{"id":"CVE-2024-47732","aliases":["BELL-CVE-2024-47732","DEBIAN-CVE-2024-47732","EUVD-2024-42650","GHSA-gmcr-26hv-76c3","OESA-2025-1729","OESA-2025-1730","OESA-2025-1870","SUSE-SU-2024:3984-1","SUSE-SU-2024:3986-1","SUSE-SU-2024:4318-1","SUSE-SU-2024:4387-1","SUSE-SU-2025:20163-1","SUSE-SU-2025:20164-1","SUSE-SU-2025:20246-1","SUSE-SU-2025:20247-1","UBUNTU-CVE-2024-47732","USN-7301-1","USN-7303-1","USN-7303-2","USN-7303-3","USN-7304-1","USN-7310-1","USN-7311-1","USN-7384-1","USN-7384-2","USN-7385-1","USN-7386-1","USN-7403-1","openSUSE-SU-2024:14500-1","openSUSE-SU-2025:14705-1"],"status":"published","title":"crypto: iaa - Fix potential use after free bug","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix potential use after free bug\n\nThe free_device_compression_mode(iaa_device, device_mode) function frees\n\"device_mode\" but it iss passed to iaa_compression_modes[i]-\u003efree() a few\nlines later resulting in a use after free.\n\nThe good news is that, so far as I can tell, nothing implements the\n-\u003efree() function and the use after free happens in dead code.  But, with\nthis fix, when something does implement it, we'll be ready.  :)","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00228,"percentile":0.13696,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2024-10-21T12:14:03Z","modified":"2026-11-03T21:17:33Z","fixes":[{"ecosystem":"Alpaquita:25","package":"linux-lts","fixed_in":["6.12.41-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"linux-lts","fixed_in":["6.12.41-r0"],"sources":["osv"]},{"ecosystem":"Linux","package":"Kernel","fixed_in":["6.10.13","6.11.2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["6.11.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["6.11.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.8","fixed_in":["6.8.0-1023.25~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.8","fixed_in":["6.8.0-1025.30~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.8","fixed_in":["6.8.0-1024.26~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.8","fixed_in":["6.8.0-57.59~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.8","fixed_in":["6.8.0-54.56.1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.8","fixed_in":["6.8.0-1022.25~22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.8","fixed_in":["6.8.0-1020.21~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.8","fixed_in":["6.8.0-53.55.1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux","fixed_in":["6.8.0-54.56"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","fixed_in":["6.8.0-1023.25"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","fixed_in":["6.8.0-1025.30"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","fixed_in":["6.8.0-1024.26"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","fixed_in":["6.8.0-1019.23"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-gkeop","fixed_in":["6.8.0-1006.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","fixed_in":["6.8.0-1022.22"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","fixed_in":["6.8.0-54.56.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia","fixed_in":["6.8.0-1022.25"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-lowlatency","fixed_in":["6.8.0-1022.25.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.11","fixed_in":["6.11.0-1015.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.8","fixed_in":["6.8.0-1024.24"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","fixed_in":["6.8.0-1020.21"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi","fixed_in":["6.8.0-1019.23"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv","fixed_in":["6.8.0-53.55.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-raspi-realtime","fixed_in":["6.8.0-2018.19"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime","fixed_in":["6.8.1-1016.17"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:25","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.6.89-r0"},{"fixed":"6.12.41-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"linux-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.6.100-r0"},{"fixed":"6.12.41-r0"}]}]},{"source":"osv","ecosystem":"Linux","package":"Kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.8.0"},{"fixed":"6.10.13"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.11.0"},{"fixed":"6.11.2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.2-1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-99.0.0.91.oe2403"}]}],"bundled":29},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-99.0.0.102.oe2403sp1"}]}],"bundled":24},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-101.0.0.107.oe2403sp2"}]}],"bundled":60},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.8.17.2"}]}],"bundled":282},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.8.17.1"}]}],"bundled":282},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.8.17.1"}]}],"bundled":282},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.8.17.2"}]}],"bundled":282},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-source-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.8.17.1"}]}],"bundled":282},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-syms-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.8.17.1"}]}],"bundled":282},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP6","package":"kernel-livepatch-SLE15-SP6-RT_Update_5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150600.1.3.1"}]}],"bundled":268},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP6","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.10.17.1"}]}],"bundled":268},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP6","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.10.17.1"}]}],"bundled":268},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP6","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.10.17.1"}]}],"bundled":268},{"source":"osv","ecosystem":"SUSE:Real Time Module 15 SP6","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.10.17.1"}]}],"bundled":268},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.10.17.1"}]}],"bundled":268},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-rt_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.10.17.1"}]}],"bundled":268},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.10.17.1"}]}],"bundled":268},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.10.17.1"}]}],"bundled":268},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1.150600.12.12.6"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP6","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP6","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP6","package":"kernel-livepatch-SLE15-SP6_Update_6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-150600.13.3.5"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP6","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"dtb-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-64kb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1.150600.12.12.6"}]}],"bundled":506},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-obs-qa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-150600.23.30.1"}]}],"bundled":506},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6","package":"kernel-coco","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-15061.9.coco15sp6.1"}]}],"bundled":490},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6","package":"kernel-coco_debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-15061.9.coco15sp6.1"}]}],"bundled":490},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6","package":"kernel-source-coco","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-15061.9.coco15sp6.1"}]}],"bundled":490},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6","package":"kernel-syms-coco","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-15061.9.coco15sp6.1"}]}],"bundled":490},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-livepatch-MICRO-6-0-RT_Update_4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-1.1"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-22.1"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-22.1"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-24.1"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-24.1.21.4"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-24.1"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-livepatch-MICRO-6-0_Update_4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-1.2"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-24.1"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-livepatch-MICRO-6-0-RT_Update_4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-1.1"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-22.1"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-22.1"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-24.1"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-default-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-24.1.21.4"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-kvmsmall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-24.1"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-livepatch-MICRO-6-0_Update_4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-1.2"}]}],"bundled":507},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-24.1"}]}],"bundled":507},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1021.24~18.04.1","5.0.0-1022.25~18.04.1","5.0.0-1023.26~18.04.1","5.0.0-1024.27~18.04.1","5.0.0-1025.28","5.0.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1019.21~18.04.1","5.3.0-1023.25~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.2","5.3.0-1033.35","5.3.0-1034.36","5.3.0-1035.37"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1019.20~18.04.1","5.3.0-1020.21~18.04.1","5.3.0-1022.23~18.04.1","5.3.0-1028.29~18.04.1","5.3.0-1031.32~18.04.1","5.3.0-1032.33~18.04.1","5.3.0-1034.35~18.04.1","5.3.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1020.22~18.04.1","5.3.0-1026.28~18.04.1","5.3.0-1029.31~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-4.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1041.43","4.15.0-1042.44","4.15.0-1044.46","4.15.0-1045.48","4.15.0-1046.49","4.15.0-1048.51","4.15.0-1049.52","4.15.0-1050.53","4.15.0-1052.55","4.15.0-1055.58","4.15.0-1057.60","4.15.0-1058.61","4.15.0-1059.62","4.15.0-1063.66","4.15.0-1064.67","4.15.0-1066.69","4.15.0-1067.70","4.15.0-1069.72","4.15.0-1070.73","4.15.0-1072.76","4.15.0-1073.78","4.15.0-1074.79","4.15.0-1076.81","4.15.0-1077.82","4.15.0-1078.83","4.15.0-1079.84"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1025.25~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.31~18.04.1","5.4.0-1030.32~18.04.1","5.4.0-1032.34~18.04.1","5.4.0-1033.35~18.04.1","5.4.0-1035.37~18.04.1","5.4.0-1036.38~18.04.1","5.4.0-1037.39~18.04.1","5.4.0-1039.41~18.04.1","5.4.0-1040.42~18.04.1","5.4.0-1042.44~18.04.1","5.4.0-1043.45~18.04.1","5.4.0-1044.46~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1","5.4.0-1052.55~18.04.1","5.4.0-1053.56~18.04.1","5.4.0-1054.57~18.04.1","5.4.0-1055.58~18.04.1","5.4.0-1056.59~18.04.1","5.4.0-1057.60~18.04.1","5.4.0-1059.62~18.04.1","5.4.0-1061.64~18.04.1","5.4.0-1062.65~18.04.1","5.4.0-1063.66~18.04.1","5.4.0-1065.68~18.04.1","5.4.0-1066.69~18.04.1","5.4.0-1067.70~18.04.1","5.4.0-1068.71~18.04.1","5.4.0-1071.76~18.04.3","5.4.0-1072.77~18.04.1","5.4.0-1074.79~18.04.1","5.4.0-1076.82~18.04.1","5.4.0-1078.84~18.04.1","5.4.0-1080.86~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gkeop-5.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1001.1","5.4.0-1003.3","5.4.0-1004.5","5.4.0-1005.6","5.4.0-1007.8~18.04.1","5.4.0-1008.9~18.04.1","5.4.0-1009.10~18.04.1","5.4.0-1010.11~18.04.1","5.4.0-1011.12~18.04.2","5.4.0-1012.13~18.04.1","5.4.0-1013.14~18.04.1","5.4.0-1014.15~18.04.1","5.4.0-1015.16~18.04.1","5.4.0-1016.17~18.04.1","5.4.0-1018.19~18.04.1","5.4.0-1021.22~18.04.1","5.4.0-1022.23~18.04.1","5.4.0-1023.24~18.04.1","5.4.0-1024.25~18.04.1","5.4.0-1025.26~18.04.1","5.4.0-1026.27~18.04.1","5.4.0-1027.28~18.04.1","5.4.0-1029.30~18.04.2","5.4.0-1031.32~18.04.1","5.4.0-1032.33~18.04.1","5.4.0-1033.34~18.04.1","5.4.0-1034.35~18.04.1","5.4.0-1036.37~18.04.1","5.4.0-1037.38~18.04.1","5.4.0-1038.39~18.04.1","5.4.0-1039.40~18.04.1","5.4.0-1040.41~18.04.1","5.4.0-1043.44~18.04.1","5.4.0-1046.48~18.04.1","5.4.0-1048.51~18.04.1","5.4.0-1049.52~18.04.1","5.4.0-1051.54~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.3","4.15.0-1004.5","4.15.0-1006.9","4.15.0-1008.11","4.15.0-1009.12","4.15.0-1012.15","4.15.0-1013.16","4.15.0-1015.18","4.15.0-1017.20","4.15.0-1018.21","4.15.0-1021.24","4.15.0-1024.29","4.15.0-1026.31","4.15.0-1028.33","4.15.0-1030.35","4.15.0-1033.38","4.15.0-1034.39","4.15.0-1035.40","4.15.0-1036.41","4.15.0-1038.43","4.15.0-1039.44","4.15.0-1043.48","4.15.0-1045.50","4.15.0-1050.57","4.15.0-1056.65","4.15.0-1057.66","4.15.0-1059.68","4.15.0-1063.72","4.15.0-1064.73","4.15.0-1065.75","4.15.0-1066.76","4.15.0-1067.77","4.15.0-1069.79","4.15.0-1073.83","4.15.0-1076.86","4.15.0-1079.89","4.15.0-1080.90","4.15.0-1081.91","4.15.0-1087.97","4.15.0-1090.100","4.15.0-1091.101","4.15.0-1093.103","4.15.0-1094.104","4.15.0-1096.106","4.15.0-1097.107","4.15.0-1099.109","4.15.0-1100.110","4.15.0-1101.112","4.15.0-1102.113","4.15.0-1103.114"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1007.12~18.04.1","5.0.0-1008.13~18.04.1","5.0.0-1009.14~18.04.1","5.0.0-1010.15~18.04.1","5.0.0-1011.16","5.0.0-1013.18","5.0.0-1014.19"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1011.12~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.18~18.04.1","5.3.0-1018.20~18.04.1","5.3.0-1024.26~18.04.1","5.3.0-1027.29~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.9~20.04.2","5.11.0-1014.15~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.2","5.11.0-1021.22~20.04.2","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.2","5.13.0-1011.12~20.04.1","5.13.0-1012.13~20.04.1","5.13.0-1014.15~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1019.21~20.04.1","5.13.0-1021.23~20.04.2","5.13.0-1022.24~20.04.1","5.13.0-1023.25~20.04.1","5.13.0-1025.27~20.04.1","5.13.0-1028.31~20.04.1","5.13.0-1029.32~20.04.1","5.13.0-1031.35~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1041.43~20.04.1","5.8.0-1042.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1007.7~20.04.2","5.11.0-1012.13~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10~20.04.2","5.13.0-1012.14~20.04.1","5.13.0-1013.15~20.04.1","5.13.0-1014.16~20.04.1","5.13.0-1017.19~20.04.1","5.13.0-1021.24~20.04.1","5.13.0-1022.26~20.04.1","5.13.0-1023.27~20.04.1","5.13.0-1025.29~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1029.34~20.04.1","5.13.0-1031.37~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1033.35~20.04.1","5.8.0-1036.38~20.04.1","5.8.0-1039.42~20.04.1","5.8.0-1040.43~20.04.1","5.8.0-1041.44~20.04.1","5.8.0-1042.45~20.04.1","5.8.0-1043.46~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-fde","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1063.66+cvm2.2","5.4.0-1063.66+cvm3.2","5.4.0-1064.67+cvm1.1","5.4.0-1065.68+cvm2.1","5.4.0-1067.70+cvm1.1","5.4.0-1068.71+cvm1.1","5.4.0-1069.72+cvm1.1","5.4.0-1070.73+cvm1.1","5.4.0-1072.75+cvm1.1","5.4.0-1073.76+cvm1.1","5.4.0-1074.77+cvm1.1","5.4.0-1076.79+cvm1.1","5.4.0-1078.81+cvm1.1","5.4.0-1080.83+cvm1.1","5.4.0-1083.87+cvm1.1","5.4.0-1085.90+cvm1.1","5.4.0-1085.90+cvm2.1","5.4.0-1086.91+cvm1.1","5.4.0-1089.94+cvm1.2","5.4.0-1090.95+cvm1.1","5.4.0-1091.96+cvm1.1","5.4.0-1092.97+cvm1.1","5.4.0-1095.101+cvm1.1","5.4.0-1098.104+cvm1.1","5.4.0-1100.106+cvm1.1","5.4.0-1103.109+cvm1.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1009.10~20.04.1","5.11.0-1014.16~20.04.1","5.11.0-1017.19~20.04.1","5.11.0-1018.20~20.04.2","5.11.0-1020.22~20.04.1","5.11.0-1021.23~20.04.1","5.11.0-1022.24~20.04.1","5.11.0-1023.25~20.04.1","5.11.0-1024.26~20.04.1","5.11.0-1026.29~20.04.1","5.11.0-1028.32~20.04.1","5.11.0-1029.33~20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1008.9~20.04.3","5.13.0-1012.15~20.04.1","5.13.0-1013.16~20.04.1","5.13.0-1015.18~20.04.1","5.13.0-1019.23~20.04.1","5.13.0-1021.25~20.04.1","5.13.0-1023.28~20.04.1","5.13.0-1024.29~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1030.36~20.04.1","5.13.0-1031.37~20.04.1","5.13.0-1033.40~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1032.34~20.04.1","5.8.0-1035.37~20.04.1","5.8.0-1038.40~20.04.1","5.8.0-1039.41"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-1033.35","5.4.0-1035.37","5.4.0-1036.38","5.4.0-1037.39","5.4.0-1039.41","5.4.0-1041.43","5.4.0-1042.44","5.4.0-1043.45","5.4.0-1044.46","5.4.0-1046.48","5.4.0-1049.52","5.4.0-1051.54","5.4.0-1052.55","5.4.0-1053.56","5.4.0-1054.57","5.4.0-1055.58","5.4.0-1056.59","5.4.0-1057.60","5.4.0-1059.62","5.4.0-1061.64","5.4.0-1062.65","5.4.0-1063.66","5.4.0-1065.68","5.4.0-1066.69","5.4.0-1067.70","5.4.0-1068.71","5.4.0-1071.76","5.4.0-1072.77","5.4.0-1074.79","5.4.0-1076.82","5.4.0-1078.84","5.4.0-1080.86","5.4.0-1081.87","5.4.0-1083.89","5.4.0-1084.90","5.4.0-1086.93","5.4.0-1087.94","5.4.0-1090.97","5.4.0-1091.98","5.4.0-1094.101","5.4.0-1095.102","5.4.0-1096.103","5.4.0-1097.104","5.4.0-1098.105","5.4.0-1099.106","5.4.0-1100.107","5.4.0-1101.108","5.4.0-1102.109","5.4.0-1103.110","5.4.0-1104.111","5.4.0-1105.112"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gke-5.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1011.14~20.04.1","5.15.0-1014.17~20.04.1","5.15.0-1015.18~20.04.1","5.15.0-1016.19~20.04.1","5.15.0-1019.23~20.04.1","5.15.0-1020.25~20.04.1","5.15.0-1023.28~20.04.2","5.15.0-1027.32~20.04.1","5.15.0-1028.33~20.04.1","5.15.0-1029.34~20.04.1","5.15.0-1031.36~20.04.1","5.15.0-1032.37~20.04.1","5.15.0-1033.38~20.04.1","5.15.0-1034.39~20.04.1","5.15.0-1036.41~20.04.1","5.15.0-1037.42~20.04.1","5.15.0-1038.43~20.04.1","5.15.0-1039.44~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-22.23~20.04.1","5.11.0-25.27~20.04.1","5.11.0-27.29~20.04.1","5.11.0-34.36~20.04.1","5.11.0-36.40~20.04.1","5.11.0-37.41~20.04.2","5.11.0-38.42~20.04.1","5.11.0-40.44~20.04.2","5.11.0-41.45~20.04.1","5.11.0-43.47~20.04.2","5.11.0-44.48~20.04.2","5.11.0-46.51~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-21.21~20.04.1","5.13.0-22.22~20.04.1","5.13.0-23.23~20.04.2","5.13.0-25.26~20.04.1","5.13.0-27.29~20.04.1","5.13.0-28.31~20.04.1","5.13.0-30.33~20.04.1","5.13.0-35.40~20.04.1","5.13.0-37.42~20.04.1","5.13.0-39.44~20.04.1","5.13.0-40.45~20.04.1","5.13.0-41.46~20.04.1","5.13.0-44.49~20.04.1","5.13.0-48.54~20.04.1","5.13.0-51.58~20.04.1","5.13.0-52.59~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1","5.8.0-41.46~20.04.1","5.8.0-43.49~20.04.1","5.8.0-44.50~20.04.1","5.8.0-45.51~20.04.1","5.8.0-48.54~20.04.1","5.8.0-49.55~20.04.1","5.8.0-50.56~20.04.1","5.8.0-53.60~20.04.1","5.8.0-55.62~20.04.1","5.8.0-59.66~20.04.1","5.8.0-63.71~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-intel-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1007.7","5.13.0-1008.8","5.13.0-1009.9","5.13.0-1010.10","5.13.0-1011.11","5.13.0-1014.15","5.13.0-1017.19"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33","5.10.0-1033.34","5.10.0-1034.35","5.10.0-1038.40","5.10.0-1044.46","5.10.0-1045.47","5.10.0-1049.51","5.10.0-1050.52","5.10.0-1051.53","5.10.0-1052.54","5.10.0-1053.55","5.10.0-1055.58","5.10.0-1057.61"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1009.10","5.13.0-1010.11","5.13.0-1012.16","5.13.0-1014.18","5.13.0-1017.21","5.13.0-1019.23","5.13.0-1020.24","5.13.0-1021.25","5.13.0-1022.26","5.13.0-1026.32","5.13.0-1028.35","5.13.0-1029.36"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.14.0-1004.4","5.14.0-1005.5","5.14.0-1007.7","5.14.0-1008.8","5.14.0-1010.10","5.14.0-1011.11","5.14.0-1013.13","5.14.0-1018.19","5.14.0-1020.22","5.14.0-1022.24","5.14.0-1024.26","5.14.0-1027.30","5.14.0-1029.32","5.14.0-1031.34","5.14.0-1032.35","5.14.0-1033.36","5.14.0-1034.37","5.14.0-1036.40","5.14.0-1038.42","5.14.0-1042.47","5.14.0-1044.49","5.14.0-1045.51","5.14.0-1046.53","5.14.0-1047.54","5.14.0-1048.55","5.14.0-1049.56","5.14.0-1050.57","5.14.0-1051.58","5.14.0-1052.59","5.14.0-1054.61","5.14.0-1055.62","5.14.0-1056.63","5.14.0-1057.64","5.14.0-1058.66","5.14.0-1059.67"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.6.0-1007.7","5.6.0-1008.8","5.6.0-1010.10","5.6.0-1011.11","5.6.0-1013.13","5.6.0-1017.17","5.6.0-1018.18","5.6.0-1020.20","5.6.0-1021.21","5.6.0-1023.23","5.6.0-1026.26","5.6.0-1027.27","5.6.0-1028.28","5.6.0-1031.32","5.6.0-1032.33","5.6.0-1033.35","5.6.0-1034.36","5.6.0-1035.37","5.6.0-1036.39","5.6.0-1039.43","5.6.0-1042.46","5.6.0-1047.51","5.6.0-1048.52","5.6.0-1050.54","5.6.0-1052.56","5.6.0-1053.57","5.6.0-1054.58","5.6.0-1055.59","5.6.0-1056.60"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1008.8~20.04.1","5.11.0-1013.14~20.04.1","5.11.0-1016.17~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1019.20~20.04.1","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1025.27~20.04.1","5.11.0-1027.30~20.04.1","5.11.0-1028.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1011.13~20.04.2","5.13.0-1015.19~20.04.1","5.13.0-1016.20~20.04.1","5.13.0-1018.22~20.04.1","5.13.0-1021.26~20.04.1","5.13.0-1025.30~20.04.1","5.13.0-1027.32~20.04.1","5.13.0-1028.33~20.04.1","5.13.0-1030.35~20.04.1","5.13.0-1033.39~20.04.1","5.13.0-1034.40~20.04.1","5.13.0-1036.43~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-1031.32~20.04.2","5.8.0-1033.34~20.04.1","5.8.0-1034.35~20.04.2","5.8.0-1037.38~20.04.1","5.8.0-1038.39~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.11.0-1015.16~20.04.1","5.11.0-1017.18~20.04.1","5.11.0-1018.19~20.04.2","5.11.0-1020.21~20.04.1","5.11.0-1021.22~20.04.1","5.11.0-1022.23~20.04.1","5.11.0-1023.24~20.04.1","5.11.0-1024.25~20.04.1","5.11.0-1026.28~20.04.1","5.11.0-1028.31~20.04.1","5.11.0-1029.32~20.04.1","5.11.0-1030.34","5.11.0-1031.35"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.8.0-14.16~20.04.1","5.8.0-14.16~20.04.3","5.8.0-16.18~20.04.1","5.8.0-17.19~20.04.1","5.8.0-18.20~20.04.1","5.8.0-20.22~20.04.1","5.8.0-22.24~20.04.1","5.8.0-25.27~20.04.1","5.8.0-26.28~20.04.1","5.8.0-29.31~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-allwinner-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1007.7~22.04.1","5.19.0-1009.9~22.04.1","5.19.0-1010.10~22.04.1","5.19.0-1011.11~22.04.1","5.19.0-1012.12~22.04.1","5.19.0-1013.13~22.04.1","5.19.0-1014.14~22.04.1","5.19.0-1015.15~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1019.20~22.04.1","5.19.0-1020.21~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1026.27~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1029.30~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1008.8~22.04.1","6.5.0-1010.10~22.04.1","6.5.0-1011.11~22.04.1","6.5.0-1012.12~22.04.1","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.2","6.5.0-1018.18~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1021.21~22.04.1","6.5.0-1022.22~22.04.1","6.5.0-1023.23~22.04.1","6.5.0-1024.24~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1023.25~22.04.1"}]}],"versions":["6.8.0-1009.9~22.04.2","6.8.0-1010.10~22.04.2","6.8.0-1011.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1016.17~22.04.2","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.21~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1025.28~22.04.1","5.19.0-1026.29~22.04.1","5.19.0-1027.30~22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1005.5~22.04.1","6.2.0-1006.6~22.04.1","6.2.0-1007.7~22.04.1","6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.3","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1","6.2.0-1019.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.7~22.04.1","6.5.0-1009.9~22.04.1","6.5.0-1010.10~22.04.1","6.5.0-1011.11~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.1","6.5.0-1018.19~22.04.2","6.5.0-1019.20~22.04.1","6.5.0-1021.22~22.04.1","6.5.0-1022.23~22.04.1","6.5.0-1023.24~22.04.1","6.5.0-1024.25~22.04.1","6.5.0-1025.26~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1025.30~22.04.1"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1012.14~22.04.1","6.8.0-1013.15~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.2","6.8.0-1017.20~22.04.1","6.8.0-1018.21~22.04.1","6.8.0-1020.23~22.04.1","6.8.0-1021.25~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1025.28~22.04.1.1","5.19.0-1026.29~22.04.1.1","5.19.0-1027.30~22.04.2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-fde-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1.1","6.2.0-1009.9~22.04.3.1","6.2.0-1011.11~22.04.1.1","6.2.0-1012.12~22.04.1.1","6.2.0-1014.14~22.04.1.1","6.2.0-1015.15~22.04.1.1","6.2.0-1016.16~22.04.1.1","6.2.0-1017.17~22.04.1.1","6.2.0-1018.18~22.04.1.1","6.2.0-1019.19~22.04.1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1020.22~22.04.2","5.19.0-1021.23~22.04.1","5.19.0-1022.24~22.04.1","5.19.0-1024.26~22.04.1","5.19.0-1025.27~22.04.1","5.19.0-1026.28~22.04.1","5.19.0-1027.29~22.04.1","5.19.0-1030.32~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1009.9~22.04.3","6.2.0-1010.10~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1011.11~22.04.3","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1016.18~22.04.1","6.2.0-1017.19~22.04.1","6.2.0-1018.20~22.04.1","6.2.0-1019.21~22.04.1","6.2.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1010.10~22.04.3","6.5.0-1011.11~22.04.1","6.5.0-1013.13~22.04.1","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1017.17~22.04.1","6.5.0-1018.18~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1022.24~22.04.1","6.5.0-1023.25~22.04.1","6.5.0-1024.26~22.04.1","6.5.0-1025.27~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1024.26~22.04.1"}]}],"versions":["6.8.0-1010.11~22.04.1","6.8.0-1011.12~22.04.1","6.8.0-1012.13~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.1","6.8.0-1016.18~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-28.29~22.04.1","5.19.0-32.33~22.04.1","5.19.0-35.36~22.04.1","5.19.0-38.39~22.04.1","5.19.0-40.41~22.04.1","5.19.0-41.42~22.04.1","5.19.0-42.43~22.04.1","5.19.0-43.44~22.04.1","5.19.0-45.46~22.04.1","5.19.0-46.47~22.04.1","5.19.0-50.50"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-25.25~22.04.2","6.2.0-26.26~22.04.1","6.2.0-31.31~22.04.1","6.2.0-32.32~22.04.1","6.2.0-33.33~22.04.1","6.2.0-34.34~22.04.1","6.2.0-35.35~22.04.1","6.2.0-36.37~22.04.1","6.2.0-37.38~22.04.1","6.2.0-39.40~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-14.14~22.04.1","6.5.0-15.15~22.04.1","6.5.0-17.17~22.04.1","6.5.0-18.18~22.04.1","6.5.0-21.21~22.04.1","6.5.0-25.25~22.04.1","6.5.0-26.26~22.04.1","6.5.0-27.28~22.04.1","6.5.0-28.29~22.04.1","6.5.0-35.35~22.04.1","6.5.0-41.41~22.04.2","6.5.0-44.44~22.04.1","6.5.0-45.45~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-57.59~22.04.1"}]}],"versions":["6.8.0-38.38~22.04.1","6.8.0-39.39~22.04.1","6.8.0-40.40~22.04.3","6.8.0-45.45~22.04.1","6.8.0-47.47~22.04.1","6.8.0-48.48~22.04.1","6.8.0-49.49~22.04.1","6.8.0-50.51~22.04.1","6.8.0-51.52~22.04.1","6.8.0-52.53~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-intel-iot-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1073.75"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1021.22~22.04.1","5.19.0-1022.23~22.04.1","5.19.0-1023.24~22.04.1","5.19.0-1024.25~22.04.1","5.19.0-1025.26~22.04.1","5.19.0-1027.28~22.04.1","5.19.0-1028.29~22.04.1","5.19.0-1030.30"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1008.8~22.04.1","6.2.0-1009.9~22.04.1","6.2.0-1011.11~22.04.1","6.2.0-1012.12~22.04.1","6.2.0-1013.13~22.04.1","6.2.0-1014.14~22.04.1","6.2.0-1015.15~22.04.1","6.2.0-1016.16~22.04.1","6.2.0-1017.17~22.04.1","6.2.0-1018.18~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-14.14.1~22.04.1","6.5.0-15.15.1.1~22.04.1","6.5.0-17.17.1.1.1~22.04.1","6.5.0-21.21.1~22.04.1","6.5.0-25.25.1~22.04.1","6.5.0-26.26.1~22.04.1","6.5.0-27.28.1~22.04.1","6.5.0-28.29.1~22.04.1","6.5.0-35.35.1~22.04.1","6.5.0-41.41.1~22.04.1","6.5.0-42.42.1~22.04.1","6.5.0-44.44.1~22.04.1","6.5.0-45.45.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-54.56.1~22.04.1"}]}],"versions":["6.8.0-38.38.1~22.04.2","6.8.0-40.40.1~22.04.1","6.8.0-44.44.1~22.04.1","6.8.0-45.45.1~22.04.1","6.8.0-47.47.1~22.04.1","6.8.0-48.48.3~22.04.1","6.8.0-49.49.1~22.04.1","6.8.0-50.51.1~22.04.1","6.8.0-51.52.1~22.04.1","6.8.0-52.53.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1003.3~22.04.1","6.2.0-1009.9","6.2.0-1010.10","6.2.0-1011.11","6.2.0-1012.12","6.2.0-1013.13","6.2.0-1015.15"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1004.4","6.5.0-1007.7","6.5.0-1013.13","6.5.0-1014.14","6.5.0-1015.15","6.5.0-1018.18","6.5.0-1019.19","6.5.0-1021.22","6.5.0-1022.23","6.5.0-1023.24","6.5.0-1024.25"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1022.25~22.04.2"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-5.17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.17.0-1003.3","5.17.0-1004.4","5.17.0-1006.6","5.17.0-1011.12","5.17.0-1012.13","5.17.0-1013.14","5.17.0-1014.15","5.17.0-1015.16","5.17.0-1016.17","5.17.0-1017.18","5.17.0-1018.19","5.17.0-1019.20","5.17.0-1020.21","5.17.0-1021.22","5.17.0-1024.25","5.17.0-1025.26","5.17.0-1026.27","5.17.0-1027.28","5.17.0-1028.29","5.17.0-1029.30","5.17.0-1030.31","5.17.0-1031.32","5.17.0-1032.33","5.17.0-1033.34","5.17.0-1034.35","5.17.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.0-1006.6","6.0.0-1007.7","6.0.0-1008.8","6.0.0-1009.9","6.0.0-1010.10","6.0.0-1011.11","6.0.0-1012.12","6.0.0-1013.13","6.0.0-1014.14","6.0.0-1015.15","6.0.0-1016.16","6.0.0-1017.17","6.0.0-1018.18","6.0.0-1019.19","6.0.0-1020.20","6.0.0-1021.21"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.1.0-1004.4","6.1.0-1006.6","6.1.0-1007.7","6.1.0-1008.8","6.1.0-1009.9","6.1.0-1010.10","6.1.0-1012.12","6.1.0-1013.13","6.1.0-1014.14","6.1.0-1015.15","6.1.0-1016.16","6.1.0-1017.17","6.1.0-1019.19","6.1.0-1020.20","6.1.0-1021.21","6.1.0-1022.22","6.1.0-1023.23","6.1.0-1024.24","6.1.0-1025.25","6.1.0-1026.26","6.1.0-1027.27","6.1.0-1028.28","6.1.0-1029.29","6.1.0-1033.33","6.1.0-1034.34","6.1.0-1035.35","6.1.0-1036.36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oem-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1003.3","6.5.0-1004.4","6.5.0-1006.6","6.5.0-1007.7","6.5.0-1008.8","6.5.0-1009.10","6.5.0-1011.12","6.5.0-1013.14","6.5.0-1014.15","6.5.0-1015.16","6.5.0-1016.17","6.5.0-1018.19","6.5.0-1019.20","6.5.0-1020.21","6.5.0-1022.23","6.5.0-1023.24","6.5.0-1024.25","6.5.0-1025.26","6.5.0-1027.28"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1013.13~22.04.4","6.5.0-1014.14~22.04.1","6.5.0-1015.15~22.04.1","6.5.0-1016.16~22.04.1","6.5.0-1018.18~22.04.1","6.5.0-1019.19~22.04.1","6.5.0-1020.20~22.04.1","6.5.0-1021.21~22.04.1","6.5.0-1023.23~22.04.1","6.5.0-1024.24~22.04.1","6.5.0-1025.25~22.04.1","6.5.0-1026.26~22.04.1","6.5.0-1027.27~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1020.21~22.04.1"}]}],"versions":["6.8.0-1006.6~22.04.3","6.8.0-1008.8~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.13~22.04.1","6.8.0-1014.14~22.04.1","6.8.0-1015.15~22.04.1","6.8.0-1016.17~22.04.1","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.20~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.0-1032.35"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.13.0-1004.4","5.13.0-1006.6+22.04.1","5.13.0-1007.7+22.04.1","5.13.0-1010.11+22.04.1","5.15.0-1004.4","5.15.0-1005.5","5.15.0-1006.6","5.15.0-1007.7","5.15.0-1008.8","5.15.0-1011.12","5.15.0-1012.13","5.15.0-1014.16","5.15.0-1015.17","5.15.0-1016.18","5.15.0-1017.19","5.15.0-1018.21","5.15.0-1019.22","5.15.0-1020.23","5.15.0-1022.26","5.15.0-1023.27","5.15.0-1026.30","5.15.0-1027.31","5.15.0-1028.32"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1012.13~22.04.1","5.19.0-1015.16~22.04.1","5.19.0-1016.17~22.04.1","5.19.0-1017.18~22.04.1","5.19.0-1018.19~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1","5.19.0-1021.23~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-17.17.1.1~22.04.1","6.5.0-21.21.1~22.04.1","6.5.0-25.25.1~22.04.1","6.5.0-26.26.1~22.04.1","6.5.0-27.28.1~22.04.1","6.5.0-28.29.1~22.04.1","6.5.0-35.35.1~22.04.1","6.5.0-40.40.1~22.04.1","6.5.0-42.42.1~22.04.1","6.5.0-45.45.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-riscv-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-53.55.1~22.04.1"}]}],"versions":["6.8.0-38.38.1~22.04.1","6.8.0-39.39.1~22.04.1","6.8.0-40.40.1~22.04.1","6.8.0-41.41.1~22.04.1","6.8.0-44.44.1~22.04.1","6.8.0-47.47.1~22.04.1","6.8.0-48.48.1~22.04.2","6.8.0-49.49.1~22.04.1","6.8.0-50.51.1~22.04.1","6.8.0-51.52.1~22.04.1","6.8.0-52.53.1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-5.19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.19.0-1014.16~22.04.1","5.19.0-1015.17~22.04.1","5.19.0-1016.18~22.04.1","5.19.0-1017.19~22.04.1","5.19.0-1018.20~22.04.1","5.19.0-1019.21~22.04.1","5.19.0-1020.22~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-6.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.0-1006.7~22.04.1","6.2.0-1007.8~22.04.1","6.2.0-1009.10~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-starfive-6.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.5.0-1007.8~22.04.1","6.5.0-1008.9~22.04.1","6.5.0-1009.10~22.04.1","6.5.0-1010.11~22.04.1","6.5.0-1011.12~22.04.1","6.5.0-1012.13~22.04.1","6.5.0-1014.15~22.04.1","6.5.0-1015.16~22.04.1","6.5.0-1016.17~22.04.1","6.5.0-1017.18~22.04.1","6.5.0-1018.19~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-54.56"}]}],"versions":["6.5.0-9.9","6.6.0-14.14","6.8.0-11.11","6.8.0-20.20","6.8.0-22.22","6.8.0-28.28","6.8.0-31.31","6.8.0-35.35","6.8.0-36.36","6.8.0-38.38","6.8.0-39.39","6.8.0-40.40","6.8.0-41.41","6.8.0-44.44","6.8.0-45.45","6.8.0-47.47","6.8.0-48.48","6.8.0-49.49","6.8.0-50.51","6.8.0-51.52","6.8.0-52.53","6.8.0-53.55"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1023.25"}]}],"versions":["6.5.0-1008.8","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1025.30"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.20","6.8.0-1018.21","6.8.0-1020.23","6.8.0-1021.25"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1024.26"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1002.2","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.9","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1019.23"}]}],"versions":["6.8.0-1003.5","6.8.0-1004.7","6.8.0-1005.8","6.8.0-1006.9","6.8.0-1007.10","6.8.0-1008.11","6.8.0-1009.12","6.8.0-1010.13","6.8.0-1011.14","6.8.0-1012.15","6.8.0-1013.17","6.8.0-1014.18","6.8.0-1015.19","6.8.0-1016.20","6.8.0-1017.21"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1006.8"}]}],"versions":["6.8.0-1001.3","6.8.0-1002.4","6.8.0-1003.5","6.8.0-1004.6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1022.22"}]}],"versions":["6.5.0-1009.9","6.8.0-1001.1","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.15","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-54.56.1"}]}],"versions":["6.5.0-9.9.1","6.6.0-14.14.1","6.8.0-7.7.1","6.8.0-25.25.3","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-45.45.1","6.8.0-47.47.1","6.8.0-48.48.3","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1022.25"}]}],"versions":["6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1022.25.2"}]}],"versions":["6.8.0-1009.9.1","6.8.0-1011.11.1","6.8.0-1012.12.1","6.8.0-1013.14.1","6.8.0-1014.15.1","6.8.0-1015.16.1","6.8.0-1017.19.1","6.8.0-1018.20.1","6.8.0-1019.21.1","6.8.0-1020.22.1","6.8.0-1021.23.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.0-1015.15"}]}],"versions":["6.11.0-1007.7","6.11.0-1008.8","6.11.0-1009.9","6.11.0-1010.10","6.11.0-1011.11","6.11.0-1012.12","6.11.0-1013.13"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1024.24"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19","6.8.0-1020.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1020.21"}]}],"versions":["6.5.0-1010.10","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.19","6.8.0-1019.