfs reparse points
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- afs: Fix missing subdir edit when renamed between parent dirs
- afs: Automatically generate trace tag enums
- kasan: Fix Software Tag-Based KASAN with GCC
- iomap: turn iomap_want_unshare_iter into an inline function
- fsdax: dax_unshare_iter needs to copy entire blocks
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: share iomap_unshare_iter predicate code with fsdax
- iomap: don't bother unsharing delalloc extents
- iomap: improve shared block detection in iomap_unshare_iter
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
- netfilter: Fix use-after-free in get_info()
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
- bpf: Force checkpoint when jmp history is too long
- selftests/bpf: Add bpf_percpu_obj_{new,drop}() macro in bpf_experimental.h
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from register values
- macsec: Fix use-after-free while sending the offloading packet
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- cgroup: Fix potential overflow issue when checking max_depth
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- Input: xpad - sort xpad_device by vendor and product ID
- thermal: core: Free tzp copy along with the thermal zone
- thermal: core: Rework thermal zone availability check
- thermal: core: Make thermal_zone_device_unregister() return after freeing the zone
- !9721  drm: vc4: Fix possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- !12376  wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- !13140  CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
- usb: gadget: uvc: fix try format returns on uncompressed formats
- !13180  Add objtool, orc and livepatch support for LoongArch
- LoongArch: Update Loongson-3 default config file
- compiler.h: specify correct attribute for .rodata..c_jump_table
- LoongArch: Set AS_HAS_THIN_ADD_SUB as y if AS_IS_LLVM
- LoongArch: Enable objtool for Clang
- objtool: Handle frame pointer related instructions
- LoongArch: Add ifdefs to fix LSX and LASX related warnings
- LoongArch: Only allow OBJTOOL &amp; ORC unwinder if toolchain supports -mthin-add-sub
- LoongArch: Add kernel livepatching support
- LoongArch: Fix definition of ftrace_regs_set_instruction_pointer()
- LoongArch: Add ORC stack unwinder support
- objtool: Check local label in read_unwind_hints()
- objtool: Check local label in add_dead_ends()
- objtool/LoongArch: Enable orc to be built
- objtool/x86: Separate arch-specific and generic parts
- objtool/LoongArch: Implement instruction decoder
- objtool/LoongArch: Enable objtool to be built
- !13131 [OLK-6.6][Backport] exec: don't WARN for racy path_noexec check
- exec: don't WARN for racy path_noexec check
- Revert "exec: Remove redundant check in do_open_execat/uselib"
- !13192  net/ncsi: Disable the ncsi work before freeing the associated structure
- net/ncsi: Disable the ncsi work before freeing the associated structure
- !13079  serial: core: Fix atomicity violation in uart_tiocmget
- serial: core: Fix atomicity violation in uart_tiocmget
- !13074  selinux: clarify return code in filename_trans_read_helper_compat()
- selinux: clarify return code in filename_trans_read_helper_compat()
- !12431 [olk 6.6] net: hibmcge: add support for hibmcge driver
- net: hibmcge: Add maintainer for hibmcge
- net: hns3/hns: Update the maintainer for the HNS3/HNS ethernet driver
- net: hibmcge: Add a Makefile and update Kconfig for hibmcge
- net: hibmcge: Implement some ethtool_ops functions
- net: hibmcge: Implement rx_poll function to receive packets
- net: hibmcge: Implement .ndo_start_xmit function
- net: hibmcge: Implement some .ndo functions
- net: hibmcge: Add interrupt supported in this module
- net: hibmcge: Add mdio and hardware configuration supported in this module
- net: hibmcge: Add read/write registers supported through the bar space
- net: hibmcge: Add pci table supported in this module
- !13189 [openEuler-24.03-LTS][linux-6.6.y sync] Backport 6.6.58-6.6.59 LTS Patches
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- RDMA/bnxt_re: Fix unconditional fence for newer adapters
- RDMA/bnxt_re: Avoid creating fence MR for newer adapters
- RDMA/bnxt_re: Fix the offset for GenP7 adapters for user applications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- platform/x86: dell-wmi: Ignore suspend notifications
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- net: phy: dp83822: Fix reset pin definitions
- selinux: improve error checking in sel_write_load()
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- xfrm: fix one more kernel-infoleak in algo dumping
- LoongArch: Make KASAN usable for variable cpu_vabits
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Get correct cores_per_package for SMT systems
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- x86/lam: Disable ADDRESS_MASKING in most cases
- KVM: arm64: Don't eagerly teardown the vgic on init error
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- openat2: explicitly return -E2BIG for (usize &gt; PAGE_SIZE)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- drm/amd: Guard against bad data for ATIF ACPI method