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1019.23"}]}],"versions":["6.5.0-1005.7","6.7.0-1001.1","6.8.0-1001.1","6.8.0-1002.2","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.1-1015.16"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-53.55.1"}]}],"versions":["6.5.0-9.9.1","6.8.0-20.20.1","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-47.47.1","6.8.0-48.48.1","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-raspi-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-2018.19"}]}],"versions":["6.7.0-2001.1","6.8.0-2001.1","6.8.0-2002.2","6.8.0-2004.4","6.8.0-2005.5","6.8.0-2006.6","6.8.0-2007.7","6.8.0-2008.8","6.8.0-2009.9","6.8.0-2010.10","6.8.0-2011.11","6.8.0-2012.12","6.8.0-2013.14","6.8.0-2014.15","6.8.0-2015.16","6.8.0-2016.17","6.8.0-2017.18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:Realtime:24.04:LTS","package":"linux-realtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.1-1016.17"}]}],"versions":["6.8.0-1008.19","6.8.1-1001.1","6.8.1-1002.2","6.8.1-1003.3","6.8.1-1004.4","6.8.1-1005.5","6.8.1-1006.6","6.8.1-1007.7","6.8.1-1008.8","6.8.1-1009.9","6.8.1-1010.10","6.8.1-1011.11","6.8.1-1012.12","6.8.1-1013.14","6.8.1-1014.15","6.8.1-1015.16"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-lowlatency-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-54.56.1~22.04.1"}]}],"versions":["6.8.0-38.38.1~22.04.2","6.8.0-40.40.1~22.04.1","6.8.0-44.44.1~22.04.1","6.8.0-45.45.1~22.04.1","6.8.0-47.47.1~22.04.1","6.8.0-48.48.3~22.04.1","6.8.0-49.49.1~22.04.1","6.8.0-50.51.1~22.04.1","6.8.0-51.52.1~22.04.1","6.8.0-52.53.1~22.04.1"],"bundled":209},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-54.56"}]}],"versions":["6.5.0-9.9","6.6.0-14.14","6.8.0-11.11","6.8.0-20.20","6.8.0-22.22","6.8.0-28.28","6.8.0-31.31","6.8.0-35.35","6.8.0-36.36","6.8.0-38.38","6.8.0-39.39","6.8.0-40.40","6.8.0-41.41","6.8.0-44.44","6.8.0-45.45","6.8.0-47.47","6.8.0-48.48","6.8.0-49.49","6.8.0-50.51","6.8.0-51.52","6.8.0-52.53","6.8.0-53.55"],"bundled":209},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-54.56.1"}]}],"versions":["6.5.0-9.9.1","6.6.0-14.14.1","6.8.0-7.7.1","6.8.0-25.25.3","6.8.0-28.28.1","6.8.0-31.31.1","6.8.0-35.35.1","6.8.0-36.36.1","6.8.0-38.38.1","6.8.0-39.39.1","6.8.0-40.40.1","6.8.0-41.41.1","6.8.0-44.44.1","6.8.0-45.45.1","6.8.0-47.47.1","6.8.0-48.48.3","6.8.0-49.49.1","6.8.0-50.51.1","6.8.0-51.52.1","6.8.0-52.53.1","6.8.0-53.55.2"],"bundled":209},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-nvidia-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1022.25~22.04.2"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1"],"bundled":208},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1022.25"}]}],"versions":["6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23"],"bundled":208},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-nvidia-lowlatency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1022.25.2"}]}],"versions":["6.8.0-1009.9.1","6.8.0-1011.11.1","6.8.0-1012.12.1","6.8.0-1013.14.1","6.8.0-1014.15.1","6.8.0-1015.16.1","6.8.0-1017.19.1","6.8.0-1018.20.1","6.8.0-1019.21.1","6.8.0-1020.22.1","6.8.0-1021.23.1"],"bundled":208},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-oracle-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1020.21~22.04.1"}]}],"versions":["6.8.0-1006.6~22.04.3","6.8.0-1008.8~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1011.11~22.04.1","6.8.0-1012.12~22.04.1","6.8.0-1013.13~22.04.1","6.8.0-1014.14~22.04.1","6.8.0-1015.15~22.04.1","6.8.0-1016.17~22.04.1","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.20~22.04.1"],"bundled":208},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1020.21"}]}],"versions":["6.5.0-1010.10","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.19","6.8.0-1019.20"],"bundled":208},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-gcp-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1024.26~22.04.1"}]}],"versions":["6.8.0-1010.11~22.04.1","6.8.0-1011.12~22.04.1","6.8.0-1012.13~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.1","6.8.0-1016.18~22.04.1","6.8.0-1017.19~22.04.1","6.8.0-1018.20~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1"],"bundled":208},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-raspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1019.23"}]}],"versions":["6.5.0-1005.7","6.7.0-1001.1","6.8.0-1001.1","6.8.0-1002.2","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20"],"bundled":208},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1024.26"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1002.2","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.9","6.8.0-1009.10","6.8.0-1010.11","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.19","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23"],"bundled":210},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1019.23"}]}],"versions":["6.8.0-1003.5","6.8.0-1004.7","6.8.0-1005.8","6.8.0-1006.9","6.8.0-1007.10","6.8.0-1008.11","6.8.0-1009.12","6.8.0-1010.13","6.8.0-1011.14","6.8.0-1012.15","6.8.0-1013.17","6.8.0-1014.18","6.8.0-1015.19","6.8.0-1016.20","6.8.0-1017.21"],"bundled":210},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-gkeop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1006.8"}]}],"versions":["6.8.0-1001.3","6.8.0-1002.4","6.8.0-1003.5","6.8.0-1004.6"],"bundled":210},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.0-1015.15"}]}],"versions":["6.11.0-1007.7","6.11.0-1008.8","6.11.0-1009.9","6.11.0-1010.10","6.11.0-1011.11","6.11.0-1012.12","6.11.0-1013.13"],"bundled":730},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-aws-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1023.25~22.04.1"}]}],"versions":["6.8.0-1009.9~22.04.2","6.8.0-1010.10~22.04.2","6.8.0-1011.12~22.04.1","6.8.0-1013.14~22.04.1","6.8.0-1014.15~22.04.1","6.8.0-1015.16~22.04.1","6.8.0-1016.17~22.04.2","6.8.0-1017.18~22.04.1","6.8.0-1018.19~22.04.1","6.8.0-1019.21~22.04.1","6.8.0-1020.22~22.04.1","6.8.0-1021.23~22.04.1"],"bundled":211},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1023.25"}]}],"versions":["6.5.0-1008.8","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1006.6","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.12","6.8.0-1012.13","6.8.0-1013.14","6.8.0-1014.15","6.8.0-1015.16","6.8.0-1016.17","6.8.0-1017.18","6.8.0-1018.20","6.8.0-1019.21","6.8.0-1020.22","6.8.0-1021.23"],"bundled":211},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1025.30"}]}],"versions":["6.5.0-1007.7","6.6.0-1001.1","6.8.0-1001.1","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1012.14","6.8.0-1013.15","6.8.0-1014.16","6.8.0-1015.17","6.8.0-1016.18","6.8.0-1017.20","6.8.0-1018.21","6.8.0-1020.23","6.8.0-1021.25"],"bundled":318},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-azure-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1025.30~22.04.1"}]}],"versions":["6.8.0-1008.8~22.04.1","6.8.0-1009.9~22.04.1","6.8.0-1010.10~22.04.1","6.8.0-1012.14~22.04.1","6.8.0-1013.15~22.04.1","6.8.0-1014.16~22.04.1","6.8.0-1015.17~22.04.2","6.8.0-1017.20~22.04.1","6.8.0-1018.21~22.04.1","6.8.0-1020.23~22.04.1","6.8.0-1021.25~22.04.1"],"bundled":318},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1022.22"}]}],"versions":["6.5.0-1009.9","6.8.0-1001.1","6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1015.15","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19"],"bundled":317},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"linux-oem-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1024.24"}]}],"versions":["6.8.0-1003.3","6.8.0-1004.4","6.8.0-1005.5","6.8.0-1006.6","6.8.0-1007.7","6.8.0-1008.8","6.8.0-1009.9","6.8.0-1010.10","6.8.0-1011.11","6.8.0-1012.12","6.8.0-1013.13","6.8.0-1014.14","6.8.0-1016.16","6.8.0-1017.17","6.8.0-1018.18","6.8.0-1019.19","6.8.0-1020.20"],"bundled":317},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"linux-hwe-6.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-57.59~22.04.1"}]}],"versions":["6.8.0-38.38~22.04.1","6.8.0-39.39~22.04.1","6.8.0-40.40~22.04.3","6.8.0-45.45~22.04.1","6.8.0-47.47~22.04.1","6.8.0-48.48~22.04.1","6.8.0-49.49~22.04.1","6.8.0-50.51~22.04.1","6.8.0-51.52~22.04.1","6.8.0-52.53~22.04.1"],"bundled":325},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.8-1.1"}]}],"bundled":486},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kernel-source-longterm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.11-1.1"}]}],"bundled":504}],"products":[{"vendor":"linux","product":"linux"},{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"https://git.kernel.org/stable/c/b5d534b473e2c8d3e4560be2dd6c12a8eb9d61e9","tags":["Patch","web","report"]},{"url":"https://git.kernel.org/stable/c/c66f0be993ba52410edab06124c54ecf143b05c1","tags":["Patch","web","report"]},{"url":"https://git.kernel.org/stable/c/e0d3b845a1b10b7b5abdad7ecc69d45b2aab3209","tags":["Patch","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47732","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gmcr-26hv-76c3"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-47732","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47732.json","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-47732","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38385","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-42127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-42131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45015","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-57896","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-58085","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21854","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21861","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21944","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21996","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37849","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37930","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37937","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37948","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37963","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38031","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38034","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38060","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38065","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38074","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38078","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38080","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38152","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40014","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40364","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1730","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1870","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37739","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37808","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37810","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37842","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37854","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37887","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37933","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37951","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37968","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37991","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38067","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38081","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38094","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38118","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38146","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38170","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38182","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38195","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38197","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38202","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38229","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38279","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38280","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38322","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38346","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243984-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1065729","tags":["report"]},{"url":"https://bugzilla.suse.com/1194869","tags":["report"]},{"url":"https://bugzilla.suse.com/1217845","tags":["report"]},{"url":"https://bugzilla.suse.com/1218562","tags":["report"]},{"url":"https://bugzilla.suse.com/1219596","tags":["report"]},{"url":"https://bugzilla.suse.com/1219803","tags":["report"]},{"url":"https://bugzilla.suse.com/1220382","tags":["report"]},{"url":"https://bugzilla.suse.com/1223384","tags":["report"]},{"url":"https://bugzilla.suse.com/1223700","tags":["report"]},{"url":"https://bugzilla.suse.com/1223824","tags":["report"]},{"url":"https://bugzilla.suse.com/1223848","tags":["report"]},{"url":"https://bugzilla.suse.com/1224088","tags":["report"]},{"url":"https://bugzilla.suse.com/1224574","tags":["report"]},{"url":"https://bugzilla.suse.com/1225611","tags":["report"]},{"url":"https://bugzilla.suse.com/1226003","tags":["report"]},{"url":"https://bugzilla.suse.com/1226498","tags":["report"]},{"url":"https://bugzilla.suse.com/1226623","tags":["report"]},{"url":"https://bugzilla.suse.com/1226631","tags":["report"]},{"url":"https://bugzilla.suse.com/1226797","tags":["report"]},{"url":"https://bugzilla.suse.com/1226848","tags":["report"]},{"url":"https://bugzilla.suse.com/1228119","tags":["report"]},{"url":"https://bugzilla.suse.com/1228244","tags":["report"]},{"url":"https://bugzilla.suse.com/1228269","tags":["report"]},{"url":"https://bugzilla.suse.com/1228410","tags":["report"]},{"url":"https://bugzilla.suse.com/1228454","tags":["report"]},{"url":"https://bugzilla.suse.com/1228537","tags":["report"]},{"url":"https://bugzilla.suse.com/1228620","tags":["report"]},{"url":"https://bugzilla.suse.com/1228743","tags":["report"]},{"url":"https://bugzilla.suse.com/1228747","tags":["report"]},{"url":"https://bugzilla.suse.com/1228857","tags":["report"]},{"url":"https://bugzilla.suse.com/1229019","tags":["report"]},{"url":"https://bugzilla.suse.com/1229429","tags":["report"]},{"url":"https://bugzilla.suse.com/1229450","tags":["report"]},{"url":"https://bugzilla.suse.com/1229585","tags":["report"]},{"url":"https://bugzilla.suse.com/1229677","tags":["report"]},{"url":"https://bugzilla.suse.com/1229769","tags":["report"]},{"url":"https://bugzilla.suse.com/1229808","tags":["report"]},{"url":"https://bugzilla.suse.com/1229891","tags":["report"]},{"url":"https://bugzilla.suse.com/1230055","tags":["report"]},{"url":"https://bugzilla.suse.com/1230132","tags":["report"]},{"url":"https://bugzilla.suse.com/1230179","tags":["report"]},{"url":"https://bugzilla.suse.com/1230220","tags":["report"]},{"url":"https://bugzilla.suse.com/1230289","tags":["report"]},{"url":"https://bugzilla.suse.com/1230295","tags":["report"]},{"url":"https://bugzilla.suse.com/1230339","tags":["report"]},{"url":"https://bugzilla.suse.com/1230341","tags":["report"]},{"url":"https://bugzilla.suse.com/1230375","tags":["report"]},{"url":"https://bugzilla.suse.com/1230414","tags":["report"]},{"url":"https://bugzilla.suse.com/1230429","tags":["report"]},{"url":"https://bugzilla.suse.com/1230456","tags":["report"]},{"url":"https://bugzilla.suse.com/1230501","tags":["report"]},{"url":"https://bugzilla.suse.com/1230527","tags":["report"]},{"url":"https://bugzilla.suse.com/1230550","tags":["report"]},{"url":"https://bugzilla.suse.com/1230600","tags":["report"]},{"url":"https://bugzilla.suse.com/1230620","tags":["report"]},{"url":"https://bugzilla.suse.com/1230710","tags":["report"]},{"url":"https://bugzilla.suse.com/1230762","tags":["report"]},{"url":"https://bugzilla.suse.com/1230763","tags":["report"]},{"url":"https://bugzilla.suse.com/1230773","tags":["report"]},{"url":"https://bugzilla.suse.com/1230774","tags":["report"]},{"url":"https://bugzilla.suse.com/1230801","tags":["report"]},{"url":"https://bugzilla.suse.com/1230831","tags":["report"]},{"url":"https://bugzilla.suse.com/1230914","tags":["report"]},{"url":"https://bugzilla.suse.com/1230918","tags":["report"]},{"url":"https://bugzilla.suse.com/1231016","tags":["report"]},{"url":"https://bugzilla.suse.com/1231035","tags":["report"]},{"url":"https://bugzilla.suse.com/1231072","tags":["report"]},{"url":"https://bugzilla.suse.com/1231073","tags":["report"]},{"url":"https://bugzilla.suse.com/1231075","tags":["report"]},{"url":"https://bugzilla.suse.com/1231081","tags":["report"]},{"url":"https://bugzilla.suse.com/1231082","tags":["report"]},{"url":"https://bugzilla.suse.com/1231083","tags":["report"]},{"url":"https://bugzilla.suse.com/1231084","tags":["report"]},{"url":"https://bugzilla.suse.com/1231085","tags":["report"]},{"url":"https://bugzilla.suse.com/1231087","tags":["report"]},{"url":"https://bugzilla.suse.com/1231089","tags":["report"]},{"url":"https://bugzilla.suse.com/1231092","tags":["report"]},{"url":"https://bugzilla.suse.com/1231093","tags":["report"]},{"url":"https://bugzilla.suse.com/1231094","tags":["report"]},{"url":"https://bugzilla.suse.com/1231096","tags":["report"]},{"url":"https://bugzilla.suse.com/1231098","tags":["report"]},{"url":"https://bugzilla.suse.com/1231100","tags":["report"]},{"url":"https://bugzilla.suse.com/1231101","tags":["report"]},{"url":"https://bugzilla.suse.com/1231102","tags":["report"]},{"url":"https://bugzilla.suse.com/1231105","tags":["report"]},{"url":"https://bugzilla.suse.com/1231108","tags":["report"]},{"url":"https://bugzilla.suse.com/1231111","tags":["report"]},{"url":"https://bugzilla.suse.com/1231114","tags":["report"]},{"url":"https://bugzilla.suse.com/1231115","tags":["report"]},{"url":"https://bugzilla.suse.com/1231116","tags":["report"]},{"url":"https://bugzilla.suse.com/1231117","tags":["report"]},{"url":"https://bugzilla.suse.com/1231131","tags":["report"]},{"url":"https://bugzilla.suse.com/1231132","tags":["report"]},{"url":"https://bugzilla.suse.com/1231135","tags":["report"]},{"url":"https://bugzilla.suse.com/1231136","tags":["report"]},{"url":"https://bugzilla.suse.com/1231138","tags":["report"]},{"url":"https://bugzilla.suse.com/1231148","tags":["report"]},{"url":"https://bugzilla.suse.com/1231169","tags":["report"]},{"url":"https://bugzilla.suse.com/1231170","tags":["report"]},{"url":"https://bugzilla.suse.com/1231171","tags":["report"]},{"url":"https://bugzilla.suse.com/1231178","tags":["report"]},{"url":"https://bugzilla.suse.com/1231179","tags":["report"]},{"url":"https://bugzilla.suse.com/1231183","tags":["report"]},{"url":"https://bugzilla.suse.com/1231187","tags":["report"]},{"url":"https://bugzilla.suse.com/1231191","tags":["report"]},{"url":"https://bugzilla.suse.com/1231193","tags":["report"]},{"url":"https://bugzilla.suse.com/1231195","tags":["report"]},{"url":"https://bugzilla.suse.com/1231197","tags":["report"]},{"url":"https://bugzilla.suse.com/1231200","tags":["report"]},{"url":"https://bugzilla.suse.com/1231202","tags":["report"]},{"url":"https://bugzilla.suse.com/1231203","tags":["report"]},{"url":"https://bugzilla.suse.com/1231276","tags":["report"]},{"url":"https://bugzilla.suse.com/1231293","tags":["report"]},{"url":"https://bugzilla.suse.com/1231384","tags":["report"]},{"url":"https://bugzilla.suse.com/1231434","tags":["report"]},{"url":"https://bugzilla.suse.com/1231435","tags":["report"]},{"url":"https://bugzilla.suse.com/1231436","tags":["report"]},{"url":"https://bugzilla.suse.com/1231439","tags":["report"]},{"url":"https://bugzilla.suse.com/1231440","tags":["report"]},{"url":"https://bugzilla.suse.com/1231441","tags":["report"]},{"url":"https://bugzilla.suse.com/1231442","tags":["report"]},{"url":"https://bugzilla.suse.com/1231452","tags":["report"]},{"url":"https://bugzilla.suse.com/1231474","tags":["report"]},{"url":"https://bugzilla.suse.com/1231481","tags":["report"]},{"url":"https://bugzilla.suse.com/1231496","tags":["report"]},{"url":"https://bugzilla.suse.com/1231502","tags":["report"]},{"url":"https://bugzilla.suse.com/1231537","tags":["report"]},{"url":"https://bugzilla.suse.com/1231539","tags":["report"]},{"url":"https://bugzilla.suse.com/1231540","tags":["report"]},{"url":"https://bugzilla.suse.com/1231541","tags":["report"]},{"url":"https://bugzilla.suse.com/1231617","tags":["report"]},{"url":"https://bugzilla.suse.com/1231634","tags":["report"]},{"url":"https://bugzilla.suse.com/1231635","tags":["report"]},{"url":"https://bugzilla.suse.com/1231636","tags":["report"]},{"url":"https://bugzilla.suse.com/1231637","tags":["report"]},{"url":"https://bugzilla.suse.com/1231638","tags":["report"]},{"url":"https://bugzilla.suse.com/1231639","tags":["report"]},{"url":"https://bugzilla.suse.com/1231640","tags":["report"]},{"url":"https://bugzilla.suse.com/1231673","tags":["report"]},{"url":"https://bugzilla.suse.com/1231828","tags":["report"]},{"url":"https://bugzilla.suse.com/1231849","tags":["report"]},{"url":"https://bugzilla.suse.com/1231855","tags":["report"]},{"url":"https://bugzilla.suse.com/1231856","tags":["report"]},{"url":"https://bugzilla.suse.com/1231857","tags":["report"]},{"url":"https://bugzilla.suse.com/1231858","tags":["report"]},{"url":"https://bugzilla.suse.com/1231859","tags":["report"]},{"url":"https://bugzilla.suse.com/1231860","tags":["report"]},{"url":"https://bugzilla.suse.com/1231861","tags":["report"]},{"url":"https://bugzilla.suse.com/1231864","tags":["report"]},{"url":"https://bugzilla.suse.com/1231865","tags":["report"]},{"url":"https://bugzilla.suse.com/1231868","tags":["report"]},{"url":"https://bugzilla.suse.com/1231869","tags":["report"]},{"url":"https://bugzilla.suse.com/1231871","tags":["report"]},{"url":"https://bugzilla.suse.com/1231872","tags":["report"]},{"url":"https://bugzilla.suse.com/1231901","tags":["report"]},{"url":"https://bugzilla.suse.com/1231902","tags":["report"]},{"url":"https://bugzilla.suse.com/1231903","tags":["report"]},{"url":"https://bugzilla.suse.com/1231904","tags":["report"]},{"url":"https://bugzilla.suse.com/1231906","tags":["report"]},{"url":"https://bugzilla.suse.com/1231907","tags":["report"]},{"url":"https://bugzilla.suse.com/1231908","tags":["report"]},{"url":"https://bugzilla.suse.com/1231914","tags":["report"]},{"url":"https://bugzilla.suse.com/1231916","tags":["report"]},{"url":"https://bugzilla.suse.com/1231924","tags":["report"]},{"url":"https://bugzilla.suse.com/1231926","tags":["report"]},{"url":"https://bugzilla.suse.com/1231931","tags":["report"]},{"url":"https://bugzilla.suse.com/1231935","tags":["report"]},{"url":"https://bugzilla.suse.com/1231942","tags":["report"]},{"url":"https://bugzilla.suse.com/1231944","tags":["report"]},{"url":"https://bugzilla.suse.com/1231947","tags":["report"]},{"url":"https://bugzilla.suse.com/1231950","tags":["report"]},{"url":"https://bugzilla.suse.com/1231951","tags":["report"]},{"url":"https://bugzilla.suse.com/1231953","tags":["report"]},{"url":"https://bugzilla.suse.com/1231954","tags":["report"]},{"url":"https://bugzilla.suse.com/1231955","tags":["report"]},{"url":"https://bugzilla.suse.com/1231956","tags":["report"]},{"url":"https://bugzilla.suse.com/1231957","tags":["report"]},{"url":"https://bugzilla.suse.com/1231965","tags":["report"]},{"url":"https://bugzilla.suse.com/1231967","tags":["report"]},{"url":"https://bugzilla.suse.com/1231968","tags":["report"]},{"url":"https://bugzilla.suse.com/1231987","tags":["report"]},{"url":"https://bugzilla.suse.com/1231988","tags":["report"]},{"url":"https://bugzilla.suse.com/1231989","tags":["report"]},{"url":"https://bugzilla.suse.com/1231990","tags":["report"]},{"url":"https://bugzilla.suse.com/1231998","tags":["report"]},{"url":"https://bugzilla.suse.com/1232000","tags":["report"]},{"url":"https://bugzilla.suse.com/1232003","tags":["report"]},{"url":"https://bugzilla.suse.com/1232009","tags":["report"]},{"url":"https://bugzilla.suse.com/1232013","tags":["report"]},{"url":"https://bugzilla.suse.com/1232015","tags":["report"]},{"url":"https://bugzilla.suse.com/1232016","tags":["report"]},{"url":"https://bugzilla.suse.com/1232017","tags":["report"]},{"url":"https://bugzilla.suse.com/1232018","tags":["report"]},{"url":"https://bugzilla.suse.com/1232033","tags":["report"]},{"url":"https://bugzilla.suse.com/1232034","tags":["report"]},{"url":"https://bugzilla.suse.com/1232036","tags":["report"]},{"url":"https://bugzilla.suse.com/1232043","tags":["report"]},{"url":"https://bugzilla.suse.com/1232047","tags":["report"]},{"url":"https://bugzilla.suse.com/1232048","tags":["report"]},{"url":"https://bugzilla.suse.com/1232049","tags":["report"]},{"url":"https://bugzilla.suse.com/1232050","tags":["report"]},{"url":"https://bugzilla.suse.com/1232056","tags":["report"]},{"url":"https://bugzilla.suse.com/1232075","tags":["report"]},{"url":"https://bugzilla.suse.com/1232076","tags":["report"]},{"url":"https://bugzilla.suse.com/1232079","tags":["report"]},{"url":"https://bugzilla.suse.com/1232080","tags":["report"]},{"url":"https://bugzilla.suse.com/1232083","tags":["report"]},{"url":"https://bugzilla.suse.com/1232084","tags":["report"]},{"url":"https://bugzilla.suse.com/1232085","tags":["report"]},{"url":"https://bugzilla.suse.com/1232089","tags":["report"]},{"url":"https://bugzilla.suse.com/1232093","tags":["report"]},{"url":"https://bugzilla.suse.com/1232094","tags":["report"]},{"url":"https://bugzilla.suse.com/1232097","tags":["report"]},{"url":"https://bugzilla.suse.com/1232098","tags":["report"]},{"url":"https://bugzilla.suse.com/1232105","tags":["report"]},{"url":"https://bugzilla.suse.com/1232109","tags":["report"]},{"url":"https://bugzilla.suse.com/1232111","tags":["report"]},{"url":"https://bugzilla.suse.com/1232114","tags":["report"]},{"url":"https://bugzilla.suse.com/1232116","tags":["report"]},{"url":"https://bugzilla.suse.com/1232117","tags":["report"]},{"url":"https://bugzilla.suse.com/1232124","tags":["report"]},{"url":"https://bugzilla.suse.com/1232126","tags":["report"]},{"url":"https://bugzilla.suse.com/1232127","tags":["report"]},{"url":"https://bugzilla.suse.com/1232129","tags":["report"]},{"url":"https://bugzilla.suse.com/1232130","tags":["report"]},{"url":"https://bugzilla.suse.com/1232131","tags":["report"]},{"url":"https://bugzilla.suse.com/1232132","tags":["report"]},{"url":"https://bugzilla.suse.com/1232134","tags":["report"]},{"url":"https://bugzilla.suse.com/1232135","tags":["report"]},{"url":"https://bugzilla.suse.com/1232140","tags":["report"]},{"url":"https://bugzilla.suse.com/1232141","tags":["report"]},{"url":"https://bugzilla.suse.com/1232142","tags":["report"]},{"url":"https://bugzilla.suse.com/1232145","tags":["report"]},{"url":"https://bugzilla.suse.com/1232147","tags":["report"]},{"url":"https://bugzilla.suse.com/1232148","tags":["report"]},{"url":"https://bugzilla.suse.com/1232149","tags":["report"]},{"url":"https://bugzilla.suse.com/1232151","tags":["report"]},{"url":"https://bugzilla.suse.com/1232152","tags":["report"]},{"url":"https://bugzilla.suse.com/1232154","tags":["report"]},{"url":"https://bugzilla.suse.com/1232155","tags":["report"]},{"url":"https://bugzilla.suse.com/1232156","tags":["report"]},{"url":"https://bugzilla.suse.com/1232159","tags":["report"]},{"url":"https://bugzilla.suse.com/1232160","tags":["report"]},{"url":"https://bugzilla.suse.com/1232162","tags":["report"]},{"url":"https://bugzilla.suse.com/1232164","tags":["report"]},{"url":"https://bugzilla.suse.com/1232174","tags":["report"]},{"url":"https://bugzilla.suse.com/1232180","tags":["report"]},{"url":"https://bugzilla.suse.com/1232182","tags":["report"]},{"url":"https://bugzilla.suse.com/1232183","tags":["report"]},{"url":"https://bugzilla.suse.com/1232185","tags":["report"]},{"url":"https://bugzilla.suse.com/1232187","tags":["report"]},{"url":"https://bugzilla.suse.com/1232189","tags":["report"]},{"url":"https://bugzilla.suse.com/1232192","tags":["report"]},{"url":"https://bugzilla.suse.com/1232195","tags":["report"]},{"url":"https://bugzilla.suse.com/1232196","tags":["report"]},{"url":"https://bugzilla.suse.com/1232199","tags":["report"]},{"url":"https://bugzilla.suse.com/1232200","tags":["report"]},{"url":"https://bugzilla.suse.com/1232201","tags":["report"]},{"url":"https://bugzilla.suse.com/1232208","tags":["report"]},{"url":"https://bugzilla.suse.com/1232217","tags":["report"]},{"url":"https://bugzilla.suse.com/1232218","tags":["report"]},{"url":"https://bugzilla.suse.com/1232220","tags":["report"]},{"url":"https://bugzilla.suse.com/1232221","tags":["report"]},{"url":"https://bugzilla.suse.com/1232222","tags":["report"]},{"url":"https://bugzilla.suse.com/1232232","tags":["report"]},{"url":"https://bugzilla.suse.com/1232250","tags":["report"]},{"url":"https://bugzilla.suse.com/1232251","tags":["report"]},{"url":"https://bugzilla.suse.com/1232253","tags":["report"]},{"url":"https://bugzilla.suse.com/1232254","tags":["report"]},{"url":"https://bugzilla.suse.com/1232255","tags":["report"]},{"url":"https://bugzilla.suse.com/1232256","tags":["report"]},{"url":"https://bugzilla.suse.com/1232259","tags":["report"]},{"url":"https://bugzilla.suse.com/1232260","tags":["report"]},{"url":"https://bugzilla.suse.com/1232262","tags":["report"]},{"url":"https://bugzilla.suse.com/1232263","tags":["report"]},{"url":"https://bugzilla.suse.com/1232275","tags":["report"]},{"url":"https://bugzilla.suse.com/1232279","tags":["report"]},{"url":"https://bugzilla.suse.com/1232282","tags":["report"]},{"url":"https://bugzilla.suse.com/1232285","tags":["report"]},{"url":"https://bugzilla.suse.com/1232287","tags":["report"]},{"url":"https://bugzilla.suse.com/1232295","tags":["report"]},{"url":"https://bugzilla.suse.com/1232305","tags":["report"]},{"url":"https://bugzilla.suse.com/1232307","tags":["report"]},{"url":"https://bugzilla.suse.com/1232309","tags":["report"]},{"url":"https://bugzilla.suse.com/1232310","tags":["report"]},{"url":"https://bugzilla.suse.com/1232312","tags":["report"]},{"url":"https://bugzilla.suse.com/1232313","tags":["report"]},{"url":"https://bugzilla.suse.com/1232314","tags":["report"]},{"url":"https://bugzilla.suse.com/1232315","tags":["report"]},{"url":"https://bugzilla.suse.com/1232316","tags":["report"]},{"url":"https://bugzilla.suse.com/1232317","tags":["report"]},{"url":"https://bugzilla.suse.com/1232329","tags":["report"]},{"url":"https://bugzilla.suse.com/1232332","tags":["report"]},{"url":"https://bugzilla.suse.com/1232333","tags":["report"]},{"url":"https://bugzilla.suse.com/1232334","tags":["report"]},{"url":"https://bugzilla.suse.com/1232335","tags":["report"]},{"url":"https://bugzilla.suse.com/1232337","tags":["report"]},{"url":"https://bugzilla.suse.com/1232339","tags":["report"]},{"url":"https://bugzilla.suse.com/1232340","tags":["report"]},{"url":"https://bugzilla.suse.com/1232342","tags":["report"]},{"url":"https://bugzilla.suse.com/1232345","tags":["report"]},{"url":"https://bugzilla.suse.com/1232349","tags":["report"]},{"url":"https://bugzilla.suse.com/1232352","tags":["report"]},{"url":"https://bugzilla.suse.com/1232354","tags":["report"]},{"url":"https://bugzilla.suse.com/1232355","tags":["report"]},{"url":"https://bugzilla.suse.com/1232359","tags":["report"]},{"url":"https://bugzilla.suse.com/1232362","tags":["report"]},{"url":"https://bugzilla.suse.com/1232369","tags":["report"]},{"url":"https://bugzilla.suse.com/1232370","tags":["report"]},{"url":"https://bugzilla.suse.com/1232378","tags":["report"]},{"url":"https://bugzilla.suse.com/1232381","tags":["report"]},{"url":"https://bugzilla.suse.com/1232383","tags":["report"]},{"url":"https://bugzilla.suse.com/1232392","tags":["report"]},{"url":"https://bugzilla.suse.com/1232394","tags":["report"]},{"url":"https://bugzilla.suse.com/1232395","tags":["report"]},{"url":"https://bugzilla.suse.com/1232417","tags":["report"]},{"url":"https://bugzilla.suse.com/1232418","tags":["report"]},{"url":"https://bugzilla.suse.com/1232424","tags":["report"]},{"url":"https://bugzilla.suse.com/1232427","tags":["report"]},{"url":"https://bugzilla.suse.com/1232432","tags":["report"]},{"url":"https://bugzilla.suse.com/1232435","tags":["report"]},{"url":"https://bugzilla.suse.com/1232501","tags":["report"]},{"url":"https://bugzilla.suse.com/1232502","tags":["report"]},{"url":"https://bugzilla.suse.com/1232503","tags":["report"]},{"url":"https://bugzilla.suse.com/1232504","tags":["report"]},{"url":"https://bugzilla.suse.com/1232505","tags":["report"]},{"url":"https://bugzilla.suse.com/1232506","tags":["report"]},{"url":"https://bugzilla.suse.com/1232507","tags":["report"]},{"url":"https://bugzilla.suse.com/1232511","tags":["report"]},{"url":"https://bugzilla.suse.com/1232519","tags":["report"]},{"url":"https://bugzilla.suse.com/1232520","tags":["report"]},{"url":"https://bugzilla.suse.com/1232529","tags":["report"]},{"url":"https://bugzilla.suse.com/1232552","tags":["report"]},{"url":"https://bugzilla.suse.com/1232623","tags":["report"]},{"url":"https://bugzilla.suse.com/1232626","tags":["report"]},{"url":"https://bugzilla.suse.com/1232627","tags":["report"]},{"url":"https://bugzilla.suse.com/1232628","tags":["report"]},{"url":"https://bugzilla.suse.com/1232629","tags":["report"]},{"url":"https://bugzilla.suse.com/1232757","tags":["report"]},{"url":"https://bugzilla.suse.com/1232768","tags":["report"]},{"url":"https://bugzilla.suse.com/1232819","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-35980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47660","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47697","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50081","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243986-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1232090","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244318-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1012628","tags":["report"]},{"url":"https://bugzilla.suse.com/1082555","tags":["report"]},{"url":"https://bugzilla.suse.com/1215199","tags":["report"]},{"url":"https://bugzilla.suse.com/1218644","tags":["report"]},{"url":"https://bugzilla.suse.com/1220355","tags":["report"]},{"url":"https://bugzilla.suse.com/1221309","tags":["report"]},{"url":"https://bugzilla.suse.com/1222423","tags":["report"]},{"url":"https://bugzilla.suse.com/1222587","tags":["report"]},{"url":"https://bugzilla.suse.com/1222590","tags":["report"]},{"url":"https://bugzilla.suse.com/1223112","tags":["report"]},{"url":"https://bugzilla.suse.com/1223656","tags":["report"]},{"url":"https://bugzilla.suse.com/1223733","tags":["report"]},{"url":"https://bugzilla.suse.com/1224429","tags":["report"]},{"url":"https://bugzilla.suse.com/1224518","tags":["report"]},{"url":"https://bugzilla.suse.com/1224548","tags":["report"]},{"url":"https://bugzilla.suse.com/1224948","tags":["report"]},{"url":"https://bugzilla.suse.com/1225713","tags":["report"]},{"url":"https://bugzilla.suse.com/1225725","tags":["report"]},{"url":"https://bugzilla.suse.com/1225730","tags":["report"]},{"url":"https://bugzilla.suse.com/1225742","tags":["report"]},{"url":"https://bugzilla.suse.com/1225764","tags":["report"]},{"url":"https://bugzilla.suse.com/1225768","tags":["report"]},{"url":"https://bugzilla.suse.com/1225813","tags":["report"]},{"url":"https://bugzilla.suse.com/1225903","tags":["report"]},{"url":"https://bugzilla.suse.com/1226130","tags":["report"]},{"url":"https://bugzilla.suse.com/1226748","tags":["report"]},{"url":"https://bugzilla.suse.com/1226872","tags":["report"]},{"url":"https://bugzilla.suse.com/1227726","tags":["report"]},{"url":"https://bugzilla.suse.com/1227842","tags":["report"]},{"url":"https://bugzilla.suse.com/1228430","tags":["report"]},{"url":"https://bugzilla.suse.com/1228850","tags":["report"]},{"url":"https://bugzilla.suse.com/1229165","tags":["report"]},{"url":"https://bugzilla.suse.com/1230231","tags":["report"]},{"url":"https://bugzilla.suse.com/1230557","tags":["report"]},{"url":"https://bugzilla.suse.com/1230558","tags":["report"]},{"url":"https://bugzilla.suse.com/1230733","tags":["report"]},{"url":"https://bugzilla.suse.com/1230807","tags":["report"]},{"url":"https://bugzilla.suse.com/1230817","tags":["report"]},{"url":"https://bugzilla.suse.com/1230827","tags":["report"]},{"url":"https://bugzilla.suse.com/1230971","tags":["report"]},{"url":"https://bugzilla.suse.com/1231076","tags":["report"]},{"url":"https://bugzilla.suse.com/1231182","tags":["report"]},{"url":"https://bugzilla.suse.com/1231453","tags":["report"]},{"url":"https://bugzilla.suse.com/1231465","tags":["report"]},{"url":"https://bugzilla.suse.com/1231630","tags":["report"]},{"url":"https://bugzilla.suse.com/1231920","tags":["report"]},{"url":"https://bugzilla.suse.com/1231930","tags":["report"]},{"url":"https://bugzilla.suse.com/1231946","tags":["report"]},{"url":"https://bugzilla.suse.com/1231952","tags":["report"]},{"url":"https://bugzilla.suse.com/1232096","tags":["report"]},{"url":"https://bugzilla.suse.com/1232103","tags":["report"]},{"url":"https://bugzilla.suse.com/1232104","tags":["report"]},{"url":"https://bugzilla.suse.com/1232157","tags":["report"]},{"url":"https://bugzilla.suse.com/1232165","tags":["report"]},{"url":"https://bugzilla.suse.com/1232166","tags":["report"]},{"url":"https://bugzilla.suse.com/1232198","tags":["report"]},{"url":"https://bugzilla.suse.com/1232207","tags":["report"]},{"url":"https://bugzilla.suse.com/1232224","tags":["report"]},{"url":"https://bugzilla.suse.com/1232258","tags":["report"]},{"url":"https://bugzilla.suse.com/1232264","tags":["report"]},{"url":"https://bugzilla.suse.com/1232272","tags":["report"]},{"url":"https://bugzilla.suse.com/1232318","tags":["report"]},{"url":"https://bugzilla.suse.com/1232357","tags":["report"]},{"url":"https://bugzilla.suse.com/1232358","tags":["report"]},{"url":"https://bugzilla.suse.com/1232361","tags":["report"]},{"url":"https://bugzilla.suse.com/1232366","tags":["report"]},{"url":"https://bugzilla.suse.com/1232367","tags":["report"]},{"url":"https://bugzilla.suse.com/1232368","tags":["report"]},{"url":"https://bugzilla.suse.com/1232371","tags":["report"]},{"url":"https://bugzilla.suse.com/1232374","tags":["report"]},{"url":"https://bugzilla.suse.com/1232385","tags":["report"]},{"url":"https://bugzilla.suse.com/1232386","tags":["report"]},{"url":"https://bugzilla.suse.com/1232387","tags":["report"]},{"url":"https://bugzilla.suse.com/1232396","tags":["report"]},{"url":"https://bugzilla.suse.com/1232413","tags":["report"]},{"url":"https://bugzilla.suse.com/1232416","tags":["report"]},{"url":"https://bugzilla.suse.com/1232436","tags":["report"]},{"url":"https://bugzilla.suse.com/1232442","tags":["report"]},{"url":"https://bugzilla.suse.com/1232446","tags":["report"]},{"url":"https://bugzilla.suse.com/1232483","tags":["report"]},{"url":"https://bugzilla.suse.com/1232494","tags":["report"]},{"url":"https://bugzilla.suse.com/1232498","tags":["report"]},{"url":"https://bugzilla.suse.com/1232499","tags":["report"]},{"url":"https://bugzilla.suse.com/1232500","tags":["report"]},{"url":"https://bugzilla.suse.com/1232704","tags":["report"]},{"url":"https://bugzilla.suse.com/1232823","tags":["report"]},{"url":"https://bugzilla.suse.com/1232860","tags":["report"]},{"url":"https://bugzilla.suse.com/1232869","tags":["report"]},{"url":"https://bugzilla.suse.com/1232870","tags":["report"]},{"url":"https://bugzilla.suse.com/1232873","tags":["report"]},{"url":"https://bugzilla.suse.com/1232876","tags":["report"]},{"url":"https://bugzilla.suse.com/1232877","tags":["report"]},{"url":"https://bugzilla.suse.com/1232878","tags":["report"]},{"url":"https://bugzilla.suse.com/1232880","tags":["report"]},{"url":"https://bugzilla.suse.com/1232881","tags":["report"]},{"url":"https://bugzilla.suse.com/1232884","tags":["report"]},{"url":"https://bugzilla.suse.com/1232885","tags":["report"]},{"url":"https://bugzilla.suse.com/1232887","tags":["report"]},{"url":"https://bugzilla.suse.com/1232888","tags":["report"]},{"url":"https://bugzilla.suse.com/1232890","tags":["report"]},{"url":"https://bugzilla.suse.com/1232892","tags":["report"]},{"url":"https://bugzilla.suse.com/1232894","tags":["report"]},{"url":"https://bugzilla.suse.com/1232896","tags":["report"]},{"url":"https://bugzilla.suse.com/1232897","tags":["report"]},{"url":"https://bugzilla.suse.com/1232905","tags":["report"]},{"url":"https://bugzilla.suse.com/1232907","tags":["report"]},{"url":"https://bugzilla.suse.com/1232914","tags":["report"]},{"url":"https://bugzilla.suse.com/1232919","tags":["report"]},{"url":"https://bugzilla.suse.com/1232925","tags":["report"]},{"url":"https://bugzilla.suse.com/1232926","tags":["report"]},{"url":"https://bugzilla.suse.com/1232928","tags":["report"]},{"url":"https://bugzilla.suse.com/1232935","tags":["report"]},{"url":"https://bugzilla.suse.com/1233029","tags":["report"]},{"url":"https://bugzilla.suse.com/1233032","tags":["report"]},{"url":"https://bugzilla.suse.com/1233035","tags":["report"]},{"url":"https://bugzilla.suse.com/1233036","tags":["report"]},{"url":"https://bugzilla.suse.com/1233041","tags":["report"]},{"url":"https://bugzilla.suse.com/1233044","tags":["report"]},{"url":"https://bugzilla.suse.com/1233049","tags":["report"]},{"url":"https://bugzilla.suse.com/1233050","tags":["report"]},{"url":"https://bugzilla.suse.com/1233051","tags":["report"]},{"url":"https://bugzilla.suse.com/1233056","tags":["report"]},{"url":"https://bugzilla.suse.com/1233057","tags":["report"]},{"url":"https://bugzilla.suse.com/1233061","tags":["report"]},{"url":"https://bugzilla.suse.com/1233062","tags":["report"]},{"url":"https://bugzilla.suse.com/1233063","tags":["report"]},{"url":"https://bugzilla.suse.com/1233065","tags":["report"]},{"url":"https://bugzilla.suse.com/1233067","tags":["report"]},{"url":"https://bugzilla.suse.com/1233070","tags":["report"]},{"url":"https://bugzilla.suse.com/1233073","tags":["report"]},{"url":"https://bugzilla.suse.com/1233074","tags":["report"]},{"url":"https://bugzilla.suse.com/1233088","tags":["report"]},{"url":"https://bugzilla.suse.com/1233091","tags":["report"]},{"url":"https://bugzilla.suse.com/1233092","tags":["report"]},{"url":"https://bugzilla.suse.com/1233097","tags":["report"]},{"url":"https://bugzilla.suse.com/1233100","tags":["report"]},{"url":"https://bugzilla.suse.com/1233103","tags":["report"]},{"url":"https://bugzilla.suse.com/1233104","tags":["report"]},{"url":"https://bugzilla.suse.com/1233105","tags":["report"]},{"url":"https://bugzilla.suse.com/1233106","tags":["report"]},{"url":"https://bugzilla.suse.com/1233107","tags":["report"]},{"url":"https://bugzilla.suse.com/1233108","tags":["report"]},{"url":"https://bugzilla.suse.com/1233110","tags":["report"]},{"url":"https://bugzilla.suse.com/1233111","tags":["report"]},{"url":"https://bugzilla.suse.com/1233113","tags":["report"]},{"url":"https://bugzilla.suse.com/1233114","tags":["report"]},{"url":"https://bugzilla.suse.com/1233115","tags":["report"]},{"url":"https://bugzilla.suse.com/1233117","tags":["report"]},{"url":"https://bugzilla.suse.com/1233119","tags":["report"]},{"url":"https://bugzilla.suse.com/1233123","tags":["report"]},{"url":"https://bugzilla.suse.com/1233125","tags":["report"]},{"url":"https://bugzilla.suse.com/1233127","tags":["report"]},{"url":"https://bugzilla.suse.com/1233129","tags":["report"]},{"url":"https://bugzilla.suse.com/1233130","tags":["report"]},{"url":"https://bugzilla.suse.com/1233132","tags":["report"]},{"url":"https://bugzilla.suse.com/1233135","tags":["report"]},{"url":"https://bugzilla.suse.com/1233176","tags":["report"]},{"url":"https://bugzilla.suse.com/1233179","tags":["report"]},{"url":"https://bugzilla.suse.com/1233185","tags":["report"]},{"url":"https://bugzilla.suse.com/1233188","tags":["report"]},{"url":"https://bugzilla.suse.com/1233189","tags":["report"]},{"url":"https://bugzilla.suse.com/1233191","tags":["report"]},{"url":"https://bugzilla.suse.com/1233193","tags":["report"]},{"url":"https://bugzilla.suse.com/1233197","tags":["report"]},{"url":"https://bugzilla.suse.com/1233201","tags":["report"]},{"url":"https://bugzilla.suse.com/1233203","tags":["report"]},{"url":"https://bugzilla.suse.com/1233205","tags":["report"]},{"url":"https://bugzilla.suse.com/1233206","tags":["report"]},{"url":"https://bugzilla.suse.com/1233207","tags":["report"]},{"url":"https://bugzilla.suse.com/1233208","tags":["report"]},{"url":"https://bugzilla.suse.com/1233209","tags":["report"]},{"url":"https://bugzilla.suse.com/1233210","tags":["report"]},{"url":"https://bugzilla.suse.com/1233211","tags":["report"]},{"url":"https://bugzilla.suse.com/1233212","tags":["report"]},{"url":"https://bugzilla.suse.com/1233216","tags":["report"]},{"url":"https://bugzilla.suse.com/1233217","tags":["report"]},{"url":"https://bugzilla.suse.com/1233219","tags":["report"]},{"url":"https://bugzilla.suse.com/1233226","tags":["report"]},{"url":"https://bugzilla.suse.com/1233238","tags":["report"]},{"url":"https://bugzilla.suse.com/1233241","tags":["report"]},{"url":"https://bugzilla.suse.com/1233244","tags":["report"]},{"url":"https://bugzilla.suse.com/1233253","tags":["report"]},{"url":"https://bugzilla.suse.com/1233255","tags":["report"]},{"url":"https://bugzilla.suse.com/1233293","tags":["report"]},{"url":"https://bugzilla.suse.com/1233298","tags":["report"]},{"url":"https://bugzilla.suse.com/1233305","tags":["report"]},{"url":"https://bugzilla.suse.com/1233320","tags":["report"]},{"url":"https://bugzilla.suse.com/1233350","tags":["report"]},{"url":"https://bugzilla.suse.com/1233443","tags":["report"]},{"url":"https://bugzilla.suse.com/1233452","tags":["report"]},{"url":"https://bugzilla.suse.com/1233453","tags":["report"]},{"url":"https://bugzilla.suse.com/1233454","tags":["report"]},{"url":"https://bugzilla.suse.com/1233456","tags":["report"]},{"url":"https://bugzilla.suse.com/1233457","tags":["report"]},{"url":"https://bugzilla.suse.com/1233458","tags":["report"]},{"url":"https://bugzilla.suse.com/1233460","tags":["report"]},{"url":"https://bugzilla.suse.com/1233462","tags":["report"]},{"url":"https://bugzilla.suse.com/1233463","tags":["report"]},{"url":"https://bugzilla.suse.com/1233464","tags":["report"]},{"url":"https://bugzilla.suse.com/1233465","tags":["report"]},{"url":"https://bugzilla.suse.com/1233468","tags":["report"]},{"url":"https://bugzilla.suse.com/1233471","tags":["report"]},{"url":"https://bugzilla.suse.com/1233476","tags":["report"]},{"url":"https://bugzilla.suse.com/1233478","tags":["report"]},{"url":"https://bugzilla.suse.com/1233479","tags":["report"]},{"url":"https://bugzilla.suse.com/1233481","tags":["report"]},{"url":"https://bugzilla.suse.com/1233484","tags":["report"]},{"url":"https://bugzilla.suse.com/1233485","tags":["report"]},{"url":"https://bugzilla.suse.com/1233487","tags":["report"]},{"url":"https://bugzilla.suse.com/1233490","tags":["report"]},{"url":"https://bugzilla.suse.com/1233491","tags":["report"]},{"url":"https://bugzilla.suse.com/1233523","tags":["report"]},{"url":"https://bugzilla.suse.com/1233524","tags":["report"]},{"url":"https://bugzilla.suse.com/1233540","tags":["report"]},{"url":"https://bugzilla.suse.com/1233547","tags":["report"]},{"url":"https://bugzilla.suse.com/1233548","tags":["report"]},{"url":"https://bugzilla.suse.com/1233550","tags":["report"]},{"url":"https://bugzilla.suse.com/1233552","tags":["report"]},{"url":"https://bugzilla.suse.com/1233553","tags":["report"]},{"url":"https://bugzilla.suse.com/1233554","tags":["report"]},{"url":"https://bugzilla.suse.com/1233555","tags":["report"]},{"url":"https://bugzilla.suse.com/1233557","tags":["report"]},{"url":"https://bugzilla.suse.com/1233560","tags":["report"]},{"url":"https://bugzilla.suse.com/1233561","tags":["report"]},{"url":"https://bugzilla.suse.com/1233564","tags":["report"]},{"url":"https://bugzilla.suse.com/1233566","tags":["report"]},{"url":"https://bugzilla.suse.com/1233567","tags":["report"]},{"url":"https://bugzilla.suse.com/1233568","tags":["report"]},{"url":"https://bugzilla.suse.com/1233570","tags":["report"]},{"url":"https://bugzilla.suse.com/1233572","tags":["report"]},{"url":"https://bugzilla.suse.com/1233573","tags":["report"]},{"url":"https://bugzilla.suse.com/1233577","tags":["report"]},{"url":"https://bugzilla.suse.com/1233580","tags":["report"]},{"url":"https://bugzilla.suse.com/1233640","tags":["report"]},{"url":"https://bugzilla.suse.com/1233641","tags":["report"]},{"url":"https://bugzilla.suse.com/1233642","tags":["report"]},{"url":"https://bugzilla.suse.com/1233721","tags":["report"]},{"url":"https://bugzilla.suse.com/1233754","tags":["report"]},{"url":"https://bugzilla.suse.com/1233756","tags":["report"]},{"url":"https://bugzilla.suse.com/1233769","tags":["report"]},{"url":"https://bugzilla.suse.com/1233771","tags":["report"]},{"url":"https://bugzilla.suse.com/1233977","tags":["report"]},{"url":"https://bugzilla.suse.com/1234009","tags":["report"]},{"url":"https://bugzilla.suse.com/1234011","tags":["report"]},{"url":"https://bugzilla.suse.com/1234012","tags":["report"]},{"url":"https://bugzilla.suse.com/1234025","tags":["report"]},{"url":"https://bugzilla.suse.com/1234039","tags":["report"]},{"url":"https://bugzilla.suse.com/1234040","tags":["report"]},{"url":"https://bugzilla.suse.com/1234041","tags":["report"]},{"url":"https://bugzilla.suse.com/1234042","tags":["report"]},{"url":"https://bugzilla.suse.com/1234043","tags":["report"]},{"url":"https://bugzilla.suse.com/1234044","tags":["report"]},{"url":"https://bugzilla.suse.com/1234045","tags":["report"]},{"url":"https://bugzilla.suse.com/1234046","tags":["report"]},{"url":"https://bugzilla.suse.com/1234072","tags":["report"]},{"url":"https://bugzilla.suse.com/1234078","tags":["report"]},{"url":"https://bugzilla.suse.com/1234081","tags":["report"]},{"url":"https://bugzilla.suse.com/1234083","tags":["report"]},{"url":"https://bugzilla.suse.com/1234085","tags":["report"]},{"url":"https://bugzilla.suse.com/1234087","tags":["report"]},{"url":"https://bugzilla.suse.com/1234093","tags":["report"]},{"url":"https://bugzilla.suse.com/1234098","tags":["report"]},{"url":"https://bugzilla.suse.com/1234108","tags":["report"]},{"url":"https://bugzilla.suse.com/1234121","tags":["report"]},{"url":"https://bugzilla.suse.com/1234223","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-35888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38589","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-41023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50004","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50175","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50192","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50215","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50255","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50279","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50282","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50292","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53121","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-53138","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244387-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1234034","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520163-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1233204","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50228","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520164-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520246-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520247-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-47732","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47732","tags":["report"]},{"url":"https://git.kernel.org/linus/e0d3b845a1b10b7b5abdad7ecc69d45b2aab3209","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7276-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7277-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7301-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7303-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7304-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7303-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7310-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7311-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7303-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7384-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7385-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7386-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7384-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7403-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-52917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-41016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47670","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47671","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47673","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47677","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47678","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47679","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47681","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47682","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47684","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47685","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47686","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47687","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47688","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47689","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47690","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47691","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47692","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47693","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47698","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47699","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47700","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47701","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47702","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47703","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47704","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47706","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47707","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47709","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47710","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47712","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47713","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47714","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47715","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47716","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47718","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47719","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47728","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47730","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47731","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47734","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47735","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47737","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47738","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47739","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47740","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47741","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47743","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47744","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47745","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47747","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47748","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47751","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49850","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49852","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49853","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49856","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49858","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49859","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49860","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49861","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49862","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49863","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49864","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49866","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49867","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49868","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49870","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49871","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49874","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49875","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49876","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49877","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49878","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49879","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49882","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49883","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49884","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49885","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49886","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49888","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49889","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49890","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49891","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49892","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49894","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49895","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49896","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49897","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49900","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49901","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49902","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49903","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49905","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49915","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49917","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49918","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49919","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49926","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49929","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49930","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49933","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49935","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49936","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49937","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49938","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49939","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49944","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49945","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49946","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49947","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49948","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49949","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49950","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49952","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49957","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49958","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49959","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49961","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49962","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49963","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49965","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49973","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49974","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49975","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49976","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49977","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49978","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49980","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49981","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49982","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49983","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49985","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49986","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49987","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49988","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49989","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49991","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49992","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49994","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49995","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49996","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49997","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50001","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50005","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50007","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50008","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50016","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50017","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50179","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-0927","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-49034","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-46869","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47680","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47694","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47708","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47711","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47717","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47726","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47736","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-47746","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49857","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49865","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49869","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49872","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49873","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49887","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49940","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49941","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49943","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49964","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49970","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49971","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49972","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49979","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50019","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50020","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50021","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50024","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50025","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50026","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50027","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50028","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50034","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50036","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50038","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50039","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50040","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50042","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50043","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50044","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50047","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50048","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50057","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50059","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50064","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50066","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50067","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50079","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50081","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50087","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50101","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50102","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50106","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50109","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50118","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50132","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50136","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50159","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50165","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50166","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50171","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50172","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50173","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50182","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50186","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50188","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50190","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50198","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50200","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50205","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50206","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50211","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50222","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50225","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50235","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50238","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50240","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50245","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50248","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50250","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50253","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50256","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50257","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50258","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50259","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50262","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50265","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50266","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50268","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50269","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50270","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50271","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50275","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50276","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50278","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50279","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50281","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50282","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50283","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50284","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50285","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50286","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50287","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50288","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50295","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50296","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50297","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50298","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50302","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50303","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50304","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53042","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53043","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53044","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53047","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53048","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53053","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53055","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53056","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53058","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53059","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53063","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53065","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53066","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53067","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53069","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53072","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53076","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53078","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53079","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53080","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53081","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53082","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53083","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53084","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53087","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53088","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53089","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53090","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53091","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53092","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53093","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53094","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53095","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53098","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53099","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53100","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53101","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53104","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53105","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53106","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53107","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53108","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53109","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53110","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53114","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53115","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53116","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53117","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53118","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53122","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53123","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53124","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53126","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53132","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53135","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53137","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53140","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53146","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53149","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53150","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53151","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53152","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53156","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53157","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53158","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53161","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53162","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53165","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53166","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53167","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53168","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53169","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53170","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53171","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53172","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53173","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53174","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53175","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53178","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53180","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53181","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53183","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53188","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53190","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53192","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53194","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53198","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53199","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53200","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53201","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53202","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53203","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53214","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53215","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53216","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53217","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53219","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53220","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53223","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53226","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53227","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53229","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53230","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53231","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53232","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53233","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53234","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53236","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53237","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53239","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56532","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56533","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56536","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56537","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56538","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56539","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56541","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56542","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56543","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56545","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56549","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56677","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56678","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56679","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56680","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56681","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56683","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56684","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56685","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56687","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56688","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56689","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56690","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56691","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56692","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56693","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56694","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56698","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56699","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56700","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56701","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56702","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56703","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56704","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56705","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56707","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56708","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56722","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56724","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56725","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56726","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56727","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56728","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56729","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56739","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56741","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56744","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56745","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56746","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56747","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56748","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56751","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56755","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-53164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-8805","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49893","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-49921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56582","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56614","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56663","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-2312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50032","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56595","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56658","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-57798","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2NO44GTYBSPPWKFDREFWHITK4XKTNVLP/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49990","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50018","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50066","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50173","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50211","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50263","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/T7LN2FDZYBYZRLX5LOA3REDAXV7VKGW4/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-47233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-7042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-2201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26865","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-47732","title":"crypto: iaa - Fix potential use after free bug","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix potential use after free bug\n\nThe free_device_compression_mode(iaa_device, device_mode) function frees\n\"device_mode\" but it iss passed to iaa_compression_modes[i]-\u003efree() a few\nlines later resulting in a use after free.