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- cpufreq/cppc: Move and rename cppc_cpufreq_{perf_to_khz|khz_to_perf}()
- ALSA: hda/realtek: Update default depop procedure
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control types
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: group cycle counter coefficients
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- r8169: avoid unsolicited interrupts
- net: sched: use RCU read-side critical section in taprio_dump()
- net: sched: fix use-after-free in taprio_change()
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions created by classifiers
- bpf: Simplify checking size of helper accesses
- net: usb: usbnet: fix name regression
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net/sched: adjust device watchdog timer to detect stopped queue at right time
- net: wwan: fix global oob in wwan_rtnl_policy
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- fsl/fman: Fix refcount handling of fman-related devices
- fsl/fman: Save device references taken in mac_probe()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- net: plip: fix break; causing plip to never transmit
- be2net: fix potential memory leak in be_xmit()
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- netfilter: bpf: must hold reference on net namespace
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: extract dst lookup parameters into a struct
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- jfs: Fix sanity check in dbMount
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- platform/x86: dell-sysman: add support for alienware products
- cifs: Validate content of NFS reparse point buffer
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- udf: fix uninit-value use in udf_get_fileshortad
- udf: refactor inode_bmap() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor udf_current_aext() to handle error
- arm64: Force position-independent veneers
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant
- xhci: dbc: honor usb transfer size boundaries.
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbgtty: remove kfifo_out() wrapper
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- bpf: Fix iter/task tid filtering
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- nvme-pci: set doorbell config before unquiescing
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- bpf, vsock: Drop static vsock_bpf_prot initialization
- vsock: Update msg_count on read_skb()
- vsock: Update rx_bytes on read_skb()
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Check for invalid vector index on EQ creation
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- bpf: Fix link info netfilter flags to populate defrag flag
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- usb: typec: altmode should keep reference to parent
- smb: client: fix OOBs when building SMB2_IOCTL request
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- ravb: Remove setting of RX software timestamp
- genetlink: hold RCU in genlmsg_mcast()
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/dpu: don't always program merge_3d block
- irqchip/renesas-rzg2l: Fix missing put_device
- irqchip/renesas-rzg2l: Add support for suspend to RAM
- irqchip/renesas-rzg2l: Document structure members
- irqchip/renesas-rzg2l: Align struct member names to tabs
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- macsec: don't increment counters for an unrelated SA
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- octeontx2-af: Fix potential integer overflows on integer shifts
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- net: usb: usbnet: fix race in probe failure
- net/smc: Fix memory leak when using percpu refs
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dpu: make sure phys resources are properly initialized
- accel/qaic: Fix the for loop used to walk SG table
- RDMA/bnxt_re: Fix the GID table length
- RDMA/bnxt_re: Update the BAR offsets
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Support new 5760X P7 devices
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/srpt: Make slab cache names unique
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- ALSA: hda/cs8409: Fix possible NULL dereference
- selftests/bpf: Fix cross-compiling urandom_read
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- bpf: fix kfunc btf caching for modules
- s390/pci: Handle PCI error codes other than 0x3a
- selftests/bpf: fix perf_event link info name_len assertion
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: Use bpf_link__destroy in fill_link_info tests
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- RDMA/bnxt_re: Add a check for memory allocation
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Fix a possible memory leak
- bpf: Fix memory leak in bpf_core_apply
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- bpf: devmap: provide rxq after redirect
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling.</changelog>
</package>
</otherdata>