\n\nThe good news is that, so far as I can tell, nothing implements the\n-\u003efree() function and the use after free happens in dead code.  But, with\nthis fix, when something does implement it, we'll be ready.  :)","status":"published","published":"2024-10-21T12:14:03.863Z","modified":"2026-08-05T11:39:48.573Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:33:57.302325Z"}],"euvd":[{"id":"EUVD-2024-42650","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix potential use after free bug\n\nThe free_device_compression_mode(iaa_device, device_mode) function frees\n\"device_mode\" but it iss passed to iaa_compression_modes[i]-\u003efree() a few\nlines later resulting in a use after free.\n\nThe good news is that, so far as I can tell, nothing implements the\n-\u003efree() function and the use after free happens in dead code.  But, with\nthis fix, when something does implement it, we'll be ready.  :)","status":"published","published":"2024-10-21T12:14:03Z","modified":"2026-08-05T11:39:48Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:02:16.228226Z"}],"ghsa":[{"id":"GHSA-gmcr-26hv-76c3","title":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix potential...","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix potential use after free bug\n\nThe free_device_compression_mode(iaa_device, device_mode) function frees\n\"device_mode\" but it iss passed to iaa_compression_modes[i]-\u003efree() a few\nlines later resulting in a use after free.\n\nThe good news is that, so far as I can tell, nothing implements the\n-\u003efree() function and the use after free happens in dead code.  But, with\nthis fix, when something does implement it, we'll be ready.  :)","status":"published","published":"2024-10-21T15:32:26Z","modified":"2024-10-23T18:34:11Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:58:34.787705Z"}],"nvd":[{"id":"CVE-2024-47732","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix potential use after free bug\n\nThe free_device_compression_mode(iaa_device, device_mode) function frees\n\"device_mode\" but it iss passed to iaa_compression_modes[i]-\u003efree() a few\nlines later resulting in a use after free.\n\nThe good news is that, so far as I can tell, nothing implements the\n-\u003efree() function and the use after free happens in dead code.  But, with\nthis fix, when something does implement it, we'll be ready.  :)","status":"published","published":"2024-10-21T13:15:03.363Z","modified":"2026-08-04T11:20:45.96Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:10:32.45889Z"}],"osv":[{"id":"BELL-CVE-2024-47732","status":"published","published":"2024-10-23T05:57:39.241786Z","modified":"2026-01-26T09:35:16.896028Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:20.711507Z"},{"id":"CVE-2024-47732","title":"crypto: iaa - Fix potential use after free bug","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix potential use after free bug\n\nThe free_device_compression_mode(iaa_device, device_mode) function frees\n\"device_mode\" but it iss passed to iaa_compression_modes[i]-\u003efree() a few\nlines later resulting in a use after free.\n\nThe good news is that, so far as I can tell, nothing implements the\n-\u003efree() function and the use after free happens in dead code.  But, with\nthis fix, when something does implement it, we'll be ready.  :)","status":"published","published":"2024-10-21T12:14:03.863Z","modified":"2026-10-28T02:31:13.820121386Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:43.253252Z"},{"id":"DEBIAN-CVE-2024-47732","description":"In the Linux kernel, the following vulnerability has been resolved:  crypto: iaa - Fix potential use after free bug  The free_device_compression_mode(iaa_device, device_mode) function frees \"device_mode\" but it iss passed to iaa_compression_modes[i]-\u003efree() a few lines later resulting in a use after free.  The good news is that, so far as I can tell, nothing implements the -\u003efree() function and the use after free happens in dead code.  But, with this fix, when something does implement it, we'll be ready.  :)","status":"published","published":"2024-10-21T13:15:03.363Z","modified":"2026-11-02T12:02:52.067809344Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:43.798789Z"},{"id":"OESA-2025-1729","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved:genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()irq_find_at_or_after() dereferences the interrupt descriptor which isreturned by mt_find() while neither holding sparse_irq_lock nor RCU readlock, which means the descriptor can be freed between mt_find() and thedereference:    CPU0                            CPU1    desc = mt_find()                                    delayed_free_desc(desc)    irq_desc_get_irq(desc)The use-after-free is reported by KASAN:    Call trace:     irq_get_next_irq+0x58/0x84     show_stat+0x638/0x824     seq_read_iter+0x158/0x4ec     proc_reg_read_iter+0x94/0x12c     vfs_read+0x1e0/0x2c8    Freed by task 4471:     slab_free_freelist_hook+0x174/0x1e0     __kmem_cache_free+0xa4/0x1dc     kfree+0x64/0x128     irq_kobj_release+0x28/0x3c     kobject_put+0xcc/0x1e0     delayed_free_desc+0x14/0x2c     rcu_do_batch+0x214/0x720Guard the access with a RCU read lock section.(CVE-2024-38385)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/lima: fix shared irq handling on driver remove\n\nlima uses a shared interrupt, so the interrupt handlers must be prepared\nto be called at any time. At driver removal time, the clocks are\ndisabled early and the interrupts stay registered until the very end of\nthe remove process due to the devm usage.\nThis is potentially a bug as the interrupts access device registers\nwhich assumes clocks are enabled. A crash can be triggered by removing\nthe driver in a kernel with CONFIG_DEBUG_SHIRQ enabled.\nThis patch frees the interrupts at each lima device finishing callback\nso that the handlers are already unregistered by the time we fully\ndisable clocks.(CVE-2024-42127)\n\nIn the Linux kernel, the following vulnerability has been resolved:mm: avoid overflows in dirty throttling logicThe dirty throttling logic is interspersed with assumptions that dirtylimits in PAGE_SIZE units fit into 32-bit (so that various multiplicationsfit into 64-bits).  If limits end up being larger, we will hit overflows,possible divisions by 0 etc.  Fix these problems by never allowing solarge dirty limits as they have dubious practical value anyway.  Fordirty_bytes / dirty_background_bytes interfaces we can just refuse to setso large limits.  For dirty_ratio / dirty_background_ratio it isn t sosimple as the dirty limit is computed from the amount of available memorywhich can change due to memory hotplug etc.  So when converting dirtylimits from ratios to numbers of pages, we just don t allow the result toexceed UINT_MAX.This is root-only triggerable problem which occurs when the operatorsets dirty limits to \u0026gt;16 TB.(CVE-2024-42131)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/msm/dpu: move dpu_encoder\u0026apos;s connector assignment to atomic_enable()\n\nFor cases where the crtc\u0026apos;s connectors_changed was set without enable/active\ngetting toggled , there is an atomic_enable() call followed by an\natomic_disable() but without an atomic_mode_set().\n\nThis results in a NULL ptr access for the dpu_encoder_get_drm_fmt() call in\nthe atomic_enable() as the dpu_encoder\u0026apos;s connector was cleared in the\natomic_disable() but not re-assigned as there was no atomic_mode_set() call.\n\nFix the NULL ptr access by moving the assignment for atomic_enable() and also\nuse drm_atomic_get_new_connector_for_encoder() to get the connector from\nthe atomic_state.\n\nPatchwork: https://patchwork.freedesktop.org/patch/606729/(CVE-2024-45015)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix potential use after free bug\n\nThe free_device_compression_mode(iaa_device, device_mode) function frees\n\u0026quot;device_mode\u0026quot; but it iss passed to iaa_compression_modes[i]-\u0026gt;free() a few\nlines later resulting in a use after free.\n\nThe good news is that, so far as I can tell, nothing implements the\n-\u0026gt;free() function and the use after free happens in dead code.  But, with\nthis fix, when something does implement it, we\u0026apos;ll be ready.  :)(CVE-2024-47732)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: flush delalloc workers queue before stopping cleaner kthread during unmount\n\nDuring the unmount path, at close_ctree(), we first stop the cleaner\nkthread, using kthread_stop() which frees the associated task_struct, and\nthen stop and destroy all the work queues. However after we stopped the\ncleaner we may still have a worker from the delalloc_workers queue running\ninode.c:submit_compressed_extents(), which calls btrfs_add_delayed_iput(),\nwhich in turn tries to wake up the cleaner kthread - which was already\ndestroyed before, resulting in a use-after-free on the task_struct.\n\nSyzbot reported this with the following stack traces:\n\n  BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n  Read of size 8 at addr ffff8880259d2818 by task kworker/u8:3/52\n\n  CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0\n  Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n  Workqueue: btrfs-delalloc btrfs_work_helper\n  Call Trace:\n   \u0026lt;TASK\u0026gt;\n   __dump_stack lib/dump_stack.c:94 [inline]\n   dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n   print_address_description mm/kasan/report.c:378 [inline]\n   print_report+0x169/0x550 mm/kasan/report.c:489\n   kasan_report+0x143/0x180 mm/kasan/report.c:602\n   __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n   lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849\n   __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n   _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162\n   class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline]\n   try_to_wake_up+0xc2/0x1470 kernel/sched/core.c:4205\n   submit_compressed_extents+0xdf/0x16e0 fs/btrfs/inode.c:1615\n   run_ordered_work fs/btrfs/async-thread.c:288 [inline]\n   btrfs_work_helper+0x96f/0xc40 fs/btrfs/async-thread.c:324\n   process_one_work kernel/workqueue.c:3229 [inline]\n   process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n   worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n   kthread+0x2f0/0x390 kernel/kthread.c:389\n   ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n   ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n   \u0026lt;/TASK\u0026gt;\n\n  Allocated by task 2:\n   kasan_save_stack mm/kasan/common.c:47 [inline]\n   kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n   unpoison_slab_object mm/kasan/common.c:319 [inline]\n   __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345\n   kasan_slab_alloc include/linux/kasan.h:250 [inline]\n   slab_post_alloc_hook mm/slub.c:4104 [inline]\n   slab_alloc_node mm/slub.c:4153 [inline]\n   kmem_cache_alloc_node_noprof+0x1d9/0x380 mm/slub.c:4205\n   alloc_task_struct_node kernel/fork.c:180 [inline]\n   dup_task_struct+0x57/0x8c0 kernel/fork.c:1113\n   copy_process+0x5d1/0x3d50 kernel/fork.c:2225\n   kernel_clone+0x223/0x870 kernel/fork.c:2807\n   kernel_thread+0x1bc/0x240 kernel/fork.c:2869\n   create_kthread kernel/kthread.c:412 [inline]\n   kthreadd+0x60d/0x810 kernel/kthread.c:767\n   ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n   ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\n  Freed by task 24:\n   kasan_save_stack mm/kasan/common.c:47 [inline]\n   kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n   kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582\n   poison_slab_object mm/kasan/common.c:247 [inline]\n   __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264\n   kasan_slab_free include/linux/kasan.h:233 [inline]\n   slab_free_hook mm/slub.c:2338 [inline]\n   slab_free mm/slub.c:4598 [inline]\n   kmem_cache_free+0x195/0x410 mm/slub.c:4700\n   put_task_struct include/linux/sched/task.h:144 [inline]\n   delayed_put_task_struct+0x125/0x300 kernel/exit.c:227\n   rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n   rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n   handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:554\n   run_ksoftirqd+0xca/0x130 kernel/softirq.c:943\n  \n---truncated---(CVE-2024-57896)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntomoyo: don\u0026apos;t emit warning in tomoyo_write_control()\n\nsyzbot is reporting too large allocation warning at tomoyo_write_control(),\nfor one can write a very very long line without new line character. To fix\nthis warning, I use __GFP_NOWARN rather than checking for KMALLOC_MAX_SIZE,\nfor practically a valid line should be always shorter than 32KB where the\n\u0026quot;too small to fail\u0026quot; memory-allocation rule applies.\n\nOne might try to write a valid line that is longer than 32KB, but such\nrequest will likely fail with -ENOMEM. Therefore, I feel that separately\nreturning -EINVAL when a line is longer than KMALLOC_MAX_SIZE is redundant.\nThere is no need to distinguish over-32KB and over-KMALLOC_MAX_SIZE.(CVE-2024-58085)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsockmap, vsock: For connectible sockets allow only connected\n\nsockmap expects all vsocks to have a transport assigned, which is expressed\nin vsock_proto::psock_update_sk_prot(). However, there is an edge case\nwhere an unconnected (connectible) socket may lose its previously assigned\ntransport. This is handled with a NULL check in the vsock/BPF recv path.\n\nAnother design detail is that listening vsocks are not supposed to have any\ntransport assigned at all. Which implies they are not supported by the\nsockmap. But this is complicated by the fact that a socket, before\nswitching to TCP_LISTEN, may have had some transport assigned during a\nfailed connect() attempt. Hence, we may end up with a listening vsock in a\nsockmap, which blows up quickly:\n\nKASAN: null-ptr-deref in range [0x0000000000000120-0x0000000000000127]\nCPU: 7 UID: 0 PID: 56 Comm: kworker/7:0 Not tainted 6.14.0-rc1+\nWorkqueue: vsock-loopback vsock_loopback_work\nRIP: 0010:vsock_read_skb+0x4b/0x90\nCall Trace:\n sk_psock_verdict_data_ready+0xa4/0x2e0\n virtio_transport_recv_pkt+0x1ca8/0x2acc\n vsock_loopback_work+0x27d/0x3f0\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x35a/0x700\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n\nFor connectible sockets, instead of relying solely on the state of\nvsk-\u0026gt;transport, tell sockmap to only allow those representing established\nconnections. This aligns with the behaviour for AF_INET and AF_UNIX.(CVE-2025-21854)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmm/migrate_device: don\u0026apos;t add folio to be freed to LRU in migrate_device_finalize()\n\nIf migration succeeded, we called\nfolio_migrate_flags()-\u0026gt;mem_cgroup_migrate() to migrate the memcg from the\nold to the new folio.  This will set memcg_data of the old folio to 0.\n\nSimilarly, if migration failed, memcg_data of the dst folio is left unset.\n\nIf we call folio_putback_lru() on such folios (memcg_data == 0), we will\nadd the folio to be freed to the LRU, making memcg code unhappy.  Running\nthe hmm selftests:\n\n  # ./hmm-tests\n  ...\n  #  RUN           hmm.hmm_device_private.migrate ...\n  [  102.078007][T14893] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7ff27d200 pfn:0x13cc00\n  [  102.079974][T14893] anon flags: 0x17ff00000020018(uptodate|dirty|swapbacked|node=0|zone=2|lastcpupid=0x7ff)\n  [  102.082037][T14893] raw: 017ff00000020018 dead000000000100 dead000000000122 ffff8881353896c9\n  [  102.083687][T14893] raw: 00000007ff27d200 0000000000000000 00000001ffffffff 0000000000000000\n  [  102.085331][T14893] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg \u0026amp;\u0026amp; !mem_cgroup_disabled())\n  [  102.087230][T14893] ------------[ cut here ]------------\n  [  102.088279][T14893] WARNING: CPU: 0 PID: 14893 at ./include/linux/memcontrol.h:726 folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.090478][T14893] Modules linked in:\n  [  102.091244][T14893] CPU: 0 UID: 0 PID: 14893 Comm: hmm-tests Not tainted 6.13.0-09623-g6c216bc522fd #151\n  [  102.093089][T14893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014\n  [  102.094848][T14893] RIP: 0010:folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.096104][T14893] Code: ...\n  [  102.099908][T14893] RSP: 0018:ffffc900236c37b0 EFLAGS: 00010293\n  [  102.101152][T14893] RAX: 0000000000000000 RBX: ffffea0004f30000 RCX: ffffffff8183f426\n  [  102.102684][T14893] RDX: ffff8881063cb880 RSI: ffffffff81b8117f RDI: ffff8881063cb880\n  [  102.104227][T14893] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000\n  [  102.105757][T14893] R10: 0000000000000001 R11: 0000000000000002 R12: ffffc900236c37d8\n  [  102.107296][T14893] R13: ffff888277a2bcb0 R14: 000000000000001f R15: 0000000000000000\n  [  102.108830][T14893] FS:  00007ff27dbdd740(0000) GS:ffff888277a00000(0000) knlGS:0000000000000000\n  [  102.110643][T14893] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  [  102.111924][T14893] CR2: 00007ff27d400000 CR3: 000000010866e000 CR4: 0000000000750ef0\n  [  102.113478][T14893] PKRU: 55555554\n  [  102.114172][T14893] Call Trace:\n  [  102.114805][T14893]  \u0026lt;TASK\u0026gt;\n  [  102.115397][T14893]  ? folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.116547][T14893]  ? __warn.cold+0x110/0x210\n  [  102.117461][T14893]  ? folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.118667][T14893]  ? report_bug+0x1b9/0x320\n  [  102.119571][T14893]  ? handle_bug+0x54/0x90\n  [  102.120494][T14893]  ? exc_invalid_op+0x17/0x50\n  [  102.121433][T14893]  ? asm_exc_invalid_op+0x1a/0x20\n  [  102.122435][T14893]  ? __wake_up_klogd.part.0+0x76/0xd0\n  [  102.123506][T14893]  ? dump_page+0x4f/0x60\n  [  102.124352][T14893]  ? folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.125500][T14893]  folio_batch_move_lru+0xd4/0x200\n  [  102.126577][T14893]  ? __pfx_lru_add+0x10/0x10\n  [  102.127505][T14893]  __folio_batch_add_and_move+0x391/0x720\n  [  102.128633][T14893]  ? __pfx_lru_add+0x10/0x10\n  [  102.129550][T14893]  folio_putback_lru+0x16/0x80\n  [  102.130564][T14893]  migrate_device_finalize+0x9b/0x530\n  [  102.131640][T14893]  dmirror_migrate_to_device.constprop.0+0x7c5/0xad0\n  [  102.133047][T14893]  dmirror_fops_unlocked_ioctl+0x89b/0xc80\n\nLikely, nothing else goes wrong: putting the last folio reference will\nremove the folio from the LRU again.  So besides memcg complaining, adding\nthe folio to be freed to the LRU is just an unnecessary step.\n\nThe new flow resembles what we have in migrate_folio_move(): add the dst\nto the lru, rem\n---truncated---(CVE-2025-21861)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix bug on trap in smb2_lock\n\nIf lock count is greater than 1, flags could be old value.\nIt should be checked with flags of smb_lock, not flags.\nIt will cause bug-on trap from locks_free_lock in error handling\nroutine.(CVE-2025-21944)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()\n\nOn the off chance that command stream passed from userspace via\nioctl() call to radeon_vce_cs_parse() is weirdly crafted and\nfirst command to execute is to encode (case 0x03000001), the function\nin question will attempt to call radeon_vce_cs_reloc() with size\nargument that has not been properly initialized. Specifically, \u0026apos;size\u0026apos;\nwill point to \u0026apos;tmp\u0026apos; variable before the latter had a chance to be\nassigned any value.\n\nPlay it safe and init \u0026apos;tmp\u0026apos; with 0, thus ensuring that\nradeon_vce_cs_reloc() will catch an early error in cases like these.\n\nFound by Linux Verification Center (linuxtesting.org) with static\nanalysis tool SVACE.\n\n(cherry picked from commit 2d52de55f9ee7aaee0e09ac443f77855989c6b68)(CVE-2025-21996)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntpm: do not start chip while suspended\n\nChecking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() can\nlead to a spurious tpm_chip_start() call:\n\n[35985.503771] i2c i2c-1: Transfer while suspended\n[35985.503796] WARNING: CPU: 0 PID: 74 at drivers/i2c/i2c-core.h:56 __i2c_transfer+0xbe/0x810\n[35985.503802] Modules linked in:\n[35985.503808] CPU: 0 UID: 0 PID: 74 Comm: hwrng Tainted: G        W          6.13.0-next-20250203-00005-gfa0cb5642941 #19 9c3d7f78192f2d38e32010ac9c90fdc71109ef6f\n[35985.503814] Tainted: [W]=WARN\n[35985.503817] Hardware name: Google Morphius/Morphius, BIOS Google_Morphius.13434.858.0 10/26/2023\n[35985.503819] RIP: 0010:__i2c_transfer+0xbe/0x810\n[35985.503825] Code: 30 01 00 00 4c 89 f7 e8 40 fe d8 ff 48 8b 93 80 01 00 00 48 85 d2 75 03 49 8b 16 48 c7 c7 0a fb 7c a7 48 89 c6 e8 32 ad b0 fe \u0026lt;0f\u0026gt; 0b b8 94 ff ff ff e9 33 04 00 00 be 02 00 00 00 83 fd 02 0f 5\n[35985.503828] RSP: 0018:ffffa106c0333d30 EFLAGS: 00010246\n[35985.503833] RAX: 074ba64aa20f7000 RBX: ffff8aa4c1167120 RCX: 0000000000000000\n[35985.503836] RDX: 0000000000000000 RSI: ffffffffa77ab0e4 RDI: 0000000000000001\n[35985.503838] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000\n[35985.503841] R10: 0000000000000004 R11: 00000001000313d5 R12: ffff8aa4c10f1820\n[35985.503843] R13: ffff8aa4c0e243c0 R14: ffff8aa4c1167250 R15: ffff8aa4c1167120\n[35985.503846] FS:  0000000000000000(0000) GS:ffff8aa4eae00000(0000) knlGS:0000000000000000\n[35985.503849] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[35985.503852] CR2: 00007fab0aaf1000 CR3: 0000000105328000 CR4: 00000000003506f0\n[35985.503855] Call Trace:\n[35985.503859]  \u0026lt;TASK\u0026gt;\n[35985.503863]  ? __warn+0xd4/0x260\n[35985.503868]  ? __i2c_transfer+0xbe/0x810\n[35985.503874]  ? report_bug+0xf3/0x210\n[35985.503882]  ? handle_bug+0x63/0xb0\n[35985.503887]  ? exc_invalid_op+0x16/0x50\n[35985.503892]  ? asm_exc_invalid_op+0x16/0x20\n[35985.503904]  ? __i2c_transfer+0xbe/0x810\n[35985.503913]  tpm_cr50_i2c_transfer_message+0x24/0xf0\n[35985.503920]  tpm_cr50_i2c_read+0x8e/0x120\n[35985.503928]  tpm_cr50_request_locality+0x75/0x170\n[35985.503935]  tpm_chip_start+0x116/0x160\n[35985.503942]  tpm_try_get_ops+0x57/0x90\n[35985.503948]  tpm_find_get_ops+0x26/0xd0\n[35985.503955]  tpm_get_random+0x2d/0x80\n\nDon\u0026apos;t move forward with tpm_chip_start() inside tpm_try_get_ops(), unless\nTPM_CHIP_FLAG_SUSPENDED is not set. tpm_find_get_ops() will return NULL in\nsuch a failure case.(CVE-2025-23149)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Tear down vGIC on failed vCPU creation\n\nIf kvm_arch_vcpu_create() fails to share the vCPU page with the\nhypervisor, we propagate the error back to the ioctl but leave the\nvGIC vCPU data initialised. Note only does this leak the corresponding\nmemory when the vCPU is destroyed but it can also lead to use-after-free\nif the redistributor device handling tries to walk into the vCPU.\n\nAdd the missing cleanup to kvm_arch_vcpu_create(), ensuring that the\nvGIC vCPU structures are destroyed on error.(CVE-2025-37849)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()\n\nNouveau is mostly designed in a way that it\u0026apos;s expected that fences only\never get signaled through nouveau_fence_signal(). However, in at least\none other place, nouveau_fence_done(), can signal fences, too. If that\nhappens (race) a signaled fence remains in the pending list for a while,\nuntil it gets removed by nouveau_fence_update().\n\nShould nouveau_fence_context_kill() run in the meantime, this would be\na bug because the function would attempt to set an error code on an\nalready signaled fence.\n\nHave nouveau_fence_context_kill() check for a fence being signaled.(CVE-2025-37930)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nobjtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()\n\nIf dib8000_set_dds()\u0026apos;s call to dib8000_read32() returns zero, the result\nis a divide-by-zero.  Prevent that from happening.\n\nFixes the following warning with an UBSAN kernel:\n\n  drivers/media/dvb-frontends/dib8000.o: warning: objtool: dib8000_tune() falls through to next function dib8096p_cfg_DibRx()(CVE-2025-37937)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\narm64: bpf: Add BHB mitigation to the epilogue for cBPF programs\n\nA malicious BPF program may manipulate the branch history to influence\nwhat the hardware speculates will happen next.\n\nOn exit from a BPF program, emit the BHB mititgation sequence.\n\nThis is only applied for \u0026apos;classic\u0026apos; cBPF programs that are loaded by\nseccomp.(CVE-2025-37948)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\narm64: bpf: Only mitigate cBPF programs loaded by unprivileged users\n\nSupport for eBPF programs loaded by unprivileged users is typically\ndisabled. This means only cBPF programs need to be mitigated for BHB.\n\nIn addition, only mitigate cBPF programs that were loaded by an\nunprivileged user. Privileged users can also load the same program\nvia eBPF, making the mitigation pointless.(CVE-2025-37963)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nHID: uclogic: Add NULL check in uclogic_input_configured()\n\ndevm_kasprintf() returns NULL when memory allocation fails. Currently,\nuclogic_input_configured() does not check for this case, which results\nin a NULL pointer dereference.\n\nAdd NULL check after devm_kasprintf() to prevent this issue.(CVE-2025-38007)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npadata: do not leak refcount in reorder_work\n\nA recent patch that addressed a UAF introduced a reference count leak:\nthe parallel_data refcount is incremented unconditionally, regardless\nof the return value of queue_work(). If the work item is already queued,\nthe incremented refcount is never decremented.\n\nFix this by checking the return value of queue_work() and decrementing\nthe refcount when necessary.\n\nResolves:\n\nUnreferenced object 0xffff9d9f421e3d80 (size 192):\n  comm \u0026quot;cryptomgr_probe\u0026quot;, pid 157, jiffies 4294694003\n  hex dump (first 32 bytes):\n    80 8b cf 41 9f 9d ff ff b8 97 e0 89 ff ff ff ff  ...A............\n    d0 97 e0 89 ff ff ff ff 19 00 00 00 1f 88 23 00  ..............#.\n  backtrace (crc 838fb36):\n    __kmalloc_cache_noprof+0x284/0x320\n    padata_alloc_pd+0x20/0x1e0\n    padata_alloc_shell+0x3b/0xa0\n    0xffffffffc040a54d\n    cryptomgr_probe+0x43/0xc0\n    kthread+0xf6/0x1f0\n    ret_from_fork+0x2f/0x50\n    ret_from_fork_asm+0x1a/0x30(CVE-2025-38031)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref\n\nbtrfs_prelim_ref() calls the old and new reference variables in the\nincorrect order. This causes a NULL pointer dereference because oldref\nis passed as NULL to trace_btrfs_prelim_ref_insert().\n\nNote, trace_btrfs_prelim_ref_insert() is being called with newref as\noldref (and oldref as NULL) on purpose in order to print out\nthe values of newref.\n\nTo reproduce:\necho 1 \u0026gt; /sys/kernel/debug/tracing/events/btrfs/btrfs_prelim_ref_insert/enable\n\nPerform some writeback operations.\n\nBacktrace:\nBUG: kernel NULL pointer dereference, address: 0000000000000018\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 115949067 P4D 115949067 PUD 11594a067 PMD 0\n Oops: Oops: 0000 [#1] SMP NOPTI\n CPU: 1 UID: 0 PID: 1188 Comm: fsstress Not tainted 6.15.0-rc2-tester+ #47 PREEMPT(voluntary)  7ca2cef72d5e9c600f0c7718adb6462de8149622\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-2-gc13ff2cd-prebuilt.qemu.org 04/01/2014\n RIP: 0010:trace_event_raw_event_btrfs__prelim_ref+0x72/0x130\n Code: e8 43 81 9f ff 48 85 c0 74 78 4d 85 e4 0f 84 8f 00 00 00 49 8b 94 24 c0 06 00 00 48 8b 0a 48 89 48 08 48 8b 52 08 48 89 50 10 \u0026lt;49\u0026gt; 8b 55 18 48 89 50 18 49 8b 55 20 48 89 50 20 41 0f b6 55 28 88\n RSP: 0018:ffffce44820077a0 EFLAGS: 00010286\n RAX: ffff8c6b403f9014 RBX: ffff8c6b55825730 RCX: 304994edf9cf506b\n RDX: d8b11eb7f0fdb699 RSI: ffff8c6b403f9010 RDI: ffff8c6b403f9010\n RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000010\n R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8c6b4e8fb000\n R13: 0000000000000000 R14: ffffce44820077a8 R15: ffff8c6b4abd1540\n FS:  00007f4dc6813740(0000) GS:ffff8c6c1d378000(0000) knlGS:0000000000000000\n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000018 CR3: 000000010eb42000 CR4: 0000000000750ef0\n PKRU: 55555554\n Call Trace:\n  \u0026lt;TASK\u0026gt;\n  prelim_ref_insert+0x1c1/0x270\n  find_parent_nodes+0x12a6/0x1ee0\n  ? __entry_text_end+0x101f06/0x101f09\n  ? srso_alias_return_thunk+0x5/0xfbef5\n  ? srso_alias_return_thunk+0x5/0xfbef5\n  ? srso_alias_return_thunk+0x5/0xfbef5\n  ? srso_alias_return_thunk+0x5/0xfbef5\n  btrfs_is_data_extent_shared+0x167/0x640\n  ? fiemap_process_hole+0xd0/0x2c0\n  extent_fiemap+0xa5c/0xbc0\n  ? __entry_text_end+0x101f05/0x101f09\n  btrfs_fiemap+0x7e/0xd0\n  do_vfs_ioctl+0x425/0x9d0\n  __x64_sys_ioctl+0x75/0xc0(CVE-2025-38034)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: copy_verifier_state() should copy \u0026apos;loop_entry\u0026apos; field\n\nThe bpf_verifier_state.loop_entry state should be copied by\ncopy_verifier_state(). Otherwise, .loop_entry values from unrelated\nstates would poison env-\u0026gt;cur_state.\n\nAdditionally, env-\u0026gt;stack should not contain any states with\n.loop_entry != NULL. The states in env-\u0026gt;stack are yet to be verified,\nwhile .loop_entry is set for states that reached an equivalent state.\nThis means that env-\u0026gt;cur_state-\u0026gt;loop_entry should always be NULL after\npop_stack().\n\nSee the selftest in the next commit for an example of the program that\nis not safe yet is accepted by verifier w/o this fix.\n\nThis change has some verification performance impact for selftests:\n\nFile                                Program                       Insns (A)  Insns (B)  Insns   (DIFF)  States (A)  States (B)  States (DIFF)\n----------------------------------  ----------------------------  ---------  ---------  --------------  ----------  ----------  -------------\narena_htab.bpf.o                    arena_htab_llvm                     717        426  -291 (-40.59%)          57          37  -20 (-35.09%)\narena_htab_asm.bpf.o                arena_htab_asm                      597        445  -152 (-25.46%)          47          37  -10 (-21.28%)\narena_list.bpf.o                    arena_list_del                      309        279    -30 (-9.71%)          23          14   -9 (-39.13%)\niters.bpf.o                         iter_subprog_check_stacksafe        155        141    -14 (-9.03%)          15          14    -1 (-6.67%)\niters.bpf.o                         iter_subprog_iters                 1094       1003    -91 (-8.32%)          88          83    -5 (-5.68%)\niters.bpf.o                         loop_state_deps2                    479        725  +246 (+51.36%)          46          63  +17 (+36.96%)\nkmem_cache_iter.bpf.o               open_coded_iter                      63         59     -4 (-6.35%)           7           6   -1 (-14.29%)\nverifier_bits_iter.bpf.o            max_words                            92         84     -8 (-8.70%)           8           7   -1 (-12.50%)\nverifier_iterating_callbacks.bpf.o  cond_break2                         113        107     -6 (-5.31%)          12          12    +0 (+0.00%)\n\nAnd significant negative impact for sched_ext:\n\nFile               Program                 Insns (A)  Insns (B)  Insns         (DIFF)  States (A)  States (B)  States      (DIFF)\n-----------------  ----------------------  ---------  ---------  --------------------  ----------  ----------  ------------------\nbpf.bpf.o          lavd_init                    7039      14723      +7684 (+109.16%)         490        1139     +649 (+132.45%)\nbpf.bpf.o          layered_dispatch            11485      10548         -937 (-8.16%)         848         762       -86 (-10.14%)\nbpf.bpf.o          layered_dump                 7422    1000001  +992579 (+13373.47%)         681       31178  +30497 (+4478.27%)\nbpf.bpf.o          layered_enqueue             16854      71127     +54273 (+322.02%)        1611        6450    +4839 (+300.37%)\nbpf.bpf.o          p2dq_dispatch                 665        791        +126 (+18.95%)          68          78       +10 (+14.71%)\nbpf.bpf.o          p2dq_init                    2343       2980        +637 (+27.19%)         201         237       +36 (+17.91%)\nbpf.bpf.o          refresh_layer_cpumasks      16487     674760   +658273 (+3992.68%)        1770       65370  +63600 (+3593.22%)\nbpf.bpf.o          rusty_select_cpu             1937      40872    +38935 (+2010.07%)         177        3210   +3033 (+1713.56%)\nscx_central.bpf.o  central_dispatch              636       2687      +2051 (+322.48%)          63         227     +164 (+260.32%)\nscx_nest.bpf.o     nest_init                     636        815        +179 (+28.14%)          60          73       +13 (+21.67%)\nscx_qmap.bpf.o     qmap_dispatch      \n---truncated---(CVE-2025-38060)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\norangefs: Do not truncate file size\n\n\u0026apos;len\u0026apos; is used to store the result of i_size_read(), so making \u0026apos;len\u0026apos;\na size_t results in truncation to 4GiB on 32-bit systems.(CVE-2025-38065)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nvhost-scsi: protect vq-\u0026gt;log_used with vq-\u0026gt;mutex\n\nThe vhost-scsi completion path may access vq-\u0026gt;log_base when vq-\u0026gt;log_used is\nalready set to false.\n\n    vhost-thread                       QEMU-thread\n\nvhost_scsi_complete_cmd_work()\n-\u0026gt; vhost_add_used()\n   -\u0026gt; vhost_add_used_n()\n      if (unlikely(vq-\u0026gt;log_used))\n                                      QEMU disables vq-\u0026gt;log_used\n                                      via VHOST_SET_VRING_ADDR.\n                                      mutex_lock(\u0026amp;vq-\u0026gt;mutex);\n                                      vq-\u0026gt;log_used = false now!\n                                      mutex_unlock(\u0026amp;vq-\u0026gt;mutex);\n\n\t\t\t\t      QEMU gfree(vq-\u0026gt;log_base)\n        log_used()\n        -\u0026gt; log_write(vq-\u0026gt;log_base)\n\nAssuming the VMM is QEMU. The vq-\u0026gt;log_base is from QEMU userpace and can be\nreclaimed via gfree(). As a result, this causes invalid memory writes to\nQEMU userspace.\n\nThe control queue path has the same issue.(CVE-2025-38074)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: Fix race of buffer access at PCM OSS layer\n\nThe PCM OSS layer tries to clear the buffer with the silence data at\ninitialization (or reconfiguration) of a stream with the explicit call\nof snd_pcm_format_set_silence() with runtime-\u0026gt;dma_area.  But this may\nlead to a UAF because the accessed runtime-\u0026gt;dma_area might be freed\nconcurrently, as it\u0026apos;s performed outside the PCM ops.\n\nFor avoiding it, move the code into the PCM core and perform it inside\nthe buffer access lock, so that it won\u0026apos;t be changed during the\noperation.(CVE-2025-38078)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Increase block_sequence array size\n\n[Why]\nIt\u0026apos;s possible to generate more than 50 steps in hwss_build_fast_sequence,\nfor example with a 6-pipe asic where all pipes are in one MPC chain. This\noverflows the block_sequence buffer and corrupts block_sequence_steps,\ncausing a crash.\n\n[How]\nExpand block_sequence to 100 items. A naive upper bound on the possible\nnumber of steps for a 6-pipe asic, ignoring the potential for steps to be\nmutually exclusive, is 91 with current code, therefore 100 is sufficient.(CVE-2025-38080)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: core: Clear table_sz when rproc_shutdown\n\nThere is case as below could trigger kernel dump:\nUse U-Boot to start remote processor(rproc) with resource table\npublished to a fixed address by rproc. After Kernel boots up,\nstop the rproc, load a new firmware which doesn\u0026apos;t have resource table\n,and start rproc.\n\nWhen starting rproc with a firmware not have resource table,\n`memcpy(loaded_table, rproc-\u0026gt;cached_table, rproc-\u0026gt;table_sz)` will\ntrigger dump, because rproc-\u0026gt;cache_table is set to NULL during the last\nstop operation, but rproc-\u0026gt;table_sz is still valid.\n\nThis issue is found on i.MX8MP and i.MX9.\n\nDump as below:\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000000\nMem abort info:\n  ESR = 0x0000000096000004\n  EC = 0x25: DABT (current EL), IL = 32 bits\n  SET = 0, FnV = 0\n  EA = 0, S1PTW = 0\n  FSC = 0x04: level 0 translation fault\nData abort info:\n  ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n  CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n  GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\nuser pgtable: 4k pages, 48-bit VAs, pgdp=000000010af63000\n[0000000000000000] pgd=0000000000000000, p4d=0000000000000000\nInternal error: Oops: 0000000096000004 [#1] PREEMPT SMP\nModules linked in:\nCPU: 2 UID: 0 PID: 1060 Comm: sh Not tainted 6.14.0-rc7-next-20250317-dirty #38\nHardware name: NXP i.MX8MPlus EVK board (DT)\npstate: a0000005 (NzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : __pi_memcpy_generic+0x110/0x22c\nlr : rproc_start+0x88/0x1e0\nCall trace:\n __pi_memcpy_generic+0x110/0x22c (P)\n rproc_boot+0x198/0x57c\n state_store+0x40/0x104\n dev_attr_store+0x18/0x2c\n sysfs_kf_write+0x7c/0x94\n kernfs_fop_write_iter+0x120/0x1cc\n vfs_write+0x240/0x378\n ksys_write+0x70/0x108\n __arm64_sys_write+0x1c/0x28\n invoke_syscall+0x48/0x10c\n el0_svc_common.constprop.0+0xc0/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x30/0xcc\n el0t_64_sync_handler+0x10c/0x138\n el0t_64_sync+0x198/0x19c\n\nClear rproc-\u0026gt;table_sz to address the issue.(CVE-2025-38152)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix slab-out-of-bounds read in ea_get()\n\nDuring the \u0026quot;size_check\u0026quot; label in ea_get(), the code checks if the extended\nattribute list (xattr) size matches ea_size. If not, it logs\n\u0026quot;ea_get: invalid extended attribute\u0026quot; and calls print_hex_dump().\n\nHere, EALIST_SIZE(ea_buf-\u0026gt;xattr) returns 4110417968, which exceeds\nINT_MAX (2,147,483,647). Then ea_size is clamped:\n\n\tint size = clamp_t(int, ea_size, 0, EALIST_SIZE(ea_buf-\u0026gt;xattr));\n\nAlthough clamp_t aims to bound ea_size between 0 and 4110417968, the upper\nlimit is treated as an int, causing an overflow above 2^31 - 1. This leads\n\u0026quot;size\u0026quot; to wrap around and become negative (-184549328).\n\nThe \u0026quot;size\u0026quot; is then passed to print_hex_dump() (called \u0026quot;len\u0026quot; in\nprint_hex_dump()), it is passed as type size_t (an unsigned\ntype), this is then stored inside a variable called\n\u0026quot;int remaining\u0026quot;, which is then assigned to \u0026quot;int linelen\u0026quot; which\nis then passed to hex_dump_to_buffer(). In print_hex_dump()\nthe for loop, iterates through 0 to len-1, where len is\n18446744073525002176, calling hex_dump_to_buffer()\non each iteration:\n\n\tfor (i = 0; i \u0026lt; len; i += rowsize) {\n\t\tlinelen = min(remaining, rowsize);\n\t\tremaining -= rowsize;\n\n\t\thex_dump_to_buffer(ptr + i, linelen, rowsize, groupsize,\n\t\t\t\t   linebuf, sizeof(linebuf), ascii);\n\n\t\t...\n\t}\n\nThe expected stopping condition (i \u0026lt; len) is effectively broken\nsince len is corrupted and very large. This eventually leads to\nthe \u0026quot;ptr+i\u0026quot; being passed to hex_dump_to_buffer() to get closer\nto the end of the actual bounds of \u0026quot;ptr\u0026quot;, eventually an out of\nbounds access is done in hex_dump_to_buffer() in the following\nfor loop:\n\n\tfor (j = 0; j \u0026lt; len; j++) {\n\t\t\tif (linebuflen \u0026lt; lx + 2)\n\t\t\t\tgoto overflow2;\n\t\t\tch = ptr[j];\n\t\t...\n\t}\n\nTo fix this we should validate \u0026quot;EALIST_SIZE(ea_buf-\u0026gt;xattr)\u0026quot;\nbefore it is utilised.(CVE-2025-39735)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nobjtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()\n\nIf speed_hz \u0026lt; AMD_SPI_MIN_HZ, amd_set_spi_freq() iterates over the\nentire amd_spi_freq array without breaking out early, causing \u0026apos;i\u0026apos; to go\nbeyond the array bounds.\n\nFix that by stopping the loop when it gets to the last entry, so the low\nspeed_hz value gets clamped up to AMD_SPI_MIN_HZ.\n\nFixes the following warning with an UBSAN kernel:\n\n  drivers/spi/spi-amd.o: error: objtool: amd_set_spi_freq() falls through to next function amd_spi_set_opcode()(CVE-2025-40014)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: fix io_req_prep_async with provided buffers\n\nio_req_prep_async() can import provided buffers, commit the ring state\nby giving up on that before, it\u0026apos;ll be reimported later if needed.(CVE-2025-40364)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:01.969006218Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1730","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix potential use after free bug\n\nThe free_device_compression_mode(iaa_device, device_mode) function frees\n\u0026quot;device_mode\u0026quot; but it iss passed to iaa_compression_modes[i]-\u0026gt;free() a few\nlines later resulting in a use after free.\n\nThe good news is that, so far as I can tell, nothing implements the\n-\u0026gt;free() function and the use after free happens in dead code.  But, with\nthis fix, when something does implement it, we\u0026apos;ll be ready.  :)(CVE-2024-47732)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntomoyo: don\u0026apos;t emit warning in tomoyo_write_control()\n\nsyzbot is reporting too large allocation warning at tomoyo_write_control(),\nfor one can write a very very long line without new line character. To fix\nthis warning, I use __GFP_NOWARN rather than checking for KMALLOC_MAX_SIZE,\nfor practically a valid line should be always shorter than 32KB where the\n\u0026quot;too small to fail\u0026quot; memory-allocation rule applies.\n\nOne might try to write a valid line that is longer than 32KB, but such\nrequest will likely fail with -ENOMEM. Therefore, I feel that separately\nreturning -EINVAL when a line is longer than KMALLOC_MAX_SIZE is redundant.\nThere is no need to distinguish over-32KB and over-KMALLOC_MAX_SIZE.(CVE-2024-58085)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsockmap, vsock: For connectible sockets allow only connected\n\nsockmap expects all vsocks to have a transport assigned, which is expressed\nin vsock_proto::psock_update_sk_prot(). However, there is an edge case\nwhere an unconnected (connectible) socket may lose its previously assigned\ntransport. This is handled with a NULL check in the vsock/BPF recv path.\n\nAnother design detail is that listening vsocks are not supposed to have any\ntransport assigned at all. Which implies they are not supported by the\nsockmap. But this is complicated by the fact that a socket, before\nswitching to TCP_LISTEN, may have had some transport assigned during a\nfailed connect() attempt. Hence, we may end up with a listening vsock in a\nsockmap, which blows up quickly:\n\nKASAN: null-ptr-deref in range [0x0000000000000120-0x0000000000000127]\nCPU: 7 UID: 0 PID: 56 Comm: kworker/7:0 Not tainted 6.14.0-rc1+\nWorkqueue: vsock-loopback vsock_loopback_work\nRIP: 0010:vsock_read_skb+0x4b/0x90\nCall Trace:\n sk_psock_verdict_data_ready+0xa4/0x2e0\n virtio_transport_recv_pkt+0x1ca8/0x2acc\n vsock_loopback_work+0x27d/0x3f0\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x35a/0x700\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n\nFor connectible sockets, instead of relying solely on the state of\nvsk-\u0026gt;transport, tell sockmap to only allow those representing established\nconnections. This aligns with the behaviour for AF_INET and AF_UNIX.(CVE-2025-21854)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmm/migrate_device: don\u0026apos;t add folio to be freed to LRU in migrate_device_finalize()\n\nIf migration succeeded, we called\nfolio_migrate_flags()-\u0026gt;mem_cgroup_migrate() to migrate the memcg from the\nold to the new folio.  This will set memcg_data of the old folio to 0.\n\nSimilarly, if migration failed, memcg_data of the dst folio is left unset.\n\nIf we call folio_putback_lru() on such folios (memcg_data == 0), we will\nadd the folio to be freed to the LRU, making memcg code unhappy.  Running\nthe hmm selftests:\n\n  # ./hmm-tests\n  ...\n  #  RUN           hmm.hmm_device_private.migrate ...\n  [  102.078007][T14893] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7ff27d200 pfn:0x13cc00\n  [  102.079974][T14893] anon flags: 0x17ff00000020018(uptodate|dirty|swapbacked|node=0|zone=2|lastcpupid=0x7ff)\n  [  102.082037][T14893] raw: 017ff00000020018 dead000000000100 dead000000000122 ffff8881353896c9\n  [  102.083687][T14893] raw: 00000007ff27d200 0000000000000000 00000001ffffffff 0000000000000000\n  [  102.085331][T14893] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg \u0026amp;\u0026amp; !mem_cgroup_disabled())\n  [  102.087230][T14893] ------------[ cut here ]------------\n  [  102.088279][T14893] WARNING: CPU: 0 PID: 14893 at ./include/linux/memcontrol.h:726 folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.090478][T14893] Modules linked in:\n  [  102.091244][T14893] CPU: 0 UID: 0 PID: 14893 Comm: hmm-tests Not tainted 6.13.0-09623-g6c216bc522fd #151\n  [  102.093089][T14893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014\n  [  102.094848][T14893] RIP: 0010:folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.096104][T14893] Code: ...\n  [  102.099908][T14893] RSP: 0018:ffffc900236c37b0 EFLAGS: 00010293\n  [  102.101152][T14893] RAX: 0000000000000000 RBX: ffffea0004f30000 RCX: ffffffff8183f426\n  [  102.102684][T14893] RDX: ffff8881063cb880 RSI: ffffffff81b8117f RDI: ffff8881063cb880\n  [  102.104227][T14893] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000\n  [  102.105757][T14893] R10: 0000000000000001 R11: 0000000000000002 R12: ffffc900236c37d8\n  [  102.107296][T14893] R13: ffff888277a2bcb0 R14: 000000000000001f R15: 0000000000000000\n  [  102.108830][T14893] FS:  00007ff27dbdd740(0000) GS:ffff888277a00000(0000) knlGS:0000000000000000\n  [  102.110643][T14893] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  [  102.111924][T14893] CR2: 00007ff27d400000 CR3: 000000010866e000 CR4: 0000000000750ef0\n  [  102.113478][T14893] PKRU: 55555554\n  [  102.114172][T14893] Call Trace:\n  [  102.114805][T14893]  \u0026lt;TASK\u0026gt;\n  [  102.115397][T14893]  ? folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.116547][T14893]  ? __warn.cold+0x110/0x210\n  [  102.117461][T14893]  ? folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.118667][T14893]  ? report_bug+0x1b9/0x320\n  [  102.119571][T14893]  ? handle_bug+0x54/0x90\n  [  102.120494][T14893]  ? exc_invalid_op+0x17/0x50\n  [  102.121433][T14893]  ? asm_exc_invalid_op+0x1a/0x20\n  [  102.122435][T14893]  ? __wake_up_klogd.part.0+0x76/0xd0\n  [  102.123506][T14893]  ? dump_page+0x4f/0x60\n  [  102.124352][T14893]  ? folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.125500][T14893]  folio_batch_move_lru+0xd4/0x200\n  [  102.126577][T14893]  ? __pfx_lru_add+0x10/0x10\n  [  102.127505][T14893]  __folio_batch_add_and_move+0x391/0x720\n  [  102.128633][T14893]  ? __pfx_lru_add+0x10/0x10\n  [  102.129550][T14893]  folio_putback_lru+0x16/0x80\n  [  102.130564][T14893]  migrate_device_finalize+0x9b/0x530\n  [  102.131640][T14893]  dmirror_migrate_to_device.constprop.0+0x7c5/0xad0\n  [  102.133047][T14893]  dmirror_fops_unlocked_ioctl+0x89b/0xc80\n\nLikely, nothing else goes wrong: putting the last folio reference will\nremove the folio from the LRU again.  So besides memcg complaining, adding\nthe folio to be freed to the LRU is just an unnecessary step.\n\nThe new flow resembles what we have in migrate_folio_move(): add the dst\nto the lru, rem\n---truncated---(CVE-2025-21861)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix bug on trap in smb2_lock\n\nIf lock count is greater than 1, flags could be old value.\nIt should be checked with flags of smb_lock, not flags.\nIt will cause bug-on trap from locks_free_lock in error handling\nroutine.(CVE-2025-21944)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()\n\nOn the off chance that command stream passed from userspace via\nioctl() call to radeon_vce_cs_parse() is weirdly crafted and\nfirst command to execute is to encode (case 0x03000001), the function\nin question will attempt to call radeon_vce_cs_reloc() with size\nargument that has not been properly initialized. Specifically, \u0026apos;size\u0026apos;\nwill point to \u0026apos;tmp\u0026apos; variable before the latter had a chance to be\nassigned any value.\n\nPlay it safe and init \u0026apos;tmp\u0026apos; with 0, thus ensuring that\nradeon_vce_cs_reloc() will catch an early error in cases like these.\n\nFound by Linux Verification Center (linuxtesting.org) with static\nanalysis tool SVACE.\n\n(cherry picked from commit 2d52de55f9ee7aaee0e09ac443f77855989c6b68)(CVE-2025-21996)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntpm: do not start chip while suspended\n\nChecking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() can\nlead to a spurious tpm_chip_start() call:\n\n[35985.503771] i2c i2c-1: Transfer while suspended\n[35985.503796] WARNING: CPU: 0 PID: 74 at drivers/i2c/i2c-core.h:56 __i2c_transfer+0xbe/0x810\n[35985.503802] Modules linked in:\n[35985.503808] CPU: 0 UID: 0 PID: 74 Comm: hwrng Tainted: G        W          6.13.0-next-20250203-00005-gfa0cb5642941 #19 9c3d7f78192f2d38e32010ac9c90fdc71109ef6f\n[35985.503814] Tainted: [W]=WARN\n[35985.503817] Hardware name: Google Morphius/Morphius, BIOS Google_Morphius.13434.858.0 10/26/2023\n[35985.503819] RIP: 0010:__i2c_transfer+0xbe/0x810\n[35985.503825] Code: 30 01 00 00 4c 89 f7 e8 40 fe d8 ff 48 8b 93 80 01 00 00 48 85 d2 75 03 49 8b 16 48 c7 c7 0a fb 7c a7 48 89 c6 e8 32 ad b0 fe \u0026lt;0f\u0026gt; 0b b8 94 ff ff ff e9 33 04 00 00 be 02 00 00 00 83 fd 02 0f 5\n[35985.503828] RSP: 0018:ffffa106c0333d30 EFLAGS: 00010246\n[35985.503833] RAX: 074ba64aa20f7000 RBX: ffff8aa4c1167120 RCX: 0000000000000000\n[35985.503836] RDX: 0000000000000000 RSI: ffffffffa77ab0e4 RDI: 0000000000000001\n[35985.503838] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000\n[35985.503841] R10: 0000000000000004 R11: 00000001000313d5 R12: ffff8aa4c10f1820\n[35985.503843] R13: ffff8aa4c0e243c0 R14: ffff8aa4c1167250 R15: ffff8aa4c1167120\n[35985.503846] FS:  0000000000000000(0000) GS:ffff8aa4eae00000(0000) knlGS:0000000000000000\n[35985.503849] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[35985.503852] CR2: 00007fab0aaf1000 CR3: 0000000105328000 CR4: 00000000003506f0\n[35985.503855] Call Trace:\n[35985.503859]  \u0026lt;TASK\u0026gt;\n[35985.503863]  ? __warn+0xd4/0x260\n[35985.503868]  ? __i2c_transfer+0xbe/0x810\n[35985.503874]  ? report_bug+0xf3/0x210\n[35985.503882]  ? handle_bug+0x63/0xb0\n[35985.503887]  ? exc_invalid_op+0x16/0x50\n[35985.503892]  ? asm_exc_invalid_op+0x16/0x20\n[35985.503904]  ? __i2c_transfer+0xbe/0x810\n[35985.503913]  tpm_cr50_i2c_transfer_message+0x24/0xf0\n[35985.503920]  tpm_cr50_i2c_read+0x8e/0x120\n[35985.503928]  tpm_cr50_request_locality+0x75/0x170\n[35985.503935]  tpm_chip_start+0x116/0x160\n[35985.503942]  tpm_try_get_ops+0x57/0x90\n[35985.503948]  tpm_find_get_ops+0x26/0xd0\n[35985.503955]  tpm_get_random+0x2d/0x80\n\nDon\u0026apos;t move forward with tpm_chip_start() inside tpm_try_get_ops(), unless\nTPM_CHIP_FLAG_SUSPENDED is not set. tpm_find_get_ops() will return NULL in\nsuch a failure case.(CVE-2025-23149)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Tear down vGIC on failed vCPU creation\n\nIf kvm_arch_vcpu_create() fails to share the vCPU page with the\nhypervisor, we propagate the error back to the ioctl but leave the\nvGIC vCPU data initialised. Note only does this leak the corresponding\nmemory when the vCPU is destroyed but it can also lead to use-after-free\nif the redistributor device handling tries to walk into the vCPU.\n\nAdd the missing cleanup to kvm_arch_vcpu_create(), ensuring that the\nvGIC vCPU structures are destroyed on error.(CVE-2025-37849)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()\n\nNouveau is mostly designed in a way that it\u0026apos;s expected that fences only\never get signaled through nouveau_fence_signal(). However, in at least\none other place, nouveau_fence_done(), can signal fences, too. If that\nhappens (race) a signaled fence remains in the pending list for a while,\nuntil it gets removed by nouveau_fence_update().\n\nShould nouveau_fence_context_kill() run in the meantime, this would be\na bug because the function would attempt to set an error code on an\nalready signaled fence.\n\nHave nouveau_fence_context_kill() check for a fence being signaled.(CVE-2025-37930)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nobjtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()\n\nIf dib8000_set_dds()\u0026apos;s call to dib8000_read32() returns zero, the result\nis a divide-by-zero.  Prevent that from happening.\n\nFixes the following warning with an UBSAN kernel:\n\n  drivers/media/dvb-frontends/dib8000.o: warning: objtool: dib8000_tune() falls through to next function dib8096p_cfg_DibRx()(CVE-2025-37937)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\narm64: bpf: Add BHB mitigation to the epilogue for cBPF programs\n\nA malicious BPF program may manipulate the branch history to influence\nwhat the hardware speculates will happen next.\n\nOn exit from a BPF program, emit the BHB mititgation sequence.\n\nThis is only applied for \u0026apos;classic\u0026apos; cBPF programs that are loaded by\nseccomp.(CVE-2025-37948)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\narm64: bpf: Only mitigate cBPF programs loaded by unprivileged users\n\nSupport for eBPF programs loaded by unprivileged users is typically\ndisabled. This means only cBPF programs need to be mitigated for BHB.\n\nIn addition, only mitigate cBPF programs that were loaded by an\nunprivileged user. Privileged users can also load the same program\nvia eBPF, making the mitigation pointless.(CVE-2025-37963)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nHID: uclogic: Add NULL check in uclogic_input_configured()\n\ndevm_kasprintf() returns NULL when memory allocation fails. Currently,\nuclogic_input_configured() does not check for this case, which results\nin a NULL pointer dereference.\n\nAdd NULL check after devm_kasprintf() to prevent this issue.(CVE-2025-38007)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npadata: do not leak refcount in reorder_work\n\nA recent patch that addressed a UAF introduced a reference count leak:\nthe parallel_data refcount is incremented unconditionally, regardless\nof the return value of queue_work(). If the work item is already queued,\nthe incremented refcount is never decremented.\n\nFix this by checking the return value of queue_work() and decrementing\nthe refcount when necessary.\n\nResolves:\n\nUnreferenced object 0xffff9d9f421e3d80 (size 192):\n  comm \u0026quot;cryptomgr_probe\u0026quot;, pid 157, jiffies 4294694003\n  hex dump (first 32 bytes):\n    80 8b cf 41 9f 9d ff ff b8 97 e0 89 ff ff ff ff  ...A............\n    d0 97 e0 89 ff ff ff ff 19 00 00 00 1f 88 23 00  ..............#.\n  backtrace (crc 838fb36):\n    __kmalloc_cache_noprof+0x284/0x320\n    padata_alloc_pd+0x20/0x1e0\n    padata_alloc_shell+0x3b/0xa0\n    0xffffffffc040a54d\n    cryptomgr_probe+0x43/0xc0\n    kthread+0xf6/0x1f0\n    ret_from_fork+0x2f/0x50\n    ret_from_fork_asm+0x1a/0x30(CVE-2025-38031)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref\n\nbtrfs_prelim_ref() calls the old and new reference variables in the\nincorrect order. This causes a NULL pointer dereference because oldref\nis passed as NULL to trace_btrfs_prelim_ref_insert().\n\nNote, trace_btrfs_prelim_ref_insert() is being called with newref as\noldref (and oldref as NULL) on purpose in order to print out\nthe values of newref.\n\nTo reproduce:\necho 1 \u0026gt; /sys/kernel/debug/tracing/events/btrfs/btrfs_prelim_ref_insert/enable\n\nPerform some writeback operations.\n\nBacktrace:\nBUG: kernel NULL pointer dereference, address: 0000000000000018\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 115949067 P4D 115949067 PUD 11594a067 PMD 0\n Oops: Oops: 0000 [#1] SMP NOPTI\n CPU: 1 UID: 0 PID: 1188 Comm: fsstress Not tainted 6.15.0-rc2-tester+ #47 PREEMPT(voluntary)  7ca2cef72d5e9c600f0c7718adb6462de8149622\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-2-gc13ff2cd-prebuilt.qemu.org 04/01/2014\n RIP: 0010:trace_event_raw_event_btrfs__prelim_ref+0x72/0x130\n Code: e8 43 81 9f ff 48 85 c0 74 78 4d 85 e4 0f 84 8f 00 00 00 49 8b 94 24 c0 06 00 00 48 8b 0a 48 89 48 08 48 8b 52 08 48 89 50 10 \u0026lt;49\u0026gt; 8b 55 18 48 89 50 18 49 8b 55 20 48 89 50 20 41 0f b6 55 28 88\n RSP: 0018:ffffce44820077a0 EFLAGS: 00010286\n RAX: ffff8c6b403f9014 RBX: ffff8c6b55825730 RCX: 304994edf9cf506b\n RDX: d8b11eb7f0fdb699 RSI: ffff8c6b403f9010 RDI: ffff8c6b403f9010\n RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000010\n R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8c6b4e8fb000\n R13: 0000000000000000 R14: ffffce44820077a8 R15: ffff8c6b4abd1540\n FS:  00007f4dc6813740(0000) GS:ffff8c6c1d378000(0000) knlGS:0000000000000000\n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000018 CR3: 000000010eb42000 CR4: 0000000000750ef0\n PKRU: 55555554\n Call Trace:\n  \u0026lt;TASK\u0026gt;\n  prelim_ref_insert+0x1c1/0x270\n  find_parent_nodes+0x12a6/0x1ee0\n  ? __entry_text_end+0x101f06/0x101f09\n  ? srso_alias_return_thunk+0x5/0xfbef5\n  ? srso_alias_return_thunk+0x5/0xfbef5\n  ? srso_alias_return_thunk+0x5/0xfbef5\n  ? srso_alias_return_thunk+0x5/0xfbef5\n  btrfs_is_data_extent_shared+0x167/0x640\n  ? fiemap_process_hole+0xd0/0x2c0\n  extent_fiemap+0xa5c/0xbc0\n  ? __entry_text_end+0x101f05/0x101f09\n  btrfs_fiemap+0x7e/0xd0\n  do_vfs_ioctl+0x425/0x9d0\n  __x64_sys_ioctl+0x75/0xc0(CVE-2025-38034)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: copy_verifier_state() should copy \u0026apos;loop_entry\u0026apos; field\n\nThe bpf_verifier_state.loop_entry state should be copied by\ncopy_verifier_state(). Otherwise, .loop_entry values from unrelated\nstates would poison env-\u0026gt;cur_state.\n\nAdditionally, env-\u0026gt;stack should not contain any states with\n.loop_entry != NULL. The states in env-\u0026gt;stack are yet to be verified,\nwhile .loop_entry is set for states that reached an equivalent state.\nThis means that env-\u0026gt;cur_state-\u0026gt;loop_entry should always be NULL after\npop_stack().\n\nSee the selftest in the next commit for an example of the program that\nis not safe yet is accepted by verifier w/o this fix.\n\nThis change has some verification performance impact for selftests:\n\nFile                                Program                       Insns (A)  Insns (B)  Insns   (DIFF)  States (A)  States (B)  States (DIFF)\n----------------------------------  ----------------------------  ---------  ---------  --------------  ----------  ----------  -------------\narena_htab.bpf.o                    arena_htab_llvm                     717        426  -291 (-40.59%)          57          37  -20 (-35.09%)\narena_htab_asm.bpf.o                arena_htab_asm                      597        445  -152 (-25.46%)          47          37  -10 (-21.28%)\narena_list.bpf.o                    arena_list_del                      309        279    -30 (-9.71%)          23          14   -9 (-39.13%)\niters.bpf.o                         iter_subprog_check_stacksafe        155        141    -14 (-9.03%)          15          14    -1 (-6.67%)\niters.bpf.o                         iter_subprog_iters                 1094       1003    -91 (-8.32%)          88          83    -5 (-5.68%)\niters.bpf.o                         loop_state_deps2                    479        725  +246 (+51.36%)          46          63  +17 (+36.96%)\nkmem_cache_iter.bpf.o               open_coded_iter                      63         59     -4 (-6.35%)           7           6   -1 (-14.29%)\nverifier_bits_iter.bpf.o            max_words                            92         84     -8 (-8.70%)           8           7   -1 (-12.50%)\nverifier_iterating_callbacks.bpf.o  cond_break2                         113        107     -6 (-5.31%)          12          12    +0 (+0.00%)\n\nAnd significant negative impact for sched_ext:\n\nFile               Program                 Insns (A)  Insns (B)  Insns         (DIFF)  States (A)  States (B)  States      (DIFF)\n-----------------  ----------------------  ---------  ---------  --------------------  ----------  ----------  ------------------\nbpf.bpf.o          lavd_init                    7039      14723      +7684 (+109.16%)         490        1139     +649 (+132.45%)\nbpf.bpf.o          layered_dispatch            11485      10548         -937 (-8.16%)         848         762       -86 (-10.14%)\nbpf.bpf.o          layered_dump                 7422    1000001  +992579 (+13373.47%)         681       31178  +30497 (+4478.27%)\nbpf.bpf.o          layered_enqueue             16854      71127     +54273 (+322.02%)        1611        6450    +4839 (+300.37%)\nbpf.bpf.o          p2dq_dispatch                 665        791        +126 (+18.95%)          68          78       +10 (+14.71%)\nbpf.bpf.o          p2dq_init                    2343       2980        +637 (+27.19%)         201         237       +36 (+17.91%)\nbpf.bpf.o          refresh_layer_cpumasks      16487     674760   +658273 (+3992.68%)        1770       65370  +63600 (+3593.22%)\nbpf.bpf.o          rusty_select_cpu             1937      40872    +38935 (+2010.07%)         177        3210   +3033 (+1713.56%)\nscx_central.bpf.o  central_dispatch              636       2687      +2051 (+322.48%)          63         227     +164 (+260.32%)\nscx_nest.bpf.o     nest_init                     636        815        +179 (+28.14%)          60          73       +13 (+21.67%)\nscx_qmap.bpf.o     qmap_dispatch      \n---truncated---(CVE-2025-38060)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\norangefs: Do not truncate file size\n\n\u0026apos;len\u0026apos; is used to store the result of i_size_read(), so making \u0026apos;len\u0026apos;\na size_t results in truncation to 4GiB on 32-bit systems.(CVE-2025-38065)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nvhost-scsi: protect vq-\u0026gt;log_used with vq-\u0026gt;mutex\n\nThe vhost-scsi completion path may access vq-\u0026gt;log_base when vq-\u0026gt;log_used is\nalready set to false.\n\n    vhost-thread                       QEMU-thread\n\nvhost_scsi_complete_cmd_work()\n-\u0026gt; vhost_add_used()\n   -\u0026gt; vhost_add_used_n()\n      if (unlikely(vq-\u0026gt;log_used))\n                                      QEMU disables vq-\u0026gt;log_used\n                                      via VHOST_SET_VRING_ADDR.\n                                      mutex_lock(\u0026amp;vq-\u0026gt;mutex);\n                                      vq-\u0026gt;log_used = false now!\n                                      mutex_unlock(\u0026amp;vq-\u0026gt;mutex);\n\n\t\t\t\t      QEMU gfree(vq-\u0026gt;log_base)\n        log_used()\n        -\u0026gt; log_write(vq-\u0026gt;log_base)\n\nAssuming the VMM is QEMU. The vq-\u0026gt;log_base is from QEMU userpace and can be\nreclaimed via gfree(). As a result, this causes invalid memory writes to\nQEMU userspace.\n\nThe control queue path has the same issue.(CVE-2025-38074)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: Fix race of buffer access at PCM OSS layer\n\nThe PCM OSS layer tries to clear the buffer with the silence data at\ninitialization (or reconfiguration) of a stream with the explicit call\nof snd_pcm_format_set_silence() with runtime-\u0026gt;dma_area.  But this may\nlead to a UAF because the accessed runtime-\u0026gt;dma_area might be freed\nconcurrently, as it\u0026apos;s performed outside the PCM ops.\n\nFor avoiding it, move the code into the PCM core and perform it inside\nthe buffer access lock, so that it won\u0026apos;t be changed during the\noperation.(CVE-2025-38078)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Increase block_sequence array size\n\n[Why]\nIt\u0026apos;s possible to generate more than 50 steps in hwss_build_fast_sequence,\nfor example with a 6-pipe asic where all pipes are in one MPC chain. This\noverflows the block_sequence buffer and corrupts block_sequence_steps,\ncausing a crash.\n\n[How]\nExpand block_sequence to 100 items. A naive upper bound on the possible\nnumber of steps for a 6-pipe asic, ignoring the potential for steps to be\nmutually exclusive, is 91 with current code, therefore 100 is sufficient.(CVE-2025-38080)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: core: Clear table_sz when rproc_shutdown\n\nThere is case as below could trigger kernel dump:\nUse U-Boot to start remote processor(rproc) with resource table\npublished to a fixed address by rproc. After Kernel boots up,\nstop the rproc, load a new firmware which doesn\u0026apos;t have resource table\n,and start rproc.\n\nWhen starting rproc with a firmware not have resource table,\n`memcpy(loaded_table, rproc-\u0026gt;cached_table, rproc-\u0026gt;table_sz)` will\ntrigger dump, because rproc-\u0026gt;cache_table is set to NULL during the last\nstop operation, but rproc-\u0026gt;table_sz is still valid.\n\nThis issue is found on i.MX8MP and i.MX9.\n\nDump as below:\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000000\nMem abort info:\n  ESR = 0x0000000096000004\n  EC = 0x25: DABT (current EL), IL = 32 bits\n  SET = 0, FnV = 0\n  EA = 0, S1PTW = 0\n  FSC = 0x04: level 0 translation fault\nData abort info:\n  ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n  CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n  GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\nuser pgtable: 4k pages, 48-bit VAs, pgdp=000000010af63000\n[0000000000000000] pgd=0000000000000000, p4d=0000000000000000\nInternal error: Oops: 0000000096000004 [#1] PREEMPT SMP\nModules linked in:\nCPU: 2 UID: 0 PID: 1060 Comm: sh Not tainted 6.14.0-rc7-next-20250317-dirty #38\nHardware name: NXP i.MX8MPlus EVK board (DT)\npstate: a0000005 (NzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : __pi_memcpy_generic+0x110/0x22c\nlr : rproc_start+0x88/0x1e0\nCall trace:\n __pi_memcpy_generic+0x110/0x22c (P)\n rproc_boot+0x198/0x57c\n state_store+0x40/0x104\n dev_attr_store+0x18/0x2c\n sysfs_kf_write+0x7c/0x94\n kernfs_fop_write_iter+0x120/0x1cc\n vfs_write+0x240/0x378\n ksys_write+0x70/0x108\n __arm64_sys_write+0x1c/0x28\n invoke_syscall+0x48/0x10c\n el0_svc_common.constprop.0+0xc0/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x30/0xcc\n el0t_64_sync_handler+0x10c/0x138\n el0t_64_sync+0x198/0x19c\n\nClear rproc-\u0026gt;table_sz to address the issue.(CVE-2025-38152)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix slab-out-of-bounds read in ea_get()\n\nDuring the \u0026quot;size_check\u0026quot; label in ea_get(), the code checks if the extended\nattribute list (xattr) size matches ea_size. If not, it logs\n\u0026quot;ea_get: invalid extended attribute\u0026quot; and calls print_hex_dump().\n\nHere, EALIST_SIZE(ea_buf-\u0026gt;xattr) returns 4110417968, which exceeds\nINT_MAX (2,147,483,647). Then ea_size is clamped:\n\n\tint size = clamp_t(int, ea_size, 0, EALIST_SIZE(ea_buf-\u0026gt;xattr));\n\nAlthough clamp_t aims to bound ea_size between 0 and 4110417968, the upper\nlimit is treated as an int, causing an overflow above 2^31 - 1. This leads\n\u0026quot;size\u0026quot; to wrap around and become negative (-184549328).\n\nThe \u0026quot;size\u0026quot; is then passed to print_hex_dump() (called \u0026quot;len\u0026quot; in\nprint_hex_dump()), it is passed as type size_t (an unsigned\ntype), this is then stored inside a variable called\n\u0026quot;int remaining\u0026quot;, which is then assigned to \u0026quot;int linelen\u0026quot; which\nis then passed to hex_dump_to_buffer(). In print_hex_dump()\nthe for loop, iterates through 0 to len-1, where len is\n18446744073525002176, calling hex_dump_to_buffer()\non each iteration:\n\n\tfor (i = 0; i \u0026lt; len; i += rowsize) {\n\t\tlinelen = min(remaining, rowsize);\n\t\tremaining -= rowsize;\n\n\t\thex_dump_to_buffer(ptr + i, linelen, rowsize, groupsize,\n\t\t\t\t   linebuf, sizeof(linebuf), ascii);\n\n\t\t...\n\t}\n\nThe expected stopping condition (i \u0026lt; len) is effectively broken\nsince len is corrupted and very large. This eventually leads to\nthe \u0026quot;ptr+i\u0026quot; being passed to hex_dump_to_buffer() to get closer\nto the end of the actual bounds of \u0026quot;ptr\u0026quot;, eventually an out of\nbounds access is done in hex_dump_to_buffer() in the following\nfor loop:\n\n\tfor (j = 0; j \u0026lt; len; j++) {\n\t\t\tif (linebuflen \u0026lt; lx + 2)\n\t\t\t\tgoto overflow2;\n\t\t\tch = ptr[j];\n\t\t...\n\t}\n\nTo fix this we should validate \u0026quot;EALIST_SIZE(ea_buf-\u0026gt;xattr)\u0026quot;\nbefore it is utilised.(CVE-2025-39735)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nobjtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()\n\nIf speed_hz \u0026lt; AMD_SPI_MIN_HZ, amd_set_spi_freq() iterates over the\nentire amd_spi_freq array without breaking out early, causing \u0026apos;i\u0026apos; to go\nbeyond the array bounds.\n\nFix that by stopping the loop when it gets to the last entry, so the low\nspeed_hz value gets clamped up to AMD_SPI_MIN_HZ.\n\nFixes the following warning with an UBSAN kernel:\n\n  drivers/spi/spi-amd.o: error: objtool: amd_set_spi_freq() falls through to next function amd_spi_set_opcode()(CVE-2025-40014)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: fix io_req_prep_async with provided buffers\n\nio_req_prep_async() can import provided buffers, commit the ring state\nby giving up on that before, it\u0026apos;ll be reimported later if needed.(CVE-2025-40364)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:52.829554319Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1870","title":"kernel security update","description":"The Linux Kernel, the operating system core itself.\r\n\r\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix potential use after free bug\n\nThe free_device_compression_mode(iaa_device, device_mode) function frees\n\u0026quot;device_mode\u0026quot; but it iss passed to iaa_compression_modes[i]-\u0026gt;free() a few\nlines later resulting in a use after free.\n\nThe good news is that, so far as I can tell, nothing implements the\n-\u0026gt;free() function and the use after free happens in dead code.  But, with\nthis fix, when something does implement it, we\u0026apos;ll be ready.  :)(CVE-2024-47732)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmm/migrate_device: don\u0026apos;t add folio to be freed to LRU in migrate_device_finalize()\n\nIf migration succeeded, we called\nfolio_migrate_flags()-\u0026gt;mem_cgroup_migrate() to migrate the memcg from the\nold to the new folio.  This will set memcg_data of the old folio to 0.\n\nSimilarly, if migration failed, memcg_data of the dst folio is left unset.\n\nIf we call folio_putback_lru() on such folios (memcg_data == 0), we will\nadd the folio to be freed to the LRU, making memcg code unhappy.  Running\nthe hmm selftests:\n\n  # ./hmm-tests\n  ...\n  #  RUN           hmm.hmm_device_private.migrate ...\n  [  102.078007][T14893] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7ff27d200 pfn:0x13cc00\n  [  102.079974][T14893] anon flags: 0x17ff00000020018(uptodate|dirty|swapbacked|node=0|zone=2|lastcpupid=0x7ff)\n  [  102.082037][T14893] raw: 017ff00000020018 dead000000000100 dead000000000122 ffff8881353896c9\n  [  102.083687][T14893] raw: 00000007ff27d200 0000000000000000 00000001ffffffff 0000000000000000\n  [  102.085331][T14893] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg \u0026amp;\u0026amp; !mem_cgroup_disabled())\n  [  102.087230][T14893] ------------[ cut here ]------------\n  [  102.088279][T14893] WARNING: CPU: 0 PID: 14893 at ./include/linux/memcontrol.h:726 folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.090478][T14893] Modules linked in:\n  [  102.091244][T14893] CPU: 0 UID: 0 PID: 14893 Comm: hmm-tests Not tainted 6.13.0-09623-g6c216bc522fd #151\n  [  102.093089][T14893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014\n  [  102.094848][T14893] RIP: 0010:folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.096104][T14893] Code: ...\n  [  102.099908][T14893] RSP: 0018:ffffc900236c37b0 EFLAGS: 00010293\n  [  102.101152][T14893] RAX: 0000000000000000 RBX: ffffea0004f30000 RCX: ffffffff8183f426\n  [  102.102684][T14893] RDX: ffff8881063cb880 RSI: ffffffff81b8117f RDI: ffff8881063cb880\n  [  102.104227][T14893] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000\n  [  102.105757][T14893] R10: 0000000000000001 R11: 0000000000000002 R12: ffffc900236c37d8\n  [  102.107296][T14893] R13: ffff888277a2bcb0 R14: 000000000000001f R15: 0000000000000000\n  [  102.108830][T14893] FS:  00007ff27dbdd740(0000) GS:ffff888277a00000(0000) knlGS:0000000000000000\n  [  102.110643][T14893] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  [  102.111924][T14893] CR2: 00007ff27d400000 CR3: 000000010866e000 CR4: 0000000000750ef0\n  [  102.113478][T14893] PKRU: 55555554\n  [  102.114172][T14893] Call Trace:\n  [  102.114805][T14893]  \u0026lt;TASK\u0026gt;\n  [  102.115397][T14893]  ? folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.116547][T14893]  ? __warn.cold+0x110/0x210\n  [  102.117461][T14893]  ? folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.118667][T14893]  ? report_bug+0x1b9/0x320\n  [  102.119571][T14893]  ? handle_bug+0x54/0x90\n  [  102.120494][T14893]  ? exc_invalid_op+0x17/0x50\n  [  102.121433][T14893]  ? asm_exc_invalid_op+0x1a/0x20\n  [  102.122435][T14893]  ? __wake_up_klogd.part.0+0x76/0xd0\n  [  102.123506][T14893]  ? dump_page+0x4f/0x60\n  [  102.124352][T14893]  ? folio_lruvec_lock_irqsave+0x10e/0x170\n  [  102.125500][T14893]  folio_batch_move_lru+0xd4/0x200\n  [  102.126577][T14893]  ? __pfx_lru_add+0x10/0x10\n  [  102.127505][T14893]  __folio_batch_add_and_move+0x391/0x720\n  [  102.128633][T14893]  ? __pfx_lru_add+0x10/0x10\n  [  102.129550][T14893]  folio_putback_lru+0x16/0x80\n  [  102.130564][T14893]  migrate_device_finalize+0x9b/0x530\n  [  102.131640][T14893]  dmirror_migrate_to_device.constprop.0+0x7c5/0xad0\n  [  102.133047][T14893]  dmirror_fops_unlocked_ioctl+0x89b/0xc80\n\nLikely, nothing else goes wrong: putting the last folio reference will\nremove the folio from the LRU again.  So besides memcg complaining, adding\nthe folio to be freed to the LRU is just an unnecessary step.\n\nThe new flow resembles what we have in migrate_folio_move(): add the dst\nto the lru, rem\n---truncated---(CVE-2025-21861)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()\n\nOn the off chance that command stream passed from userspace via\nioctl() call to radeon_vce_cs_parse() is weirdly crafted and\nfirst command to execute is to encode (case 0x03000001), the function\nin question will attempt to call radeon_vce_cs_reloc() with size\nargument that has not been properly initialized. Specifically, \u0026apos;size\u0026apos;\nwill point to \u0026apos;tmp\u0026apos; variable before the latter had a chance to be\nassigned any value.\n\nPlay it safe and init \u0026apos;tmp\u0026apos; with 0, thus ensuring that\nradeon_vce_cs_reloc() will catch an early error in cases like these.\n\nFound by Linux Verification Center (linuxtesting.org) with static\nanalysis tool SVACE.\n\n(cherry picked from commit 2d52de55f9ee7aaee0e09ac443f77855989c6b68)(CVE-2025-21996)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\narm64: Don\u0026apos;t call NULL in do_compat_alignment_fixup()\n\ndo_alignment_t32_to_handler() only fixes up alignment faults for\nspecific instructions; it returns NULL otherwise (e.g. LDREX). When\nthat\u0026apos;s the case, signal to the caller that it needs to proceed with the\nregular alignment fault handling (i.e. SIGBUS). Without this patch, the\nkernel panics:\n\n  Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n  Mem abort info:\n    ESR = 0x0000000086000006\n    EC = 0x21: IABT (current EL), IL = 32 bits\n    SET = 0, FnV = 0\n    EA = 0, S1PTW = 0\n    FSC = 0x06: level 2 translation fault\n  user pgtable: 4k pages, 48-bit VAs, pgdp=00000800164aa000\n  [0000000000000000] pgd=0800081fdbd22003, p4d=0800081fdbd22003, pud=08000815d51c6003, pmd=0000000000000000\n  Internal error: Oops: 0000000086000006 [#1] SMP\n  Modules linked in: cfg80211 rfkill xt_nat xt_tcpudp xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xfrm_user xfrm_algo xt_addrtype nft_compat br_netfilter veth nvme_fa\u0026gt;\n   libcrc32c crc32c_generic raid0 multipath linear dm_mod dax raid1 md_mod xhci_pci nvme xhci_hcd nvme_core t10_pi usbcore igb crc64_rocksoft crc64 crc_t10dif crct10dif_generic crct10dif_ce crct10dif_common usb_common i2c_algo_bit i2c\u0026gt;\n  CPU: 2 PID: 3932954 Comm: WPEWebProcess Not tainted 6.1.0-31-arm64 #1  Debian 6.1.128-1\n  Hardware name: GIGABYTE MP32-AR1-00/MP32-AR1-00, BIOS F18v (SCP: 1.08.20211002) 12/01/2021\n  pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n  pc : 0x0\n  lr : do_compat_alignment_fixup+0xd8/0x3dc\n  sp : ffff80000f973dd0\n  x29: ffff80000f973dd0 x28: ffff081b42526180 x27: 0000000000000000\n  x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000\n  x23: 0000000000000004 x22: 0000000000000000 x21: 0000000000000001\n  x20: 00000000e8551f00 x19: ffff80000f973eb0 x18: 0000000000000000\n  x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\n  x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000\n  x11: 0000000000000000 x10: 0000000000000000 x9 : ffffaebc949bc488\n  x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000\n  x5 : 0000000000400000 x4 : 0000fffffffffffe x3 : 0000000000000000\n  x2 : ffff80000f973eb0 x1 : 00000000e8551f00 x0 : 0000000000000001\n  Call trace:\n   0x0\n   do_alignment_fault+0x40/0x50\n   do_mem_abort+0x4c/0xa0\n   el0_da+0x48/0xf0\n   el0t_32_sync_handler+0x110/0x140\n   el0t_32_sync+0x190/0x194\n  Code: bad PC value\n  ---[ end trace 0000000000000000 ]---(CVE-2025-22033)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: libwx: fix Tx L4 checksum\n\nThe hardware only supports L4 checksum offload for TCP/UDP/SCTP protocol.\nThere was a bug to set Tx checksum flag for the other protocol that results\nin Tx ring hang. Fix to compute software checksum for these packets.(CVE-2025-22101)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Mask the bd_cnt field in the TX BD properly\n\nThe bd_cnt field in the TX BD specifies the total number of BDs for\nthe TX packet.  The bd_cnt field has 5 bits and the maximum number\nsupported is 32 with the value 0.\n\nCONFIG_MAX_SKB_FRAGS can be modified and the total number of SKB\nfragments can approach or exceed the maximum supported by the chip.\nAdd a macro to properly mask the bd_cnt field so that the value 32\nwill be properly masked and set to 0 in the bd_cnd field.\n\nWithout this patch, the out-of-range bd_cnt value will corrupt the\nTX BD and may cause TX timeout.\n\nThe next patch will check for values exceeding 32.(CVE-2025-22108)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses\n\nAcquire a lock on kvm-\u0026gt;srcu when userspace is getting MP state to handle a\nrather extreme edge case where \u0026quot;accepting\u0026quot; APIC events, i.e. processing\npending INIT or SIPI, can trigger accesses to guest memory.  If the vCPU\nis in L2 with INIT *and* a TRIPLE_FAULT request pending, then getting MP\nstate will trigger a nested VM-Exit by way of -\u0026gt;check_nested_events(), and\nemuating the nested VM-Exit can access guest memory.\n\nThe splat was originally hit by syzkaller on a Google-internal kernel, and\nreproduced on an upstream kernel by hacking the triple_fault_event_test\nselftest to stuff a pending INIT, store an MSR on VM-Exit (to generate a\nmemory access on VMX), and do vcpu_mp_state_get() to trigger the scenario.\n\n  =============================\n  WARNING: suspicious RCU usage\n  6.14.0-rc3-b112d356288b-vmx/pi_lockdep_false_pos-lock #3 Not tainted\n  -----------------------------\n  include/linux/kvm_host.h:1058 suspicious rcu_dereference_check() usage!\n\n  other info that might help us debug this:\n\n  rcu_scheduler_active = 2, debug_locks = 1\n  1 lock held by triple_fault_ev/1256:\n   #0: ffff88810df5a330 (\u0026amp;vcpu-\u0026gt;mutex){+.+.}-{4:4}, at: kvm_vcpu_ioctl+0x8b/0x9a0 [kvm]\n\n  stack backtrace:\n  CPU: 11 UID: 1000 PID: 1256 Comm: triple_fault_ev Not tainted 6.14.0-rc3-b112d356288b-vmx #3\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n  Call Trace:\n   \u0026lt;TASK\u0026gt;\n   dump_stack_lvl+0x7f/0x90\n   lockdep_rcu_suspicious+0x144/0x190\n   kvm_vcpu_gfn_to_memslot+0x156/0x180 [kvm]\n   kvm_vcpu_read_guest+0x3e/0x90 [kvm]\n   read_and_check_msr_entry+0x2e/0x180 [kvm_intel]\n   __nested_vmx_vmexit+0x550/0xde0 [kvm_intel]\n   kvm_check_nested_events+0x1b/0x30 [kvm]\n   kvm_apic_accept_events+0x33/0x100 [kvm]\n   kvm_arch_vcpu_ioctl_get_mpstate+0x30/0x1d0 [kvm]\n   kvm_vcpu_ioctl+0x33e/0x9a0 [kvm]\n   __x64_sys_ioctl+0x8b/0xb0\n   do_syscall_64+0x6c/0x170\n   entry_SYSCALL_64_after_hwframe+0x4b/0x53\n   \u0026lt;/TASK\u0026gt;(CVE-2025-23141)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntpm: do not start chip while suspended\n\nChecking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() can\nlead to a spurious tpm_chip_start() call:\n\n[35985.503771] i2c i2c-1: Transfer while suspended\n[35985.503796] WARNING: CPU: 0 PID: 74 at drivers/i2c/i2c-core.h:56 __i2c_transfer+0xbe/0x810\n[35985.503802] Modules linked in:\n[35985.503808] CPU: 0 UID: 0 PID: 74 Comm: hwrng Tainted: G        W          6.13.0-next-20250203-00005-gfa0cb5642941 #19 9c3d7f78192f2d38e32010ac9c90fdc71109ef6f\n[35985.503814] Tainted: [W]=WARN\n[35985.503817] Hardware name: Google Morphius/Morphius, BIOS Google_Morphius.13434.858.0 10/26/2023\n[35985.503819] RIP: 0010:__i2c_transfer+0xbe/0x810\n[35985.503825] Code: 30 01 00 00 4c 89 f7 e8 40 fe d8 ff 48 8b 93 80 01 00 00 48 85 d2 75 03 49 8b 16 48 c7 c7 0a fb 7c a7 48 89 c6 e8 32 ad b0 fe \u0026lt;0f\u0026gt; 0b b8 94 ff ff ff e9 33 04 00 00 be 02 00 00 00 83 fd 02 0f 5\n[35985.503828] RSP: 0018:ffffa106c0333d30 EFLAGS: 00010246\n[35985.503833] RAX: 074ba64aa20f7000 RBX: ffff8aa4c1167120 RCX: 0000000000000000\n[35985.503836] RDX: 0000000000000000 RSI: ffffffffa77ab0e4 RDI: 0000000000000001\n[35985.503838] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000\n[35985.503841] R10: 0000000000000004 R11: 00000001000313d5 R12: ffff8aa4c10f1820\n[35985.503843] R13: ffff8aa4c0e243c0 R14: ffff8aa4c1167250 R15: ffff8aa4c1167120\n[35985.503846] FS:  0000000000000000(0000) GS:ffff8aa4eae00000(0000) knlGS:0000000000000000\n[35985.503849] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[35985.503852] CR2: 00007fab0aaf1000 CR3: 0000000105328000 CR4: 00000000003506f0\n[35985.503855] Call Trace:\n[35985.503859]  \u0026lt;TASK\u0026gt;\n[35985.503863]  ? __warn+0xd4/0x260\n[35985.503868]  ? __i2c_transfer+0xbe/0x810\n[35985.503874]  ? report_bug+0xf3/0x210\n[35985.503882]  ? handle_bug+0x63/0xb0\n[35985.503887]  ? exc_invalid_op+0x16/0x50\n[35985.503892]  ? asm_exc_invalid_op+0x16/0x20\n[35985.503904]  ? __i2c_transfer+0xbe/0x810\n[35985.503913]  tpm_cr50_i2c_transfer_message+0x24/0xf0\n[35985.503920]  tpm_cr50_i2c_read+0x8e/0x120\n[35985.503928]  tpm_cr50_request_locality+0x75/0x170\n[35985.503935]  tpm_chip_start+0x116/0x160\n[35985.503942]  tpm_try_get_ops+0x57/0x90\n[35985.503948]  tpm_find_get_ops+0x26/0xd0\n[35985.503955]  tpm_get_random+0x2d/0x80\n\nDon\u0026apos;t move forward with tpm_chip_start() inside tpm_try_get_ops(), unless\nTPM_CHIP_FLAG_SUSPENDED is not set. tpm_find_get_ops() will return NULL in\nsuch a failure case.(CVE-2025-23149)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()\n\nsyzbot reports an UBSAN issue as below:\n\n------------[ cut here ]------------\nUBSAN: array-index-out-of-bounds in fs/f2fs/node.h:381:10\nindex 18446744073709550692 is out of range for type \u0026apos;__le32[5]\u0026apos; (aka \u0026apos;unsigned int[5]\u0026apos;)\nCPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0\nCall Trace:\n \u0026lt;TASK\u0026gt;\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n ubsan_epilogue lib/ubsan.c:231 [inline]\n __ubsan_handle_out_of_bounds+0x121/0x150 lib/ubsan.c:429\n get_nid fs/f2fs/node.h:381 [inline]\n f2fs_truncate_inode_blocks+0xa5e/0xf60 fs/f2fs/node.c:1181\n f2fs_do_truncate_blocks+0x782/0x1030 fs/f2fs/file.c:808\n f2fs_truncate_blocks+0x10d/0x300 fs/f2fs/file.c:836\n f2fs_truncate+0x417/0x720 fs/f2fs/file.c:886\n f2fs_file_write_iter+0x1bdb/0x2550 fs/f2fs/file.c:5093\n aio_write+0x56b/0x7c0 fs/aio.c:1633\n io_submit_one+0x8a7/0x18a0 fs/aio.c:2052\n __do_sys_io_submit fs/aio.c:2111 [inline]\n __se_sys_io_submit+0x171/0x2e0 fs/aio.c:2081\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f238798cde9\n\nindex 18446744073709550692 (decimal, unsigned long long)\n= 0xfffffffffffffc64 (hexadecimal, unsigned long long)\n= -924 (decimal, long long)\n\nIn f2fs_truncate_inode_blocks(), UBSAN detects that get_nid() tries to\naccess .i_nid[-924], it means both offset[0] and level should zero.\n\nThe possible case should be in f2fs_do_truncate_blocks(), we try to\ntruncate inode size to zero, however, dn.ofs_in_node is zero and\ndn.node_page is not an inode page, so it fails to truncate inode page,\nand then pass zeroed free_from to f2fs_truncate_inode_blocks(), result\nin this issue.\n\n\tif (dn.ofs_in_node || IS_INODE(dn.node_page)) {\n\t\tf2fs_truncate_data_blocks_range(\u0026amp;dn, count);\n\t\tfree_from += count;\n\t}\n\nI guess the reason why dn.node_page is not an inode page could be: there\nare multiple nat entries share the same node block address, once the node\nblock address was reused, f2fs_get_node_page() may load a non-inode block.\n\nLet\u0026apos;s add a sanity check for such condition to avoid out-of-bounds access\nissue.(CVE-2025-37739)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ti: icss-iep: Fix possible NULL pointer dereference for perout request\n\nThe ICSS IEP driver tracks perout and pps enable state with flags.\nCurrently when disabling pps and perout signals during icss_iep_exit(),\nresults in NULL pointer dereference for perout.\n\nTo fix the null pointer dereference issue, the icss_iep_perout_enable_hw\nfunction can be modified to directly clear the IEP CMP registers when\ndisabling PPS or PEROUT, without referencing the ptp_perout_request\nstructure, as its contents are irrelevant in this case.(CVE-2025-37784)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: null - Use spin lock instead of mutex\n\nAs the null algorithm may be freed in softirq context through\naf_alg, use spin locks instead of mutexes to protect the default\nnull algorithm.(CVE-2025-37808)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: check that event count does not exceed event buffer length\n\nThe event count is read from register DWC3_GEVNTCOUNT.\nThere is a check for the count being zero, but not for exceeding the\nevent buffer length.\nCheck that event count does not exceed event buffer length,\navoiding an out-of-bounds access when memcpy\u0026apos;ing the event.\nCrash log:\nUnable to handle kernel paging request at virtual address ffffffc0129be000\npc : __memcpy+0x114/0x180\nlr : dwc3_check_event_buf+0xec/0x348\nx3 : 0000000000000030 x2 : 000000000000dfc4\nx1 : ffffffc0129be000 x0 : ffffff87aad60080\nCall trace:\n__memcpy+0x114/0x180\ndwc3_interrupt+0x24/0x34(CVE-2025-37810)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nspi: fsl-qspi: use devm function instead of driver remove\n\nDriver use devm APIs to manage clk/irq/resources and register the spi\ncontroller, but the legacy remove function will be called first during\ndevice detach and trigger kernel panic. Drop the remove function and use\ndevm_add_action_or_reset() for driver cleanup to ensure the release\nsequence.\n\nTrigger kernel panic on i.MX8MQ by\necho 30bb0000.spi \u0026gt;/sys/bus/platform/drivers/fsl-quadspi/unbind(CVE-2025-37842)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Tear down vGIC on failed vCPU creation\n\nIf kvm_arch_vcpu_create() fails to share the vCPU page with the\nhypervisor, we propagate the error back to the ioctl but leave the\nvGIC vCPU data initialised. Note only does this leak the corresponding\nmemory when the vCPU is destroyed but it can also lead to use-after-free\nif the redistributor device handling tries to walk into the vCPU.\n\nAdd the missing cleanup to kvm_arch_vcpu_create(), ensuring that the\nvGIC vCPU structures are destroyed on error.(CVE-2025-37849)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Fix mode1 reset crash issue\n\nIf HW scheduler hangs and mode1 reset is used to recover GPU, KFD signal\nuser space to abort the processes. After process abort exit, user queues\nstill use the GPU to access system memory before h/w is reset while KFD\ncleanup worker free system memory and free VRAM.\n\nThere is use-after-free race bug that KFD allocate and reuse the freed\nsystem memory, and user queue write to the same system memory to corrupt\nthe data structure and cause driver crash.\n\nTo fix this race, KFD cleanup worker terminate user queues, then flush\nreset_domain wq to wait for any GPU ongoing reset complete, and then\nfree outstanding BOs.(CVE-2025-37854)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result\n\nIf the FW doesn\u0026apos;t support the PDS_CORE_CMD_FW_CONTROL command\nthe driver might at the least print garbage and at the worst\ncrash when the user runs the \u0026quot;devlink dev info\u0026quot; devlink command.\n\nThis happens because the stack variable fw_list is not 0\ninitialized which results in fw_list.num_fw_slots being a\ngarbage value from the stack.  Then the driver tries to access\nfw_list.fw_names[i] with i \u0026gt;= ARRAY_SIZE and runs off the end\nof the array.\n\nFix this by initializing the fw_list and by not failing\ncompletely if the devcmd fails because other useful information\nis printed via devlink dev info even if the devcmd fails.(CVE-2025-37887)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()\n\nNouveau is mostly designed in a way that it\u0026apos;s expected that fences only\never get signaled through nouveau_fence_signal(). However, in at least\none other place, nouveau_fence_done(), can signal fences, too. If that\nhappens (race) a signaled fence remains in the pending list for a while,\nuntil it gets removed by nouveau_fence_update().\n\nShould nouveau_fence_context_kill() run in the meantime, this would be\na bug because the function would attempt to set an error code on an\nalready signaled fence.\n\nHave nouveau_fence_context_kill() check for a fence being signaled.(CVE-2025-37930)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nocteon_ep: Fix host hang issue during device reboot\n\nWhen the host loses heartbeat messages from the device,\nthe driver calls the device-specific ndo_stop function,\nwhich frees the resources. If the driver is unloaded in\nthis scenario, it calls ndo_stop again, attempting to free\nresources that have already been freed, leading to a host\nhang issue. To resolve this, dev_close should be called\ninstead of the device-specific stop function.dev_close\ninternally calls ndo_stop to stop the network interface\nand performs additional cleanup tasks. During the driver\nunload process, if the device is already down, ndo_stop\nis not called.(CVE-2025-37933)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nobjtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()\n\nIf dib8000_set_dds()\u0026apos;s call to dib8000_read32() returns zero, the result\nis a divide-by-zero.  Prevent that from happening.\n\nFixes the following warning with an UBSAN kernel:\n\n  drivers/media/dvb-frontends/dib8000.o: warning: objtool: dib8000_tune() falls through to next function dib8096p_cfg_DibRx()(CVE-2025-37937)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\narm64: bpf: Add BHB mitigation to the epilogue for cBPF programs\n\nA malicious BPF program may manipulate the branch history to influence\nwhat the hardware speculates will happen next.\n\nOn exit from a BPF program, emit the BHB mititgation sequence.\n\nThis is only applied for \u0026apos;classic\u0026apos; cBPF programs that are loaded by\nseccomp.(CVE-2025-37948)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/v3d: Add job to pending list if the reset was skipped\n\nWhen a CL/CSD job times out, we check if the GPU has made any progress\nsince the last timeout. If so, instead of resetting the hardware, we skip\nthe reset and let the timer get rearmed. This gives long-running jobs a\nchance to complete.\n\nHowever, when `timedout_job()` is called, the job in question is removed\nfrom the pending list, which means it won\u0026apos;t be automatically freed through\n`free_job()`. Consequently, when we skip the reset and keep the job\nrunning, the job won\u0026apos;t be freed when it finally completes.\n\nThis situation leads to a memory leak, as exposed in [1] and [2].\n\nSimilarly to commit 704d3d60fec4 (\u0026quot;drm/etnaviv: don\u0026apos;t block scheduler when\nGPU is still active\u0026quot;), this patch ensures the job is put back on the\npending list when extending the timeout.(CVE-2025-37951)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\narm64: bpf: Only mitigate cBPF programs loaded by unprivileged users\n\nSupport for eBPF programs loaded by unprivileged users is typically\ndisabled. This means only cBPF programs need to be mitigated for BHB.\n\nIn addition, only mitigate cBPF programs that were loaded by an\nunprivileged user. Privileged users can also load the same program\nvia eBPF, making the mitigation pointless.(CVE-2025-37963)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\niio: light: opt3001: fix deadlock due to concurrent flag access\n\nThe threaded IRQ function in this driver is reading the flag twice: once to\nlock a mutex and once to unlock it. Even though the code setting the flag\nis designed to prevent it, there are subtle cases where the flag could be\ntrue at the mutex_lock stage and false at the mutex_unlock stage. This\nresults in the mutex not being unlocked, resulting in a deadlock.\n\nFix it by making the opt3001_irq() code generally more robust, reading the\nflag into a variable and using the variable value at both stages.(CVE-2025-37968)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()\n\nHerbert notes that DIV_ROUND_UP() may overflow unnecessarily if an ecdsa\nimplementation\u0026apos;s -\u0026gt;key_size() callback returns an unusually large value.\nHerbert instead suggests (for a division by 8):\n\n  X / 8 + !!(X \u0026amp; 7)\n\nBased on this formula, introduce a generic DIV_ROUND_UP_POW2() macro and\nuse it in lieu of DIV_ROUND_UP() for -\u0026gt;key_size() return values.\n\nAdditionally, use the macro in ecc_digits_from_bytes(), whose \u0026quot;nbytes\u0026quot;\nparameter is a -\u0026gt;key_size() return value in some instances, or a\nuser-specified ASN.1 length in the case of ecdsa_get_signature_rs().(CVE-2025-37984)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nparisc: Fix double SIGFPE crash\n\nCamm noticed that on parisc a SIGFPE exception will crash an application with\na second SIGFPE in the signal handler.  Dave analyzed it, and it happens\nbecause glibc uses a double-word floating-point store to atomically update\nfunction descriptors. As a result of lazy binding, we hit a floating-point\nstore in fpe_func almost immediately.\n\nWhen the T bit is set, an assist exception trap occurs when when the\nco-processor encounters *any* floating-point instruction except for a double\nstore of register %fr0.  The latter cancels all pending traps.  Let\u0026apos;s fix this\nby clearing the Trap (T) bit in the FP status register before returning to the\nsignal handler in userspace.\n\nThe issue can be reproduced with this test program:\n\nroot@parisc:~# cat fpe.c\n\nstatic void fpe_func(int sig, siginfo_t *i, void *v) {\n        sigset_t set;\n        sigemptyset(\u0026amp;set);\n        sigaddset(\u0026amp;set, SIGFPE);\n        sigprocmask(SIG_UNBLOCK, \u0026amp;set, NULL);\n        printf(\u0026quot;GOT signal %d with si_code %ld\\n\u0026quot;, sig, i-\u0026gt;si_code);\n}\n\nint main() {\n        struct sigaction action = {\n                .sa_sigaction = fpe_func,\n                .sa_flags = SA_RESTART|SA_SIGINFO };\n        sigaction(SIGFPE, \u0026amp;action, 0);\n        feenableexcept(FE_OVERFLOW);\n        return printf(\u0026quot;%lf\\n\u0026quot;,1.7976931348623158E308*1.7976931348623158E308);\n}\n\nroot@parisc:~# gcc fpe.c -lm\nroot@parisc:~# ./a.out\n Floating point exception\n\nroot@parisc:~# strace -f ./a.out\n execve(\u0026quot;./a.out\u0026quot;, [\u0026quot;./a.out\u0026quot;], 0xf9ac7034 /* 20 vars */) = 0\n getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0\n ...\n rt_sigaction(SIGFPE, {sa_handler=0x1110a, sa_mask=[], sa_flags=SA_RESTART|SA_SIGINFO}, NULL, 8) = 0\n --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0x1078f} ---\n --- SIGFPE {si_signo=SIGFPE, si_code=FPE_FLTOVF, si_addr=0xf8f21237} ---\n +++ killed by SIGFPE +++\n Floating point exception(CVE-2025-37991)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nHID: uclogic: Add NULL check in uclogic_input_configured()\n\ndevm_kasprintf() returns NULL when memory allocation fails. Currently,\nuclogic_input_configured() does not check for this case, which results\nin a NULL pointer dereference.\n\nAdd NULL check after devm_kasprintf() to prevent this issue.(CVE-2025-38007)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnfs: handle failure of nfs_get_lock_context in unlock path\n\nWhen memory is insufficient, the allocation of nfs_lock_context in\nnfs_get_lock_context() fails and returns -ENOMEM. If we mistakenly treat\nan nfs4_unlockdata structure (whose l_ctx member has been set to -ENOMEM)\nas valid and proceed to execute rpc_run_task(), this will trigger a NULL\npointer dereference in nfs4_locku_prepare. For example:\n\nBUG: kernel NULL pointer dereference, address: 000000000000000c\nPGD 0 P4D 0\nOops: Oops: 0000 [#1] SMP PTI\nCPU: 15 UID: 0 PID: 12 Comm: kworker/u64:0 Not tainted 6.15.0-rc2-dirty #60\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40\nWorkqueue: rpciod rpc_async_schedule\nRIP: 0010:nfs4_locku_prepare+0x35/0xc2\nCode: 89 f2 48 89 fd 48 c7 c7 68 69 ef b5 53 48 8b 8e 90 00 00 00 48 89 f3\nRSP: 0018:ffffbbafc006bdb8 EFLAGS: 00010246\nRAX: 000000000000004b RBX: ffff9b964fc1fa00 RCX: 0000000000000000\nRDX: 0000000000000000 RSI: fffffffffffffff4 RDI: ffff9ba53fddbf40\nRBP: ffff9ba539934000 R08: 0000000000000000 R09: ffffbbafc006bc38\nR10: ffffffffb6b689c8 R11: 0000000000000003 R12: ffff9ba539934030\nR13: 0000000000000001 R14: 0000000004248060 R15: ffffffffb56d1c30\nFS: 0000000000000000(0000) GS:ffff9ba5881f0000(0000) knlGS:00000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000000000000000c CR3: 000000093f244000 CR4: 00000000000006f0\nCall Trace:\n \u0026lt;TASK\u0026gt;\n __rpc_execute+0xbc/0x480\n rpc_async_schedule+0x2f/0x40\n process_one_work+0x232/0x5d0\n worker_thread+0x1da/0x3d0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x10d/0x240\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x34/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u0026lt;/TASK\u0026gt;\nModules linked in:\nCR2: 000000000000000c\n---[ end trace 0000000000000000 ]---\n\nFree the allocated nfs4_unlockdata when nfs_get_lock_context() fails and\nreturn NULL to terminate subsequent rpc_run_task, preventing NULL pointer\ndereference.(CVE-2025-38023)\n\nLinux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States.\n There is a security vulnerability in Linux kernel that originates from a wrong parameter order, which may cause null pointers to be dereferenced.(CVE-2025-38034)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: copy_verifier_state() should copy \u0026apos;loop_entry\u0026apos; field\n\nThe bpf_verifier_state.loop_entry state should be copied by\ncopy_verifier_state(). Otherwise, .loop_entry values from unrelated\nstates would poison env-\u0026gt;cur_state.\n\nAdditionally, env-\u0026gt;stack should not contain any states with\n.loop_entry != NULL. The states in env-\u0026gt;stack are yet to be verified,\nwhile .loop_entry is set for states that reached an equivalent state.\nThis means that env-\u0026gt;cur_state-\u0026gt;loop_entry should always be NULL after\npop_stack().\n\nSee the selftest in the next commit for an example of the program that\nis not safe yet is accepted by verifier w/o this fix.\n\nThis change has some verification performance impact for selftests:\n\nFile                                Program                       Insns (A)  Insns (B)  Insns   (DIFF)  States (A)  States (B)  States (DIFF)\n----------------------------------  ----------------------------  ---------  ---------  --------------  ----------  ----------  -------------\narena_htab.bpf.o                    arena_htab_llvm                     717        426  -291 (-40.59%)          57          37  -20 (-35.09%)\narena_htab_asm.bpf.o                arena_htab_asm                      597        445  -152 (-25.46%)          47          37  -10 (-21.28%)\narena_list.bpf.o                    arena_list_del                      309        279    -30 (-9.71%)          23          14   -9 (-39.13%)\niters.bpf.o                         iter_subprog_check_stacksafe        155        141    -14 (-9.03%)          15          14    -1 (-6.67%)\niters.bpf.o                         iter_subprog_iters                 1094       1003    -91 (-8.32%)          88          83    -5 (-5.68%)\niters.bpf.o                         loop_state_deps2                    479        725  +246 (+51.36%)          46          63  +17 (+36.96%)\nkmem_cache_iter.bpf.o               open_coded_iter                      63         59     -4 (-6.35%)           7           6   -1 (-14.29%)\nverifier_bits_iter.bpf.o            max_words                            92         84     -8 (-8.70%)           8           7   -1 (-12.50%)\nverifier_iterating_callbacks.bpf.o  cond_break2                         113        107     -6 (-5.31%)          12          12    +0 (+0.00%)\n\nAnd significant negative impact for sched_ext:\n\nFile               Program                 Insns (A)  Insns (B)  Insns         (DIFF)  States (A)  States (B)  States      (DIFF)\n-----------------  ----------------------  ---------  ---------  --------------------  ----------  ----------  ------------------\nbpf.bpf.o          lavd_init                    7039      14723      +7684 (+109.16%)         490        1139     +649 (+132.45%)\nbpf.bpf.o          layered_dispatch            11485      10548         -937 (-8.16%)         848         762       -86 (-10.14%)\nbpf.bpf.o          layered_dump                 7422    1000001  +992579 (+13373.47%)         681       31178  +30497 (+4478.27%)\nbpf.bpf.o          layered_enqueue             16854      71127     +54273 (+322.02%)        1611        6450    +4839 (+300.37%)\nbpf.bpf.o          p2dq_dispatch                 665        791        +126 (+18.95%)          68          78       +10 (+14.71%)\nbpf.bpf.o          p2dq_init                    2343       2980        +637 (+27.19%)         201         237       +36 (+17.91%)\nbpf.bpf.o          refresh_layer_cpumasks      16487     674760   +658273 (+3992.68%)        1770       65370  +63600 (+3593.22%)\nbpf.bpf.o          rusty_select_cpu             1937      40872    +38935 (+2010.07%)         177        3210   +3033 (+1713.56%)\nscx_central.bpf.o  central_dispatch              636       2687      +2051 (+322.48%)          63         227     +164 (+260.32%)\nscx_nest.bpf.o     nest_init                     636        815        +179 (+28.14%)          60          73       +13 (+21.67%)\nscx_qmap.bpf.o     qmap_dispatch      \n---truncated---(CVE-2025-38060)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\norangefs: Do not truncate file size\n\n\u0026apos;len\u0026apos; is used to store the result of i_size_read(), so making \u0026apos;len\u0026apos;\na size_t results in truncation to 4GiB on 32-bit systems.(CVE-2025-38065)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nrseq: Fix segfault on registration when rseq_cs is non-zero\n\nThe rseq_cs field is documented as being set to 0 by user-space prior to\nregistration, however this is not currently enforced by the kernel. This\ncan result in a segfault on return to user-space if the value stored in\nthe rseq_cs field doesn\u0026apos;t point to a valid struct rseq_cs.\n\nThe correct solution to this would be to fail the rseq registration when\nthe rseq_cs field is non-zero. However, some older versions of glibc\nwill reuse the rseq area of previous threads without clearing the\nrseq_cs field and will also terminate the process if the rseq\nregistration fails in a secondary thread. This wasn\u0026apos;t caught in testing\nbecause in this case the leftover rseq_cs does point to a valid struct\nrseq_cs.\n\nWhat we can do is clear the rseq_cs field on registration when it\u0026apos;s\nnon-zero which will prevent segfaults on registration and won\u0026apos;t break\nthe glibc versions that reuse rseq areas on thread creation.(CVE-2025-38067)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nlibnvdimm/labels: Fix divide error in nd_label_data_init()\n\nIf a faulty CXL memory device returns a broken zero LSA size in its\nmemory device information (Identify Memory Device (Opcode 4000h), CXL\nspec. 3.1, 8.2.9.9.1.1), a divide error occurs in the libnvdimm\ndriver:\n\n Oops: divide error: 0000 [#1] PREEMPT SMP NOPTI\n RIP: 0010:nd_label_data_init+0x10e/0x800 [libnvdimm]\n\nCode and flow:\n\n1) CXL Command 4000h returns LSA size = 0\n2) config_size is assigned to zero LSA size (CXL pmem driver):\n\ndrivers/cxl/pmem.c:             .config_size = mds-\u0026gt;lsa_size,\n\n3) max_xfer is set to zero (nvdimm driver):\n\ndrivers/nvdimm/label.c: max_xfer = min_t(size_t, ndd-\u0026gt;nsarea.max_xfer, config_size);\n\n4) A subsequent DIV_ROUND_UP() causes a division by zero:\n\ndrivers/nvdimm/label.c: /* Make our initial read size a multiple of max_xfer size */\ndrivers/nvdimm/label.c: read_size = min(DIV_ROUND_UP(read_size, max_xfer) * max_xfer,\ndrivers/nvdimm/label.c-                 config_size);\n\nFix this by checking the config size parameter by extending an\nexisting check.(CVE-2025-38072)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nvhost-scsi: protect vq-\u0026gt;log_used with vq-\u0026gt;mutex\n\nThe vhost-scsi completion path may access vq-\u0026gt;log_base when vq-\u0026gt;log_used is\nalready set to false.\n\n    vhost-thread                       QEMU-thread\n\nvhost_scsi_complete_cmd_work()\n-\u0026gt; vhost_add_used()\n   -\u0026gt; vhost_add_used_n()\n      if (unlikely(vq-\u0026gt;log_used))\n                                      QEMU disables vq-\u0026gt;log_used\n                                      via VHOST_SET_VRING_ADDR.\n                                      mutex_lock(\u0026amp;vq-\u0026gt;mutex);\n                                      vq-\u0026gt;log_used = false now!\n                                      mutex_unlock(\u0026amp;vq-\u0026gt;mutex);\n\n\t\t\t\t      QEMU gfree(vq-\u0026gt;log_base)\n        log_used()\n        -\u0026gt; log_write(vq-\u0026gt;log_base)\n\nAssuming the VMM is QEMU. The vq-\u0026gt;log_base is from QEMU userpace and can be\nreclaimed via gfree(). As a result, this causes invalid memory writes to\nQEMU userspace.\n\nThe control queue path has the same issue.(CVE-2025-38074)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: Fix race of buffer access at PCM OSS layer\n\nThe PCM OSS layer tries to clear the buffer with the silence data at\ninitialization (or reconfiguration) of a stream with the explicit call\nof snd_pcm_format_set_silence() with runtime-\u0026gt;dma_area.  But this may\nlead to a UAF because the accessed runtime-\u0026gt;dma_area might be freed\nconcurrently, as it\u0026apos;s performed outside the PCM ops.\n\nFor avoiding it, move the code into the PCM core and perform it inside\nthe buffer access lock, so that it won\u0026apos;t be changed during the\noperation.(CVE-2025-38078)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Increase block_sequence array size\n\n[Why]\nIt\u0026apos;s possible to generate more than 50 steps in hwss_build_fast_sequence,\nfor example with a 6-pipe asic where all pipes are in one MPC chain. This\noverflows the block_sequence buffer and corrupts block_sequence_steps,\ncausing a crash.\n\n[How]\nExpand block_sequence to 100 items. A naive upper bound on the possible\nnumber of steps for a 6-pipe asic, ignoring the potential for steps to be\nmutually exclusive, is 91 with current code, therefore 100 is sufficient.(CVE-2025-38080)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nspi-rockchip: Fix register out of bounds access\n\nDo not write native chip select stuff for GPIO chip selects.\nGPIOs can be numbered much higher than native CS.\nAlso, it makes no sense.(CVE-2025-38081)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/rapidio/rio_cm.c: prevent possible heap overwrite\n\nIn\n\nriocm_cdev_ioctl(RIO_CM_CHAN_SEND)\n   -\u0026gt; cm_chan_msg_send()\n      -\u0026gt; riocm_ch_send()\n\ncm_chan_msg_send() checks that userspace didn\u0026apos;t send too much data but\nriocm_ch_send() failed to check that userspace sent sufficient data.  The\nresult is that riocm_ch_send() can write to fields in the rio_ch_chan_hdr\nwhich were outside the bounds of the space which cm_chan_msg_send()\nallocated.\n\nAddress this by teaching riocm_ch_send() to check that the entire\nrio_ch_chan_hdr was copied in from userspace.(CVE-2025-38090)\n\nA vulnerability was found in Linux Kernel up to 6.14.7 (Operating System). It has been classified as critical.CWE is classifying the issue as CWE-833. The product contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.This is going to have an impact on availability.Upgrading to version 5.10.238, 5.15.184, 6.1.140, 6.6.92, 6.12.30 or 6.14.8 eliminates this vulnerability. Applying the patch 0772a608d799ac0d127c0a36047a2725777aba9d/64675a9c00443b2e8af42af08c38fc1b78b68ba2/aace6b63892ce8307e502a60fe2f5a4bc6e1cfe7/1d60c0781c1bbeaa1196b0d8aad5c435f06cb7c4/3e64d35475aa21d13dab71da51de51923c1a3a48/84f98955a9de0e0f591df85aa1a44f3ebcf1cb37/c92d6089d8ad7d4d815ebcedee3f3907b539ff1f is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-19769).(CVE-2025-38094)\n\nA vulnerability has been found in Linux Kernel up to 6.1.139/6.6.91/6.12.29/6.14.7 (Operating System) and classified as critical.The CWE definition for the vulnerability is CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.As an impact it is known to affect availability.Upgrading to version 6.1.140, 6.6.92, 6.12.30 or 6.14.8 eliminates this vulnerability. Applying the patch 3becc659f9cb76b481ad1fb71f54d5c8d6332d3f/c9d2b9a80d06a58f37e0dc8c827075639b443927/fe1bebd0edb22e3536cbc920ec713331d1367ad4/08680c4dadc6e736c75bc2409d833f03f9003c51/72c7d62583ebce7baeb61acce6057c361f73be4a is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-19768).(CVE-2025-38095)\n\nA vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.12.30/6.14.8 (Operating System).CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use.This is going to have an impact on availability.Upgrading to version 6.12.31 or 6.14.9 eliminates this vulnerability. Applying the patch f48ee562c095e552a30b8d9cc0566a267b410f8a/ec1f015ec0c6fd250a6564e8452f7bb3160b9cb1/14d17c78a4b1660c443bae9d38c814edea506f62 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-19764).(CVE-2025-38099)\n\nA vulnerability classified as problematic was found in Linux Kernel up to 6.16-rc1 (Operating System).The CWE definition for the vulnerability is CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.As an impact it is known to affect confidentiality, integrity, and availability.Upgrading to version 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.94, 6.12.34, 6.15.3 or 6.16-rc2 eliminates this vulnerability. Applying the patch 2790c4ec481be45a80948d059cd7c9a06bc37493/a1bf6a4e9264a685b0e642994031f9c5aad72414/110a47efcf23438ff8d31dbd9c854fae2a48bf98/f569984417a4e12c67366e69bdcb752970de921d/2a71924ca4af59ffc00f0444732b6cd54b153d0e/4b755305b2b0618e857fdadb499365b5f2e478d1/444ad445df5496a785705019268a8a84b84484bb/85a3e0ede38450ea3053b8c45d28cf55208409b8 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38108)\n\nA vulnerability was found in Linux Kernel up to 6.1.141/6.6.93/6.12.33/6.15.2/6.16-rc1 (Operating System) and classified as critical.Using CWE to declare the problem leads to CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.Impacted is confidentiality, integrity, and availability.Upgrading to version 6.1.142, 6.6.94, 6.12.34, 6.15.3 or 6.16-rc2 eliminates this vulnerability. Applying the patch 3c9aba9cbdf163e2654be9f82d43ff8a04273962/9f66b6531c2b4e996bb61720ee94adb4b2e8d1be/9df3e5e7f7e4653fd9802878cedc36defc5ef42d/32aa2fbe319f33b0318ec6f4fceb63879771a286/e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38118)\n\nA vulnerability classified as critical has been found in Linux Kernel up to 6.1.141/6.6.93/6.12.33/6.15.2 (Operating System).CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.This is going to have an impact on confidentiality, integrity, and availability.Upgrading to version 6.1.142, 6.6.94, 6.12.34, 6.15.3 or 6.16-rc1 eliminates this vulnerability. Applying the patch 6bf529ce84dccc0074dbc704e70aee4aa545057e/4e9e45746b861ebd54c03ef301da2cb8fc990536/19bd9cde38dd4ca1771aed7afba623e7f4247c8e/7eeb3df6f07a886bdfd52757ede127a59a8784dc/25be318324563c63cbd9cb53186203a08d2f83a1 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38142)\n\nA vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.15.2 (Operating System).Using CWE to declare the problem leads to CWE-129. The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.Impacted is confidentiality, integrity, and availability.Upgrading to version 5.10.239, 5.15.186, 6.1.142, 6.6.94, 6.12.34, 6.15.3 or 6.16-rc1 eliminates this vulnerability. Applying the patch 4b9a086eedc1fddae632310386098c12155e3d0a/ad17eb86d042d72a59fd184ad1adf34f5eb36843/f26fe7c3002516dd3c288f1012786df31f4d89e0/8ebcd311b4866ab911d1445ead08690e67f0c488/69541e58323ec3e3904e1fa87a6213961b1f52f4/3c1906a3d50cb94fd0a10e97a1c0a40c0f033cb7/0bdc924bfb319fb10d1113cbf091fc26fb7b1f99 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38146)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: core: Clear table_sz when rproc_shutdown\n\nThere is case as below could trigger kernel dump:\nUse U-Boot to start remote processor(rproc) with resource table\npublished to a fixed address by rproc. After Kernel boots up,\nstop the rproc, load a new firmware which doesn\u0026apos;t have resource table\n,and start rproc.\n\nWhen starting rproc with a firmware not have resource table,\n`memcpy(loaded_table, rproc-\u0026gt;cached_table, rproc-\u0026gt;table_sz)` will\ntrigger dump, because rproc-\u0026gt;cache_table is set to NULL during the last\nstop operation, but rproc-\u0026gt;table_sz is still valid.\n\nThis issue is found on i.MX8MP and i.MX9.\n\nDump as below:\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000000\nMem abort info:\n  ESR = 0x0000000096000004\n  EC = 0x25: DABT (current EL), IL = 32 bits\n  SET = 0, FnV = 0\n  EA = 0, S1PTW = 0\n  FSC = 0x04: level 0 translation fault\nData abort info:\n  ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n  CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n  GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\nuser pgtable: 4k pages, 48-bit VAs, pgdp=000000010af63000\n[0000000000000000] pgd=0000000000000000, p4d=0000000000000000\nInternal error: Oops: 0000000096000004 [#1] PREEMPT SMP\nModules linked in:\nCPU: 2 UID: 0 PID: 1060 Comm: sh Not tainted 6.14.0-rc7-next-20250317-dirty #38\nHardware name: NXP i.MX8MPlus EVK board (DT)\npstate: a0000005 (NzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : __pi_memcpy_generic+0x110/0x22c\nlr : rproc_start+0x88/0x1e0\nCall trace:\n __pi_memcpy_generic+0x110/0x22c (P)\n rproc_boot+0x198/0x57c\n state_store+0x40/0x104\n dev_attr_store+0x18/0x2c\n sysfs_kf_write+0x7c/0x94\n kernfs_fop_write_iter+0x120/0x1cc\n vfs_write+0x240/0x378\n ksys_write+0x70/0x108\n __arm64_sys_write+0x1c/0x28\n invoke_syscall+0x48/0x10c\n el0_svc_common.constprop.0+0xc0/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x30/0xcc\n el0t_64_sync_handler+0x10c/0x138\n el0t_64_sync+0x198/0x19c\n\nClear rproc-\u0026gt;table_sz to address the issue.(CVE-2025-38152)\n\nA vulnerability classified as problematic has been found in Linux Kernel up to 5.15.185/6.1.141/6.6.93/6.12.33/6.15.2 (Operating System).CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer.This is going to have an impact on confidentiality.Upgrading to version 5.15.186, 6.1.142, 6.6.94, 6.12.34, 6.15.3 or 6.16-rc1 eliminates this vulnerability. Applying the patch 1ee8ea6937d13b20f90ff35d71ccc03ba448182d/68a1037f0bac4de9a585aa9c879ef886109f3647/74e18211c2c89ab66c9546baa7408288db61aa0d/c13255389499275bc5489a0b5b7940ccea3aef04/9febcc8bded8be0d7efd8237fcef599b6d93b788/4c2c372de2e108319236203cce6de44d70ae15cd is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-19785).(CVE-2025-38159)\n\nA vulnerability was found in Linux Kernel up to 6.15.2 (Operating System). It has been rated as problematic.Impacted is confidentiality, integrity, and availability.Upgrading to version 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.94, 6.12.34, 6.15.3 or 6.16-rc1 eliminates this vulnerability. Applying the patch 49bc7bf38e42cfa642787e947f5721696ea73ac3/f1b743c1955151bd392539b739a3ad155296be13/6a324d77f7ea1a91d55c4b6ad970e3ac9ab6a20d/25f3776b58c1c45ad2e50ab4b263505b4d2378ca/a39cc43efc1bca74ed9d6cf9e60b995071f7d178/65b3f76592aed5a43c4d79375ac097acf975972b/ccc28c0397f75a3ec9539cceed9db014d7b73869/05872a167c2cab80ef186ef23cc34a6776a1a30c is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-19781).(CVE-2025-38163)\n\nA vulnerability was found in Linux Kernel up to 6.1.141/6.6.93/6.12.33/6.15.2 (Operating System). It has been classified as problematic.CWE is classifying the issue as CWE-345. The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.This is going to have an impact on confidentiality, integrity, and availability.Upgrading to version 6.1.142, 6.6.94, 6.12.34, 6.15.3 or 6.16-rc1 eliminates this vulnerability. Applying the patch de89368de3894a8db27caeb8fd902ba1c49f696a/43be952e885476dafb74aa832c0847b2f4f650c6/6103f9ba51a59afb5a0f32299c837377c5a5a693/c4a4786d93e99517d6f10ed56b9ffba4ce88d3b3/d3eaab3c70905c5467e5c4ea403053d67505adeb is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-19774).(CVE-2025-38170)\n\nA vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.6.94/6.12.34/6.15.3/6.16-rc2 (Operating System).This is going to have an impact on confidentiality, integrity, and availability.Upgrading to version 6.6.95, 6.12.35, 6.15.4 or 6.16-rc3 eliminates this vulnerability. Applying the patch 3162d8235c8c4d585525cee8a59d1c180940a968/0f8df5d6f25ac17c52a8bc6418e60a3e63130550/e2b2b7cf6368580114851cb3932f2ad9fbf23386/8c8472855884355caf3d8e0c50adf825f83454b2 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38182)\n\nA vulnerability was found in Linux Kernel (Operating System). It has been declared as problematic.The CWE definition for the vulnerability is CWE-252. The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.As an impact it is known to affect confidentiality, integrity, and availability.Upgrading to version 6.6.95, 6.12.35, 6.15.4 or 6.16-rc1 eliminates this vulnerability. Applying the patch b427d98d55217b53c88643579fbbd8a4c351a105/985f086f281b7bbb6644851e63af1a17ffff9277/b5c7397b7fd125203c60b59860c168ee92291272/ee084fa96123ede8b0563a1b5a9b23adc43cd50d is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38195)\n\nA vulnerability was found in Linux Kernel up to 6.16-rc2 (Operating System). It has been rated as critical.Using CWE to declare the problem leads to CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.Impacted is availability.Upgrading to version 5.10.239, 5.15.186, 6.1.142, 6.6.95, 6.12.35, 6.15.4 or 6.16-rc3 eliminates this vulnerability. Applying the patch 5e8c658acd1b7c186aeffa46bf08795e121f401a/07d7b8e7ef7d1f812a6211ed531947c56d09e95e/a7b477b64ef5e37cb08dd536ae07c46f9f28262e/f3b840fb1508a80cd8a0efb5c886ae1995a88b24/4d71f2c1e5263a9f042faa71d59515709869dc79/32d05e6cc3a7bf6c8f16f7b7ef8fe80eca0c233e/61ce04601e0d8265ec6d2ffa6df5a7e1bce64854 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38197)\n\nA vulnerability was found in Linux Kernel up to 6.1.141/6.6.94/6.12.34/6.15.3 (Operating System). It has been declared as problematic.As an impact it is known to affect confidentiality, integrity, and availability.Upgrading to version 6.1.142, 6.6.95, 6.12.35, 6.15.4 or 6.16-rc1 eliminates this vulnerability. Applying the patch 2f8c69a72e8ad87b36b8052f789da3cc2b2e186c/7bf4461f1c97207fda757014690d55a447ce859f/2d834477bbc1e8b8a59ff8b0c081529d6bed7b22/b522d4d334f206284b1a44b0b0b2f99fd443b39b/d4965578267e2e81f67c86e2608481e77e9c8569 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38202)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cxusb: no longer judge rbuf when the write fails\n\nsyzbot reported a uninit-value in cxusb_i2c_xfer. [1]\n\nOnly when the write operation of usb_bulk_msg() in dvb_usb_generic_rw()\nsucceeds and rlen is greater than 0, the read operation of usb_bulk_msg()\nwill be executed to read rlen bytes of data from the dvb device into the\nrbuf.\n\nIn this case, although rlen is 1, the write operation failed which resulted\nin the dvb read operation not being executed, and ultimately variable i was\nnot initialized.\n\n[1]\nBUG: KMSAN: uninit-value in cxusb_gpio_tuner drivers/media/usb/dvb-usb/cxusb.c:124 [inline]\nBUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x153a/0x1a60 drivers/media/usb/dvb-usb/cxusb.c:196\n cxusb_gpio_tuner drivers/media/usb/dvb-usb/cxusb.c:124 [inline]\n cxusb_i2c_xfer+0x153a/0x1a60 drivers/media/usb/dvb-usb/cxusb.c:196\n __i2c_transfer+0xe25/0x3150 drivers/i2c/i2c-core-base.c:-1\n i2c_transfer+0x317/0x4a0 drivers/i2c/i2c-core-base.c:2315\n i2c_transfer_buffer_flags+0x125/0x1e0 drivers/i2c/i2c-core-base.c:2343\n i2c_master_send include/linux/i2c.h:109 [inline]\n i2cdev_write+0x210/0x280 drivers/i2c/i2c-dev.c:183\n do_loop_readv_writev fs/read_write.c:848 [inline]\n vfs_writev+0x963/0x14e0 fs/read_write.c:1057\n do_writev+0x247/0x5c0 fs/read_write.c:1101\n __do_sys_writev fs/read_write.c:1169 [inline]\n __se_sys_writev fs/read_write.c:1166 [inline]\n __x64_sys_writev+0x98/0xe0 fs/read_write.c:1166\n x64_sys_call+0x2229/0x3c80 arch/x86/include/generated/asm/syscalls_64.h:21\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f(CVE-2025-38229)\n\nA vulnerability was found in Linux Kernel up to 6.15.2/fc2778c42f99c7de52fc004157b3c3ee4dcc208a (Operating System). It has been rated as problematic.Impacted is confidentiality, integrity, and availability.Upgrading to version 6.15.3 or 6.16-rc1 eliminates this vulnerability. Applying the patch ac49b7560b4b08b1e4043a29214cc7ad77644c00/e2d2115e56c4a02377189bfc3a9a7933552a7b0f is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38279)\n\nA vulnerability, which was classified as problematic, was found in Linux Kernel (Operating System).CWE is classifying the issue as CWE-74. The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.This is going to have an impact on confidentiality, integrity, and availability.Upgrading to version 5.15.186, 6.1.142, 6.6.94, 6.12.34, 6.15.3 or 6.16-rc1 eliminates this vulnerability. Applying the patch e7fb4ebee6e900899d2b2e5852c3e2eafcbcad66/ef92b96530d1731d9ac167bc7c193c683cd78fff/6f639c25bfad17d9fd7379ab91ff9678ea9aac85/2bc6dffb4b72d53d6a6ada510269bf548c3f7ae0/0b9bb52796b239de6792d0d68cdc6eb505ebff96/86bc9c742426a16b52a10ef61f5b721aecca2344 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38280)\n\nA vulnerability was found in Linux Kernel up to 6.16-rc2 (Operating System). It has been declared as problematic.The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer.As an impact it is known to affect confidentiality.Upgrading to version 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.95, 6.12.35, 6.15.4 or 6.16-rc3 eliminates this vulnerability. Applying the patch 64773b3ea09235168a549a195cba43bb867c4a17/67abac27d806e8f9d4226ec1528540cf73af673a/92750bfe7b0d8dbcaf578c091a65eda1c5f9ad38/01f91d415a8375d85e0c7d3615cd4a168308bb7c/21da6d3561f373898349ca7167c9811c020da695/22f935bc86bdfbde04009f05eee191d220cd8c89/422e565b7889ebfd9c8705a3fc786642afe61fca/39dfc971e42d886e7df01371cd1bef505076d84c is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-20926).(CVE-2025-38320)\n\nA vulnerability was found in Linux Kernel up to 6.15.3/6.16-rc2 (Operating System). It has been rated as critical.Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use.Impacted is availability.Upgrading to version 6.15.4 or 6.16-rc3 eliminates this vulnerability. Applying the patch a85cc69acdcb05f8cd226b8ea0778b8e2e887e6f/b0823d5fbacb1c551d793cbfe7af24e0d1fa45ed is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38322)\n\nA vulnerability was found in Linux Kernel up to 6.15.3 (Operating System). It has been declared as critical.The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.As an impact it is known to affect confidentiality, integrity, and availability.Upgrading to version 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.95, 6.12.35, 6.15.4 or 6.16-rc1 eliminates this vulnerability. Applying the patch d064c68781c19f378af1ae741d9132d35d24b2bb/8690cd3258455bbae64f809e1d3ee0f043661c71/6805582abb720681dd1c87ff677f155dcf4e86c9/03a162933c4a03b9f1a84f7d8482903c7e1e11bb/83a692a9792aa86249d68a8ac0b9d55ecdd255fa/8e89c17dc8970c5f71a3a991f5724d4c8de42d8c/f78a786ad9a5443a29eef4dae60cde85b7375129/f914b52c379c12288b7623bb814d0508dbe7481d is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38346)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix slab-out-of-bounds read in ea_get()\n\nDuring the \u0026quot;size_check\u0026quot; label in ea_get(), the code checks if the extended\nattribute list (xattr) size matches ea_size. If not, it logs\n\u0026quot;ea_get: invalid extended attribute\u0026quot; and calls print_hex_dump().\n\nHere, EALIST_SIZE(ea_buf-\u0026gt;xattr) returns 4110417968, which exceeds\nINT_MAX (2,147,483,647). Then ea_size is clamped:\n\n\tint size = clamp_t(int, ea_size, 0, EALIST_SIZE(ea_buf-\u0026gt;xattr));\n\nAlthough clamp_t aims to bound ea_size between 0 and 4110417968, the upper\nlimit is treated as an int, causing an overflow above 2^31 - 1. This leads\n\u0026quot;size\u0026quot; to wrap around and become negative (-184549328).\n\nThe \u0026quot;size\u0026quot; is then passed to print_hex_dump() (called \u0026quot;len\u0026quot; in\nprint_hex_dump()), it is passed as type size_t (an unsigned\ntype), this is then stored inside a variable called\n\u0026quot;int remaining\u0026quot;, which is then assigned to \u0026quot;int linelen\u0026quot; which\nis then passed to hex_dump_to_buffer(). In print_hex_dump()\nthe for loop, iterates through 0 to len-1, where len is\n18446744073525002176, calling hex_dump_to_buffer()\non each iteration:\n\n\tfor (i = 0; i \u0026lt; len; i += rowsize) {\n\t\tlinelen = min(remaining, rowsize);\n\t\tremaining -= rowsize;\n\n\t\thex_dump_to_buffer(ptr + i, linelen, rowsize, groupsize,\n\t\t\t\t   linebuf, sizeof(linebuf), ascii);\n\n\t\t...\n\t}\n\nThe expected stopping condition (i \u0026lt; len) is effectively broken\nsince len is corrupted and very large. This eventually leads to\nthe \u0026quot;ptr+i\u0026quot; being passed to hex_dump_to_buffer() to get closer\nto the end of the actual bounds of \u0026quot;ptr\u0026quot;, eventually an out of\nbounds access is done in hex_dump_to_buffer() in the following\nfor loop:\n\n\tfor (j = 0; j \u0026lt; len; j++) {\n\t\t\tif (linebuflen \u0026lt; lx + 2)\n\t\t\t\tgoto overflow2;\n\t\t\tch = ptr[j];\n\t\t...\n\t}\n\nTo fix this we should validate \u0026quot;EALIST_SIZE(ea_buf-\u0026gt;xattr)\u0026quot;\nbefore it is utilised.(CVE-2025-39735)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nobjtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq()\n\nIf speed_hz \u0026lt; AMD_SPI_MIN_HZ, amd_set_spi_freq() iterates over the\nentire amd_spi_freq array without breaking out early, causing \u0026apos;i\u0026apos; to go\nbeyond the array bounds.\n\nFix that by stopping the loop when it gets to the last entry, so the low\nspeed_hz value gets clamped up to AMD_SPI_MIN_HZ.\n\nFixes the following warning with an UBSAN kernel:\n\n  drivers/spi/spi-amd.o: error: objtool: amd_set_spi_freq() falls through to next function amd_spi_set_opcode()(CVE-2025-40014)","status":"published","published":"2025-07-18T11:08:57Z","modified":"2026-08-18T01:18:55.065198941Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"UBUNTU-CVE-2024-47732","description":"In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix potential use after free bug The free_device_compression_mode(iaa_device, device_mode) function frees \"device_mode\" but it iss passed to iaa_compression_modes[i]-\u003efree() a few lines later resulting in a use after free. The good news is that, so far as I can tell, nothing implements the -\u003efree() function and the use after free happens in dead code.  But, with this fix, when something does implement it, we'll be ready.  :)","status":"published","published":"2024-10-21T13:15:00Z","modified":"2026-08-06T03:08:29.376778613Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:06.818511Z"},{"id":"openSUSE-SU-2024:14500-1","title":"kernel-devel-6.11.8-1.1 on GA media","description":"These are all security issues fixed in the kernel-devel-6.11.8-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-11-15T00:00:00Z","modified":"2026-02-04T03:05:15.769912Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14705-1","title":"kernel-devel-longterm-6.12.11-1.1 on GA media","description":"These are all security issues fixed in the kernel-devel-longterm-6.12.11-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-28T00:00:00Z","modified":"2026-02-04T03:17:00.28177Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2024:3984-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).\n- CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).\n- CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command  (bsc#1228620).\n- CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).\n- CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).\n- CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).\n- CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).\n- CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)\n- CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).\n- CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).\n- CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).\n- CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).\n- CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).\n- CVE-2024-46813: drm/amd/display: Check link_index before accessing dc-\u003elinks (bsc#1231191).\n- CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).\n- CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).\n- CVE-2024-46828: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1231114).\n- CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).\n- CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).\n- CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).\n- CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).\n- CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100).\n- CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).\n- CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).\n- CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).\n- CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (bsc#1231435).\n- CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (bsc#1231436).\n- CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).\n- CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442).\n- CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).\n- CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).\n- CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).\n- CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003).\n- CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).\n- CVE-2024-47704: drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944).\n- CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872).\n- CVE-2024-47706: block, bfq: fix possible UAF for bfqq-\u003ebic with merge chain (bsc#1231942).\n- CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).\n- CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049).\n- CVE-2024-47727: x86/tdx: Fix 'in-kernel MMIO' check (bsc#1232116).\n- CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).\n- CVE-2024-47731: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (bsc#1232117).\n- CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).\n- CVE-2024-47741: btrfs: fix race setting file private on concurrent lseek using same fd (bsc#1231869).\n- CVE-2024-47745: mm: split critical region in remap_file_pages() and invoke LSMs in between (bsc#1232135).\n- CVE-2024-47747: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (bsc#1232145).\n- CVE-2024-47752: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning (bsc#1232130).\n- CVE-2024-47753: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning (bsc#1231868).\n- CVE-2024-47754: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning (bsc#1232131).\n- CVE-2024-49852: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (bsc#1232819).\n- CVE-2024-49864: rxrpc: Fix a race between socket set up and I/O thread creation (bsc#1232256).\n- CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount (bsc#1232262).\n- CVE-2024-49881: ext4: update orig_path in ext4_find_extent() (bsc#1232201).\n- CVE-2024-49882: ext4: fix double brelse() the buffer of the extents path (bsc#1232200).\n- CVE-2024-49883: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199).\n- CVE-2024-49888: bpf: Fix a sdiv overflow issue (bsc#1232208).\n- CVE-2024-49890: drm/amd/pm: ensure the fw_info is not null before using it (bsc#1232217).\n- CVE-2024-49892: drm/amd/display: Initialize get_bytes_per_element's default to 1 (bsc#1232220).\n- CVE-2024-49894: drm/amd/display: Fix index out of bounds in degamma hardware format translation (bsc#1232354).\n- CVE-2024-49895: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (bsc#1232352).\n- CVE-2024-49896: drm/amd/display: Check stream before comparing them (bsc#1232221).\n- CVE-2024-49897: drm/amd/display: Check phantom_stream before it is used (bsc#1232355).\n- CVE-2024-49898: drm/amd/display: Check null-initialized variables (bsc#1232222).\n- CVE-2024-49901: drm/msm/adreno: Assign msm_gpu-\u003epdev earlier to avoid nullptrs (bsc#1232305).\n- CVE-2024-49906: drm/amd/display: Check null pointer before try to access it (bsc#1232332).\n- CVE-2024-49907: drm/amd/display: Check null pointers before using dc-\u003eclk_mgr (bsc#1232334).\n- CVE-2024-49908: drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (bsc#1232335).\n- CVE-2024-49909: drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func (bsc#1232337).\n- CVE-2024-49913: drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (bsc#1232307).\n- CVE-2024-49914: drm/amd/display: Add null check for pipe_ctx-\u003eplane_state in (bsc#1232369).\n- CVE-2024-49917: drm/amd/display: Add NULL check for clk_mgr and clk_mgr-\u003efuncs in dcn30_init_hw (bsc#1231965).\n- CVE-2024-49918: drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer (bsc#1231967).\n- CVE-2024-49919: drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer (bsc#1231968).\n- CVE-2024-49920: drm/amd/display: Check null pointers before multiple uses (bsc#1232313).\n- CVE-2024-49936: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424).\n- CVE-2024-49946: ppp: do not assume bh is held in ppp_channel_bridge_input() (bsc#1232164).\n- CVE-2024-49949: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (bsc#1232160).\n- CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).\n- CVE-2024-49953: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice (bsc#1232156).\n- CVE-2024-49954: static_call: Replace pointless WARN_ON() in static_call_module_notify() (bsc#1232155).\n- CVE-2024-49958: ocfs2: reserve space for inline xattr before attaching reflink tree (bsc#1232151).\n- CVE-2024-49959: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (bsc#1232149).\n- CVE-2024-49960: ext4: fix timer use-after-free on failed mount (bsc#1232395).\n- CVE-2024-49967: ext4: no need to continue when the number of entries is 1 (bsc#1232140).\n- CVE-2024-49969: drm/amd/display: Fix index out of bounds in DCN30 color transformation (bsc#1232519).\n- CVE-2024-49972: drm/amd/display: Deallocate DML memory if allocation fails (bsc#1232315).\n- CVE-2024-49973: r8169: add tally counter fields added with RTL8125 (bsc#1232105).\n- CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383).\n- CVE-2024-49986: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors (bsc#1232093).\n- CVE-2024-49991: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer (bsc#1232282).\n- CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (bsc#1232316).\n- CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).\n- CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).\n- CVE-2024-50000: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (bsc#1232085).\n- CVE-2024-50001: net/mlx5: Fix error path in multi-packet WQE transmit (bsc#1232084).\n- CVE-2024-50002: static_call: Handle module init failure correctly in static_call_del_module() (bsc#1232083).\n- CVE-2024-50015: ext4: dax: fix overflowing extents beyond inode size when partially writing (bsc#1232079).\n- CVE-2024-50020: ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() (bsc#1231989).\n- CVE-2024-50021: ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() (bsc#1231957).\n- CVE-2024-50022: device-dax: correct pgoff align in dax_set_mapping() (bsc#1231956).\n- CVE-2024-50024: net: Fix an unsafe loop on the list (bsc#1231954).\n- CVE-2024-50027: thermal: core: Free tzp copy along with the thermal zone (bsc#1231951).\n- CVE-2024-50028: thermal: core: Reference count the zone in thermal_zone_get_by_id() (bsc#1231950).\n- CVE-2024-50033: slip: make slhc_remember() more robust against malicious packets (bsc#1231914).\n- CVE-2024-50035: ppp: fix ppp_async_encode() illegal access (bsc#1232392).\n- CVE-2024-50040: igb: Do not bring the device up after non-fatal error (bsc#1231908).\n- CVE-2024-50041: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash (bsc#1231907).\n- CVE-2024-50042: ice: Fix increasing MSI-X on VF (bsc#1231906).\n- CVE-2024-50045: netfilter: br_netfilter: fix panic with metadata_dst skb (bsc#1231903).\n- CVE-2024-50046: kabi fix for NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (bsc#1231902).\n- CVE-2024-50047: smb: client: fix UAF in async decryption (bsc#1232418).\n- CVE-2024-50059: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (bsc#1232345).\n- CVE-2024-50060: io_uring: check if we need to reschedule during overflow flush (bsc#1232417).\n- CVE-2024-50063: kABI: bpf: struct bpf_map kABI workaround (bsc#1232435).\n- CVE-2024-50064: zram: do not free statically defined names (bsc#1231901).\n- CVE-2024-50080: ublk: do not allow user copy for unprivileged device (bsc#1232502).\n- CVE-2024-50081: blk-mq: setup queue -\u003etag_set before initializing hctx (bsc#1232501).\n\nThe following non-security bugs were fixed:\n\n- 9p: explicitly deny setlease attempts (git-fixes).\n- ACPI: CPPC: Add support for setting EPP register in FFH (stable-fixes).\n- ACPI: CPPC: Make rmw_lock a raw_spin_lock (git-fixes).\n- ACPI: EC: Do not release locks during operation region accesses (stable-fixes).\n- ACPI: PAD: fix crash in exit_round_robin() (stable-fixes).\n- ACPI: PRM: Clean up guid type in struct prm_handler_info (git-fixes).\n- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (git-fixes).\n- ACPI: battery: Fix possible crash when unregistering a battery hook (git-fixes).\n- ACPI: battery: Simplify battery hook locking (stable-fixes).\n- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (stable-fixes).\n- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add another DMI match for the TongFang GMxXGxx (stable-fixes).\n- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (stable-fixes).\n- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (stable-fixes).\n- ACPICA: iasl: handle empty connection_node (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: cleanup sdw_intel_scan_controller (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: fetch fwnode once in sdw_intel_scan_controller() (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: simplify sdw-master-count property read (stable-fixes).\n- ALSA: Reorganize kerneldoc parameter names (stable-fixes).\n- ALSA: asihpi: Fix potential OOB array access (stable-fixes).\n- ALSA: core: add isascii() check to card ID generator (stable-fixes).\n- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (git-fixes).\n- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (stable-fixes).\n- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (git-fixes).\n- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (git-fixes).\n- ALSA: hda/conexant: fix some typos (stable-fixes).\n- ALSA: hda/cs8409: Fix possible NULL dereference (git-fixes).\n- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs (bsc#1219803).\n- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (stable-fixes).\n- ALSA: hda/realtek: Enable mic on Vaio VJFH52 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 (stable-fixes).\n- ALSA: hda/realtek: Fix the push button function for the ALC257 (git-fixes).\n- ALSA: hda/realtek: Limit internal Mic boost on Dell platform (stable-fixes).\n- ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init (stable-fixes).\n- ALSA: hda/realtek: Update default depop procedure (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8 (stable-fixes).\n- ALSA: hda/realtek: tas2781: Fix ROG ALLY X audio (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects (stable-fixes).\n- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE (git-fixes).\n- ALSA: hda: Sound support for HP Spectre x360 16 inch model 2024 (stable-fixes).\n- ALSA: hda: tas2781: Fix missing setup at runtime PM (bsc#1230132).\n- ALSA: hdsp: Break infinite MIDI input flush loop (stable-fixes).\n- ALSA: line6: add hw monitor volume control to POD HD500X (stable-fixes).\n- ALSA: line6: update contact information (stable-fixes).\n- ALSA: mixer_oss: Remove some incorrect kfree_const() usages (git-fixes).\n- ALSA: silence integer wrapping warning (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET (stable-fixes).\n- ALSA: usb-audio: Add input value sanity checks for standard types (stable-fixes).\n- ALSA: usb-audio: Add logitech Audio profile quirk (stable-fixes).\n- ALSA: usb-audio: Add native DSD support for Luxman D-08u (stable-fixes).\n- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1232768).\n- ALSA: usb-audio: Add quirks for Dell WD19 dock (stable-fixes).\n- ALSA: usb-audio: Define macros for quirk table entries (stable-fixes).\n- ALSA: usb-audio: Replace complex quirk lines with macros (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (stable-fixes).\n- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (git-fixes).\n- ASoC: Intel: sst: Support LPE0F28 ACPI HID (stable-fixes).\n- ASoC: amd: yc: Add quirk for HP Dragonfly pro one (stable-fixes).\n- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized (git-fixes).\n- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (stable-fixes).\n- ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work() (stable-fixes).\n- ASoC: codecs: wsa883x: Handle reading version failure (stable-fixes).\n- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (git-fixes).\n- ASoC: dapm: fix bounds checker error in dapm_widget_list_create (git-fixes).\n- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (stable-fixes).\n- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m (git-fixes).\n- ASoC: max98388: Fix missing increment of variable slot_found (git-fixes).\n- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (git-fixes).\n- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (stable-fixes).\n- ASoC: tas2781: Use of_property_read_reg() (stable-fixes).\n- Bluetooth: Call iso_exit() on module unload (git-fixes).\n- Bluetooth: ISO: Fix multiple init when debugfs is disabled (git-fixes).\n- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (git-fixes).\n- Bluetooth: Remove debugfs directory on module init failure (git-fixes).\n- Bluetooth: bnep: fix wild-memory-access in proto_unregister (git-fixes).\n- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 (stable-fixes).\n- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (git-fixes).\n- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (git-fixes).\n- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (git-fixes).\n- HID: Ignore battery for all ELAN I2C-HID devices (stable-fixes).\n- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (git-fixes).\n- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk (stable-fixes).\n- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (stable-fixes).\n- HID: multitouch: Add support for lenovo Y9000P Touchpad (stable-fixes).\n- HID: plantronics: Workaround for an unexcepted opposite volume key (stable-fixes).\n- Input: adp5589-keys - fix NULL pointer dereference (git-fixes).\n- Input: adp5589-keys - fix adp5589_gpio_get_value() (git-fixes).\n- Input: edt-ft5x06 - fix regmap leak when probe fails (git-fixes).\n- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (stable-fixes).\n- KVM: Fix coalesced_mmio_has_room() to avoid premature userspace exit (git-fixes).\n- KVM: SVM: Disallow guest from changing userspace's MSR_AMD64_DE_CFG value (git-fixes).\n- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock (git-fixes).\n- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled (git-fixes).\n- KVM: VMX: Set PFERR_GUEST_{FINAL,PAGE}_MASK if and only if the GVA is valid (git-fixes).\n- KVM: Write the per-page 'segment' when clearing (part of) a guest page (git-fixes).\n- KVM: s390: Change virtual to physical address access in diag 0x258 handler (git-fixes bsc#1232626).\n- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (git-fixes bsc#1231276).\n- KVM: s390: gaccess: Check if guest address is in memslot (git-fixes bsc#1232623).\n- KVM: x86/mmu: Skip emulation on page fault iff 1+ SPs were unprotected (git-fixes).\n- KVM: x86/mmu: Trigger unprotect logic only on write-protection page faults (git-fixes).\n- KVM: x86: Dedup fastpath MSR post-handling logic (git-fixes).\n- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits (git-fixes).\n- KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (git-fixes).\n- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode() (git-fixes).\n- KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (git-fixes).\n- KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- NFS: Avoid unnecessary rescanning of the per-server delegation list (git-fixes).\n- NFSD: Fix NFSv4's PUTPUBFH operation (git-fixes).\n- NFSD: Mark filecache 'down' if init fails (git-fixes).\n- NFSv3: only use NFS timeout for MOUNT when protocols are compatible (bsc#1231016).\n- NFSv4: Fix clearing of layout segments in layoutreturn (git-fixes).\n- PCI: Add ACS quirk for Qualcomm SA8775P (stable-fixes).\n- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip (stable-fixes).\n- PCI: Fix pci_enable_acs() support for the ACS quirks (bsc#1229019).\n- PCI: Mark Creative Labs EMU20k2 INTx masking as broken (stable-fixes).\n- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix (jsc#PED-10559).\n- RAS/AMD/ATL: Expand helpers for adding and removing base and hole (jsc#PED-10559).\n- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization (jsc#PED-10559).\n- RAS/AMD/ATL: Read DRAM hole base early (jsc#PED-10559).\n- RAS/AMD/ATL: Validate address map when information is gathered (jsc#PED-10559).\n- RDMA/bnxt_re: Add a check for memory allocation (git-fixes)\n- RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (git-fixes)\n- RDMA/bnxt_re: Change the sequence of updating the CQ toggle value (git-fixes)\n- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (git-fixes)\n- RDMA/bnxt_re: Fix a possible memory leak (git-fixes)\n- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (git-fixes)\n- RDMA/bnxt_re: Fix incorrect dereference of srq in async event (git-fixes)\n- RDMA/bnxt_re: Fix out of bound check (git-fixes)\n- RDMA/bnxt_re: Fix the GID table length (git-fixes)\n- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters (git-fixes)\n- RDMA/bnxt_re: Fix the usage of control path spin locks (git-fixes)\n- RDMA/bnxt_re: Return more meaningful error (git-fixes)\n- RDMA/bnxt_re: synchronize the qp-handle table array (git-fixes)\n- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)\n- RDMA/cxgb4: Dump vendor specific QP details (git-fixes)\n- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (git-fixes)\n- RDMA/irdma: Fix misspelling of 'accept*' (git-fixes)\n- RDMA/mad: Improve handling of timed out WRs of mad agent (git-fixes)\n- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (git-fixes).\n- RDMA/mana_ib: use the correct page table index based on hardware page size (git-fixes).\n- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults (git-fixes)\n- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (git-fixes)\n- RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled (git-fixes).\n- RDMA/rtrs-srv: Avoid null pointer deref during path establishment (git-fixes)\n- RDMA/srpt: Make slab cache names unique (git-fixes)\n- SUNRPC: Fix integer overflow in decode_rc_list() (git-fixes).\n- SUNRPC: Fixup gss_status tracepoint error output (git-fixes).\n- SUNRPC: clnt.c: Remove misleading comment (git-fixes).\n- USB: appledisplay: close race between probe and completion handler (git-fixes).\n- USB: misc: cypress_cy7c63: check for short transfer (git-fixes).\n- USB: misc: yurex: fix race between read and write (git-fixes).\n- USB: serial: option: add Telit FN920C04 MBIM compositions (stable-fixes).\n- USB: serial: option: add support for Quectel EG916Q-GL (stable-fixes).\n- Update config files: Enable NFSD_V2 (bsc#1230914)\n- Use pahole -j1 option for reproducible builds (bsc#1230414 bsc#1229450).\n- accel/qaic: Fix the for loop used to walk SG table (git-fixes).\n- add bug reference for a mana change (bsc#1229769).\n- add bug references to existing mana changes (bsc#1232033, bsc#1232034, bsc#1232036).\n- arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (git-fixes)\n- arm64: cputype: Add Neoverse-N3 definitions (git-fixes)\n- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (git-fixes).\n- arm64: errata: Expand speculative SSBS workaround once more (git-fixes)\n- arm64: esr: Define ESR_ELx_EC_* constants as UL (git-fixes)\n- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS (git-fixes).\n- arm64: probes: Fix simulate_ldr*_literal() (git-fixes)\n- arm64: probes: Fix uprobes for big-endian kernels (git-fixes)\n- arm64: probes: Remove broken LDR (literal) uprobe support (git-fixes)\n- ata: libata: Set DID_TIME_OUT for commands that actually timed out (git-fixes).\n- ata: libata: avoid superfluous disk spin down + spin up during hibernation (git-fixes).\n- audit: do not WARN_ON_ONCE(!current-\u003emm) in audit_exe_compare() (git-fixes).\n- audit: do not take task_lock() in audit_exe_compare() code path (git-fixes).\n- block: print symbolic error name instead of error code (bsc#1231872).\n- block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (bsc#1229677).\n- bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response (git-fixes).\n- bnxt_en: Fix error recovery for 5760X (P7) chips (git-fixes).\n- bnxt_en: Fix the PCI-AER routines (git-fixes).\n- bnxt_en: Restore PTP tx_avail count in case of skb_pad() error (git-fixes).\n- bnxt_en: refactor reset close code (git-fixes).\n- bpf, lsm: Add disabled BPF LSM hook list (git-fixes).\n- bpf, net: Fix a potential race in do_sock_getsockopt() (git-fixes).\n- bpf, verifier: Correct tail_call_reachable for bpf prog (git-fixes).\n- bpf, x64: Remove tail call detection (git-fixes).\n- bpf,perf: Fix perf_event_detach_bpf_prog error handling (git-fixes).\n- bpf: Fail verification for sign-extension of packet data/data_end/data_meta (git-fixes).\n- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (git-fixes).\n- bpf: Fix error message on kfunc arg type mismatch (git-fixes).\n- bpf: Fix helper writes to read-only maps (git-fixes).\n- bpf: Fix tailcall cases in test_bpf (git-fixes).\n- bpf: Fix truncation bug in coerce_reg_to_size_sx() (git-fixes).\n- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types (git-fixes).\n- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers (git-fixes).\n- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (git-fixes).\n- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos (git-fixes).\n- btf, scripts: rust: drop is_rust_module.sh (bsc#1230414 bsc#1229450).\n- btrfs: send: fix invalid clone operation for file that got its size decreased (git-fixes).\n- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode (stable-fixes).\n- ceph: fix cap ref leak via netfs init_request (bsc#1231384).\n- clk: bcm: bcm53573: fix OF node leak in init (stable-fixes).\n- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (stable-fixes).\n- comedi: ni_routing: tools: Check when the file could not be opened (stable-fixes).\n- config: Disable LAM on x86 (bsc#1217845)\n- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems (git-fixes).\n- crypto: hisilicon/qm - flush all work before driver removed (bsc#1232075)\n- crypto: octeontx - Fix authenc setkey (stable-fixes).\n- crypto: octeontx* - Select CRYPTO_AUTHENC (git-fixes).\n- crypto: octeontx2 - Fix authenc setkey (stable-fixes).\n- crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTO_SIMD and re-enable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632)\n- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Register modules as SIMD (bsc#1230501 ltc#208632).\n- cxgb4: Properly lock TX queue for the selftest (git-fixes).\n- cxgb4: add forgotten u64 ivlan cast before shift (git-fixes).\n- cxgb4: unnecessary check for 0 in the free_sge_txq_uld() function (git-fixes).\n- dcache: keep dentry_hashtable or d_hash_shift even when not used (git-fixes).\n- debugfs: fix automount d_fsdata usage (git-fixes).\n- devlink: Fix command annotation documentation (git-fixes).\n- dmaengine: sh: rz-dmac: handle configs where one address is zero (git-fixes).\n- dmaengine: ti: k3-udma: Set EOP for all TRs in cyclic BCDMA transfer (git-fixes).\n- driver core: bus: Fix double free in driver API bus_register() (stable-fixes).\n- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (stable-fixes).\n- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring (git-fixes).\n- drm/amd/display: Add HDMI DSC native YCbCr422 support (stable-fixes).\n- drm/amd/display: Add disable timeout option (bsc#1231435)\n- drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944)\n- drm/amd/display: Check null pointer before dereferencing se (stable-fixes).\n- drm/amd/display: Clean up dsc blocks in accelerated mode (stable-fixes).\n- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (stable-fixes).\n- drm/amd/display: Remove a redundant check in authenticated_dp (stable-fixes).\n- drm/amd/display: Revert 'Check HDCP returned status' (stable-fixes).\n- drm/amd/display: Round calculated vtotal (stable-fixes).\n- drm/amd/display: Skip to enable dsc if it has been off (stable-fixes).\n- drm/amd/display: Validate backlight caps are sane (stable-fixes).\n- drm/amd/pm: Vangogh: Fix kernel memory out of bounds write (git-fixes).\n- drm/amd: Guard against bad data for ATIF ACPI method (git-fixes).\n- drm/amdgpu/swsmu: Only force workload setup on init (git-fixes).\n- drm/amdgpu/vcn: enable AV1 on both instances (stable-fixes).\n- drm/i915/gem: fix bitwise and logical AND mixup (git-fixes).\n- drm/i915/hdcp: fix connector refcounting (git-fixes).\n- drm/mediatek: Fix get efuse issue for MT8188 DPTX (git-fixes).\n- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds() (git-fixes).\n- drm/msm/dpu: do not always program merge_3d block (git-fixes).\n- drm/msm/dpu: make sure phys resources are properly initialized (git-fixes).\n- drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check (git-fixes).\n- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (git-fixes).\n- drm/msm/dsi: improve/fix dsc pclk calculation (git-fixes).\n- drm/msm: Allocate memory for disp snapshot with kvzalloc() (git-fixes).\n- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (git-fixes).\n- drm/radeon: Fix encoder-\u003epossible_clones (git-fixes).\n- drm/sched: Add locking to drm_sched_entity_modify_sched (git-fixes).\n- drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job (git-fixes).\n- drm/v3d: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (stable-fixes).\n- drm/vc4: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vmwgfx: Handle surface check failure correctly (git-fixes).\n- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS (git-fixes).\n- e1000e: Fix S0ix residency on corporate systems (git-fixes).\n- e1000e: change I219 (19) devices to ADP (git-fixes).\n- e1000e: fix force smbus during suspend flow (git-fixes).\n- e1000e: move force SMBUS near the end of enable_ulp function (git-fixes).\n- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (stable-fixes).\n- eth: bnxt: fix counting packets discarded due to OOM and netpoll (git-fixes).\n- ext4: do not track ranges in fast_commit if inode has inlined data (bsc#1231635).\n- ext4: fix fast commit inode enqueueing during a full journal commit (bsc#1231636).\n- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible() (bsc#1231637).\n- ext4: fix possible tid_t sequence overflows (bsc#1231634).\n- ext4: fix slab-use-after-free in ext4_split_extent_at() (bsc#1232201)\n- ext4: mark fc as ineligible using an handle in ext4_xattr_set() (bsc#1231640).\n- ext4: use handle to mark fc as ineligible in __track_dentry_update() (bsc#1231639).\n- fat: fix uninitialized variable (git-fixes).\n- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (stable-fixes).\n- fbdev: sisfb: Fix strbuf array overflow (stable-fixes).\n- fgraph: Change the name of cpuhp state to 'fgraph:online' (git-fixes).\n- fgraph: Fix missing unlock in register_ftrace_graph() (git-fixes).\n- fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks (git-fixes).\n- filemap: remove use of wait bookmarks (bsc#1224088).\n- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (git-fixes).\n- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (git-fixes).\n- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (git-fixes).\n- fs/9p: drop inodes immediately on non-.L too (git-fixes).\n- fs/9p: fix the cache always being enabled on files with qid flags (git-fixes).\n- genirq/msi: Fix off-by-one error in msi_domain_alloc() (git-fixes).\n- gpio: aspeed: Add the flush write to ensure the write complete (git-fixes).\n- gpio: aspeed: Use devm_clk api to manage clock source (git-fixes).\n- gpio: davinci: fix lazy disable (git-fixes).\n- gve: Fix XDP TX completion handling when counters overflow (git-fixes).\n- gve: Fix an edge case for TSO skb validity check (git-fixes).\n- gve: ignore nonrelevant GSO type bits when processing TSO headers (git-fixes).\n- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (git-fixes).\n- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (git-fixes).\n- hwmon: (adm9240) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (adt7470) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (max16065) Fix alarm attributes (git-fixes).\n- hwmon: (max16065) Remove use of i2c_match_id() (stable-fixes).\n- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list (stable-fixes).\n- hwmon: (tmp513) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature (git-fixes).\n- i2c: core: Setup i2c_adapter runtime-pm before calling device_add() (git-fixes).\n- i2c: core: fix lockdep warning for sparsely nested adapter chain (git-fixes).\n- i2c: cpm: Remove linux,i2c-index conversion from be32 (git-fixes).\n- i2c: exynos5: Calculate t_scl_l, t_scl_h according to i2c spec (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell Precision 3540 (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell XPS 15 7590 (git-fixes).\n- i2c: i801: Use a different adapter-name for IDF adapters (stable-fixes).\n- i2c: i801: add helper i801_restore_regs (git-fixes).\n- i2c: ismt: kill transaction in hardware on timeout (git-fixes).\n- i2c: ocores: Move system PM hooks to the NOIRQ phase (git-fixes).\n- i2c: ocores: Remove #ifdef guards for PM related functions (git-fixes).\n- i2c: omap: switch to NOIRQ_SYSTEM_SLEEP_PM_OPS() and RUNTIME_PM_OPS() (git-fixes).\n- i2c: omap: wakeup the controller during suspend() callback (git-fixes).\n- i2c: rcar: properly format a debug output (git-fixes).\n- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume (git-fixes).\n- i2c: stm32f7: perform most of irq job in threaded handler (git-fixes).\n- i2c: synquacer: Deal with optional PCLK correctly (git-fixes).\n- i2c: synquacer: Remove a clk reference from struct synquacer_i2c (stable-fixes).\n- i2c: xiic: Try re-initialization on bus busy timeout (git-fixes).\n- i2c: xiic: improve error message when transfer fails to start (stable-fixes).\n- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition (stable-fixes).\n- i40e: Fix XDP program unloading while removing the driver (git-fixes).\n- i40e: Report MFS in decimal base instead of hex (git-fixes).\n- iavf: Fix TC config comparison with existing adapter TC config (git-fixes).\n- ice: Fix VSI list rule with ICE_SW_LKUP_LAST type (git-fixes).\n- ice: Fix checking for unsupported keys on non-tunnel device (git-fixes).\n- ice: Fix lldp packets dropping after changing the number of channels (git-fixes).\n- ice: Fix netif_is_ice() in Safe Mode (git-fixes).\n- ice: Fix package download algorithm (git-fixes).\n- ice: Fix recipe read procedure (git-fixes).\n- ice: Fix reset handler (git-fixes).\n- ice: Flush FDB entries before reset (git-fixes).\n- ice: Interpret .set_channels() input differently (git-fixes).\n- ice: Rebuild TC queues on VSI queue reconfiguration (git-fixes).\n- ice: Reject pin requests with unsupported flags (git-fixes).\n- ice: add flag to distinguish reset from .ndo_bpf in XDP rings config (git-fixes).\n- ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (git-fixes).\n- ice: avoid IRQ collision to fix init failure on ACPI S3 resume (git-fixes).\n- ice: clear port vlan config during reset (git-fixes).\n- ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins (git-fixes).\n- ice: do not bring the VSI up, if it was down before the XDP setup (git-fixes).\n- ice: do not busy wait for Rx queue disable in ice_qp_dis() (git-fixes).\n- ice: fix 200G PHY types to link speed mapping (git-fixes).\n- ice: fix 200G link speed message log (git-fixes).\n- ice: fix ICE_LAST_OFFSET formula (git-fixes).\n- ice: fix VLAN replay after reset (git-fixes).\n- ice: fix VSI lists confusion when adding VLANs (git-fixes).\n- ice: fix accounting for filters shared by multiple VSIs (git-fixes).\n- ice: fix accounting if a VLAN already exists (git-fixes).\n- ice: fix iteration of TLVs in Preserved Fields Area (git-fixes).\n- ice: fix page reuse when PAGE_SIZE is over 8k (git-fixes).\n- ice: fix reads from NVM Shadow RAM on E830 and E825-C devices (git-fixes).\n- ice: fix truesize operations for PAGE_SIZE \u003e= 8192 (git-fixes).\n- ice: implement AQ download pkg retry (git-fixes).\n- ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors() (git-fixes).\n- ice: remove af_xdp_zc_qps bitmap (git-fixes).\n- ice: replace synchronize_rcu with synchronize_net (git-fixes).\n- ice: respect netif readiness in AF_XDP ZC related ndo's (git-fixes).\n- ice: set correct dst VSI in only LAN filters (git-fixes).\n- ice: tc: allow zero flags in parsing tc flower (git-fixes).\n- ice: tc: check src_vsi in case of traffic from VF (git-fixes).\n- ice: use proper macro for testing bit (git-fixes).\n- idpf: Interpret .set_channels() input differently (git-fixes).\n- idpf: avoid bloating \u0026idpf_q_vector with big %NR_CPUS (git-fixes).\n- idpf: do not enable NAPI and interrupts prior to allocating Rx buffers (git-fixes).\n- idpf: do not skip over ethtool tcp-data-split setting (git-fixes).\n- idpf: fix UAFs when destroying the queues (git-fixes).\n- idpf: fix memleak in vport interrupt configuration (git-fixes).\n- idpf: fix memory leaks and crashes while performing a soft reset (git-fixes).\n- ieee802154: Fix build error (git-fixes).\n- igb: Always call igb_xdp_ring_update_tail() under Tx lock (git-fixes).\n- igb: Fix not clearing TimeSync interrupts for 82580 (git-fixes).\n- igc: Fix double reset adapter triggered from a single taprio cmd (git-fixes).\n- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (git-fixes).\n- igc: Fix qbv tx latency by setting gtxoffset (git-fixes).\n- igc: Fix qbv_config_change_errors logics (git-fixes).\n- igc: Fix reset adapter logics when tx mode change (git-fixes).\n- igc: Unlock on error in igc_io_resume() (git-fixes).\n- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling (git-fixes).\n- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (git-fixes).\n- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (git-fixes).\n- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() (git-fixes).\n- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (git-fixes).\n- iio: light: opt3001: add missing full-scale range value (git-fixes).\n- iio: light: veml6030: fix ALS sensor resolution (git-fixes).\n- iio: light: veml6030: fix IIO device retrieval from embedded device (git-fixes).\n- iio: light: veml6030: fix microlux value calculation (git-fixes).\n- iio: magnetometer: ak8975: Convert enum-\u003epointer for data in the match tables (stable-fixes).\n- iio: magnetometer: ak8975: Fix 'Unexpected device' error (git-fixes).\n- iio: magnetometer: ak8975: drop incorrect AK09116 compatible (git-fixes).\n- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- io_uring/eventfd: move to more idiomatic RCU free usage (git-fixes).\n- io_uring/io-wq: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/io-wq: inherit cpuset of cgroup in io worker (git-fixes).\n- io_uring/net: harden multishot termination case for recv (git-fixes).\n- io_uring/rw: fix cflags posting for single issue multishot read (git-fixes).\n- io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN (git-fixes).\n- io_uring/sqpoll: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/sqpoll: do not put cpumask on stack (git-fixes).\n- io_uring/sqpoll: retain test for whether the CPU is valid (git-fixes).\n- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL (git-fixes).\n- iommu/amd: Allocate the page table root using GFP_KERNEL (git-fixes).\n- iommu/amd: Do not set the D bit on AMD v2 table entries (git-fixes).\n- iommu/amd: Fix typo of , instead of ; (git-fixes).\n- iommu/vt-d: Always reserve a domain ID for identity setup (git-fixes).\n- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (git-fixes).\n- iommufd: Check the domain owner of the parent before creating a nesting domain (git-fixes).\n- iommufd: Protect against overflow of ALIGN() during iova allocation (git-fixes).\n- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit (bsc#1231638).\n- jfs: Fix sanity check in dbMount (git-fixes).\n- jfs: Fix uaf in dbFreeBits (git-fixes).\n- jfs: Fix uninit-value access of new_ea in ea_buffer (git-fixes).\n- jfs: UBSAN: shift-out-of-bounds in dbFindBits (git-fixes).\n- jfs: check if leafidx greater than num leaves per dmap tree (git-fixes).\n- jump_label: Fix static_key_slow_dec() yet again (git-fixes).\n- kABI fix of VM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- kABI: bpf: enum bpf_{type_flag,arg_type} kABI workaround (git-fixes).\n- kABI: bpf: struct bpf_insn_acces_aux kABI workaround (git-fixes).\n- kasan: Fix Software Tag-Based KASAN with GCC (git-fixes).\n- kbuild, bpf: Use test-ge check for v1.25-only pahole (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Add module-specific pahole flags for distilled base BTF (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later (bsc#1230414 bsc#1229450).\n- kbuild: avoid too many execution of scripts/pahole-flags.sh (bsc#1230414 bsc#1229450).\n- kbuild: bpf: Tell pahole to DECL_TAG kfuncs (bsc#1230414 bsc#1229450).\n- kconfig: qconf: fix buffer overflow in debug links (git-fixes).\n- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry (git-fixes).\n- keys: Fix overwrite of key expiration on instantiation (git-fixes).\n- kthread: unpark only parked kthread (git-fixes).\n- lib/xarray: introduce a new helper xas_get_order (bsc#1231617).\n- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (git-fixes).\n- macsec: do not increment counters for an unrelated SA (git-fixes).\n- maple_tree: correct tree corruption on spanning store (git-fixes).\n- media: bttv: use audio defaults for winfast2000 (git-fixes).\n- media: core: v4l2-ioctl: check if ioctl is known to avoid NULL name (git-fixes).\n- media: i2c: imx335: Enable regulator supplies (stable-fixes).\n- media: imx335: Fix reset-gpio handling (git-fixes).\n- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (git-fixes).\n- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() (stable-fixes).\n- media: videobuf2: fix typo: vb2_dbuf -\u003e vb2_qbuf (git-fixes).\n- mei: use kvmalloc for read buffer (git-fixes).\n- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).\n- minmax: avoid overly complex min()/max() macro arguments in xen (git-fixes).\n- mlx5: avoid truncating error message (git-fixes).\n- mlx5: stop warning for 64KB pages (git-fixes).\n- mm/filemap: optimize filemap folio adding (bsc#1231617).\n- mm/filemap: return early if failed to allocate memory for split (bsc#1231617).\n- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point (git-fixes).\n- mm: mmap: no need to call khugepaged_enter_vma() for stack (jsc#PED-10978).\n- modpost: fix acpi MODULE_DEVICE_TABLE built with mismatched endianness (git-fixes).\n- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (git-fixes).\n- module: abort module loading when sysfs setup suffer errors (git-fixes).\n- nbd: fix race between timeout and normal completion (bsc#1230918).\n- net/mlx5: Add missing masks and QoS bit masks for scheduling elements (git-fixes).\n- net/mlx5: Added cond_resched() to crdump collection (git-fixes).\n- net/mlx5: Check capability for fw_reset (git-fixes).\n- net/mlx5: Check for invalid vector index on EQ creation (git-fixes).\n- net/mlx5: Explicitly set scheduling element and TSAR type (git-fixes).\n- net/mlx5: Fix command bitmask initialization (git-fixes).\n- net/mlx5: Fix error handling in irq_pool_request_irq (git-fixes).\n- net/mlx5: Lag, do bond only if slaves agree on roce state (git-fixes).\n- net/mlx5: Lag, do not use the hardcoded value of the first port (git-fixes).\n- net/mlx5: Stop waiting for PCI if pci channel is offline (git-fixes).\n- net/mlx5: Unregister notifier on eswitch init failure (git-fixes).\n- net/mlx5: Update the list of the PCI supported devices (git-fixes).\n- net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (git-fixes).\n- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map (git-fixes).\n- net/mlx5e: Add missing link modes to ptys2ethtool_map (git-fixes).\n- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (git-fixes).\n- net/mlx5e: Correctly report errors for ethtool rx flows (git-fixes).\n- net/mlx5e: Do not call cleanup on profile rollback failure (git-fixes).\n- net/mlx5e: Fix IPsec tunnel mode offload feature check (git-fixes).\n- net/mlx5e: Fix UDP GSO for encapsulated packets (git-fixes).\n- net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (git-fixes).\n- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (git-fixes).\n- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (git-fixes).\n- net: mana: Implement get_ringparam/set_ringparam for mana (bsc#1229891).\n- net: mana: Improve mana_set_channels() in low mem conditions (bsc#1230289).\n- net: phy: Remove LED entry from LEDs list on unregister (git-fixes).\n- net: phy: bcm84881: Fix some error handling paths (git-fixes).\n- net: phy: dp83869: fix memory corruption when enabling fiber (git-fixes).\n- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (git-fixes).\n- net: qede: use return from qede_parse_actions() (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flow_spec (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flower (git-fixes).\n- net: stmmac: dwmac-tegra: Fix link bring-up sequence (git-fixes)\n- net: sysfs: Fix /sys/class/net/\u0026lt;iface\u003e path for statistics (git-fixes).\n- net: test for not too small csum_start in virtio_net_hdr_to_skb() (git-fixes).\n- net: usb: usbnet: fix name regression (get-fixes).\n- net: usb: usbnet: fix race in probe failure (git-fixes).\n- netdevsim: use cond_resched() in nsim_dev_trap_report_work() (git-fixes).\n- nfs: fix memory leak in error path of nfs4_do_reclaim (git-fixes).\n- nfsd: call cache_put if xdr_reserve_space returns NULL (git-fixes).\n- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (git-fixes).\n- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (git-fixes).\n- nfsd: fix refcount leak when file is unhashed after being found (git-fixes).\n- nfsd: map the EBADMSG to nfserr_io to avoid warning (git-fixes).\n- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (git-fixes).\n- nfsd: return -EINVAL when namelen is 0 (git-fixes).\n- nilfs2: fix kernel bug due to missing clearing of buffer delay flag (git-fixes).\n- nouveau/dmem: Fix privileged error in copy engine channel (git-fixes).\n- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (git-fixes).\n- nouveau/gsp: Avoid addressing beyond end of rpc-\u003eentries (stable-fixes).\n- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- nvme-multipath: suppress partition scan until the disk is ready (bsc#1228244).\n- nvme-pci: fix race condition between reset and nvme_dev_disable() (git-fixes).\n- nvme-pci: qdepth 1 quirk (git-fixes).\n- nvme-pci: set doorbell config before unquiescing (git-fixes).\n- nvme: disable CC.CRIME (NVME_CC_CRIME) (jsc#PED-9901).\n- nvme: null terminate nvme_tls_attrs (git-fixes).\n- nvme: re-fix error-handling for io_uring nvme-passthrough (git-fixes).\n- nvmet-auth: assign dh_key to NULL after kfree_sensitive (git-fixes).\n- ocfs2: fix the la space leak when unmounting an ocfs2 volume (git-fixes).\n- ocfs2: fix uninit-value in ocfs2_get_block() (git-fixes).\n- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (git-fixes).\n- parport: Proper fix for array out-of-bounds access (git-fixes).\n- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check (git-fixes).\n- phy: qcom: qmp-combo: move driver data initialisation earlier (git-fixes).\n- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend (git-fixes).\n- phy: tegra: xusb: Add error pointer check in xusb.c (git-fixes).\n- phy: ti: phy-j721e-wiz: fix usxgmii configuration (git-fixes).\n- pinctrl: apple: check devm_kasprintf() returned value (git-fixes).\n- pinctrl: ocelot: fix system hang on level based interrupts (stable-fixes).\n- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug (git-fixes).\n- platform/x86: dell-sysman: add support for alienware products (stable-fixes).\n- platform/x86: dell-wmi: Ignore suspend notifications (stable-fixes).\n- platform/x86: lenovo-ymc: Ignore the 0x0 state (stable-fixes).\n- platform/x86: touchscreen_dmi: add nanote-next quirk (stable-fixes).\n- power: reset: brcmstb: Do not go into infinite loop if reset fails (stable-fixes).\n- powercap: intel_rapl: Fix off by one in get_rpi() (git-fixes).\n- powerpc/64: Convert patch_instruction() to patch_u32() (bsc#1194869).\n- powerpc/boot: Handle allocation failure in simple_realloc() (bsc#1194869).\n- powerpc/boot: Only free if realloc() succeeds (bsc#1194869).\n- powerpc/code-patching: Add generic memory patching (bsc#1194869).\n- powerpc/code-patching: Perform hwsync in __patch_instruction() in case of failure (bsc#1194869).\n- powerpc/crypto: do not build aes-gcm-p10 by default (bsc#1230501 ltc#208632).\n- powerpc/crypto: fix missing skcipher dependency for aes-gcm-p10 (bsc#1230501 ltc#208632).\n- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace (bsc#1194869).\n- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (bsc#1194869).\n- powerpc/xmon: Fix disassembly CPU feature checks (bsc#1065729).\n- printk: Add notation to console_srcu locking (bsc#1232183).\n- qed: avoid truncating work queue length (git-fixes).\n- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (bsc#1226631).\n- rcu: Fix buffer overflow in print_cpu_stall_info() (bsc#1226623).\n- rpm/check-for-config-changes: add HAVE_RUST and RUSTC_SUPPORTS_ to IGNORED_CONFIGS_RE They depend on SHADOW_CALL_STACK.\n- rpm/release-projects: Add SLFO projects (bsc#1231293).\n- rpmsg: glink: Handle rejected intent request better (git-fixes).\n- runtime constants: add default dummy infrastructure (git-fixes).\n- runtime constants: add x86 architecture support (git-fixes).\n- s390/mm: Add cond_resched() to cmm_alloc/free_pages() (bsc#1228747).\n- s390/pci: Handle PCI error codes other than 0x3a (git-fixes bsc#1232629).\n- s390/sclp: Deactivate sclp after all its users (git-fixes bsc#1232628).\n- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (git-fixes bsc#1232627).\n- scsi: fnic: Move flush_work initialization out of if block (bsc#1230055).\n- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd() (bsc#1232757).\n- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (bsc#1232757).\n- scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (bsc#1232757).\n- scsi: lpfc: Remove trailing space after \\n newline (bsc#1232757).\n- scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs (bsc#1232757 bsc#1228119).\n- scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to KERN_WARNING (bsc#1232757).\n- scsi: lpfc: Support loopback tests with VMID enabled (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.5 (bsc#1232757).\n- scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE (bsc#1232757).\n- selftests/bpf: Add a test case to write mtu result into .rodata (git-fixes).\n- selftests/bpf: Add a test case to write strtol result into .rodata (git-fixes).\n- selftests/bpf: Add test for sign extension in coerce_subreg_to_size_sx() (git-fixes).\n- selftests/bpf: Add test for truncation after sign extension in coerce_reg_to_size_sx() (git-fixes).\n- selftests/bpf: Add tests for ldsx of pkt data/data_end/data_meta accesses (git-fixes).\n- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test (git-fixes).\n- selftests/bpf: Rename ARG_PTR_TO_LONG test description (git-fixes).\n- selftests/bpf: test for malformed BPF_CORE_TYPE_ID_LOCAL relocation (git-fixes).\n- serial: imx: Update mctrl old_status on RTSD interrupt (git-fixes).\n- serial: protect uart_port_dtr_rts() in uart_shutdown() too (stable-fixes).\n- soundwire: intel_bus_common: enable interrupts before exiting reset (stable-fixes).\n- spi: atmel-quadspi: Fix wrong register value written to MR (git-fixes).\n- spi: mtk-snfi: fix kerneldoc for mtk_snand_is_page_ops() (git-fixes).\n- spi: s3c64xx: fix timeout counters in flush_fifo (git-fixes).\n- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select (git-fixes).\n- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- splice: always fsnotify_access(in), fsnotify_modify(out) on success (git-fixes).\n- splice: fsnotify_access(fd)/fsnotify_modify(fd) in vmsplice (git-fixes).\n- splice: fsnotify_access(in), fsnotify_modify(out) on success in tee (git-fixes).\n- srcu: Fix callbacks acceleration mishandling (git-fixes).\n- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (git-fixes).\n- sumversion: Fix a memory leak in get_src_version() (git-fixes).\n- supported.conf: mark nhpoly1305 module as supported (bsc#1231035)\n- supported.conf: mark ultravisor userspace access as supported (bsc#1232090)\n- task_work: add kerneldoc annotation for 'data' argument (git-fixes).\n- thunderbolt: Improve DisplayPort tunnel setup process to be more robust (stable-fixes).\n- tools: hv: rm .*.cmd when make clean (git-fixes).\n- tracing/hwlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/osnoise: Fix build when timerlat is not enabled (git-fixes).\n- tracing/osnoise: Skip running osnoise if all instances are off (git-fixes).\n- tracing/osnoise: Switch from PF_NO_SETAFFINITY to migrate_disable (git-fixes).\n- tracing/osnoise: Use a cpumask to know what threads are kthreads (git-fixes).\n- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (git-fixes).\n- tracing/timerlat: Add user-space interface (git-fixes).\n- tracing/timerlat: Drop interface_lock in stop_kthread() (git-fixes).\n- tracing/timerlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (git-fixes).\n- tracing/timerlat: Move hrtimer_init to timerlat_fd open() (git-fixes).\n- tracing/timerlat: Only clear timer if a kthread exists (git-fixes).\n- tracing: Consider the NULL character when validating the event length (git-fixes).\n- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (stable-fixes).\n- ubifs: Fix adding orphan entry twice for the same inode (git-fixes).\n- ubifs: Fix unattached xattr inode if powercut happens after deleting (git-fixes).\n- ubifs: add check for crypto_shash_tfm_digest (git-fixes).\n- ubifs: dbg_orphan_check: Fix missed key type checking (git-fixes).\n- unicode: Do not special case ignorable code points (stable-fixes).\n- uprobe: avoid out-of-bounds memory access of fetching args (git-fixes).\n- uprobes: encapsulate preparation of uprobe args buffer (git-fixes).\n- uprobes: introduce the global struct vm_special_mapping xol_mapping (bsc#1231114).\n- uprobes: turn xol_area-\u003epages into xol_area-\u003epage (bsc#1231114).\n- usb: chipidea: udc: enable suspend interrupt after usb reset (stable-fixes).\n- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario (stable-fixes).\n- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG (git-fixes).\n- usb: dwc3: core: Stop processing of pending events if controller is halted (git-fixes).\n- usb: gadget: core: force synchronous registration (git-fixes).\n- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant (stable-fixes).\n- usb: gadget: f_uac2: fix non-newline-terminated function name (stable-fixes).\n- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store (git-fixes).\n- usb: phy: Fix API devm_usb_put_phy() can not release the phy (git-fixes).\n- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (stable-fixes).\n- usb: typec: altmode should keep reference to parent (git-fixes).\n- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (git-fixes).\n- usb: xhci: Fix problem with xhci resume from suspend (stable-fixes).\n- usb: xhci: fix loss of data on Cadence xHC (git-fixes).\n- usbip: tools: Fix detach_port() invalid port error path (git-fixes).\n- usbnet: fix cyclical race on disconnect with work queue (git-fixes).\n- vdpa: Fix an error handling path in eni_vdpa_probe() (git-fixes).\n- vdpa_sim_blk: Fix the potential leak of mgmt_dev (git-fixes).\n- vdpa_sim_blk: allocate the buffer zeroed (git-fixes).\n- vduse: avoid using __GFP_NOFAIL (git-fixes).\n- vfs: dcache: move hashlen_hash() from callers into d_hash() (git-fixes).\n- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (git-fixes).\n- vhost_vdpa: assign irq bypass producer token correctly (git-fixes).\n- virtio_console: fix misc probe bugs (git-fixes).\n- vmalloc: modify the alloc_vmap_area() error message for better diagnostics (jsc#PED-10978).\n- vmxnet3: Add XDP support (bsc#1226498).\n- vmxnet3: Fix missing reserved tailroom (bsc#1226498).\n- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame (bsc#1226498).\n- vmxnet3: add command to allow disabling of offloads (bsc#1226498).\n- vmxnet3: add latency measurement support in vmxnet3 (bsc#1226498).\n- vmxnet3: prepare for version 9 changes (bsc#1226498).\n- vmxnet3: update to version 9 (bsc#1226498).\n- vt: prevent kernel-infoleak in con_font_get() (git-fixes).\n- wifi: ath10k: Fix memory leak in management tx (git-fixes).\n- wifi: ath11k: Fix invalid ring usage in full monitor mode (git-fixes).\n- wifi: ath11k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (stable-fixes).\n- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (stable-fixes).\n- wifi: brcm80211: BRCM_TRACING should depend on TRACING (git-fixes).\n- wifi: cfg80211: Set correct chandef when starting CAC (stable-fixes).\n- wifi: cfg80211: clear wdev-\u003ecqm_config pointer on free (git-fixes).\n- wifi: iwlegacy: Fix 'field-spanning write' warning in il_enqueue_hcmd() (git-fixes).\n- wifi: iwlwifi: allow only CN mcc from WRDD (stable-fixes).\n- wifi: iwlwifi: config: label 'gl' devices as discrete (git-fixes).\n- wifi: iwlwifi: mvm: Fix a race in scan abort flow (stable-fixes).\n- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (git-fixes).\n- wifi: iwlwifi: mvm: avoid NULL pointer dereference (stable-fixes).\n- wifi: iwlwifi: mvm: do not add default link in fw restart flow (git-fixes).\n- wifi: iwlwifi: mvm: do not leak a link on AP removal (git-fixes).\n- wifi: iwlwifi: mvm: drop wrong STA selection in TX (stable-fixes).\n- wifi: iwlwifi: mvm: use correct key iteration (stable-fixes).\n- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL (stable-fixes).\n- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (git-fixes).\n- wifi: mac80211: fix RCU list iterations (stable-fixes).\n- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (git-fixes).\n- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation (stable-fixes).\n- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable (stable-fixes).\n- wifi: mt76: mt7915: hold dev-\u003emt76.mutex while disabling tx worker (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (stable-fixes).\n- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c (stable-fixes).\n- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons (git-fixes).\n- wifi: rtw88: select WANT_DEV_COREDUMP (stable-fixes).\n- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements (stable-fixes).\n- wifi: rtw89: avoid to add interface to list twice when SER (stable-fixes).\n- wifi: rtw89: correct base HT rate mask for firmware (stable-fixes).\n- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load (git-fixes).\n- x86/Documentation: Indent 'note::' directive for protocol version number note (git-fixes).\n- x86/PCI: Check pcie_find_root_port() return for NULL (git-fixes).\n- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h (git-fixes).\n- x86/apic: Always explicitly disarm TSC-deadline timer (git-fixes).\n- x86/apic: Make x2apic_disable() work correctly (git-fixes).\n- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (git-fixes).\n- x86/bugs: Skip RSB fill at VMEXIT (git-fixes).\n- x86/cpufeatures: Add a IBPB_NO_RET BUG flag (git-fixes).\n- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (git-fixes).\n- x86/entry: Have entry_ibpb() invalidate return predictions (git-fixes).\n- x86/entry: Remove unwanted instrumentation in common_interrupt() (git-fixes).\n- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency (git-fixes).\n- x86/mm: Use IPIs to synchronize LAM enablement (git-fixes).\n- x86/resctrl: Annotate get_mem_config() functions as __init (git-fixes).\n- x86/resctrl: Avoid overflow in MB settings in bw_validate() (git-fixes).\n- x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler (git-fixes).\n- x86: do the user address masking outside the user access area (git-fixes).\n- x86: fix user address masking non-canonical speculation issue (git-fixes).\n- x86: make the masked_user_access_begin() macro use its argument only once (git-fixes).\n- x86: support user address masking instead of non-speculative conditional (git-fixes).\n- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2 (git-fixes).\n- xfs: check shortform attr entry flags specifically (git-fixes).\n- xfs: convert delayed extents to unwritten when zeroing post eof blocks (git-fixes).\n- xfs: fix finding a last resort AG in xfs_filestream_pick_ag (git-fixes).\n- xfs: fix freeing speculative preallocations for preallocated files (git-fixes).\n- xfs: make sure sb_fdblocks is non-negative (git-fixes).\n- xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional (git-fixes).\n- xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset (git-fixes).\n- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent (git-fixes).\n- xfs: validate recovered name buffers when recovering xattr items (git-fixes).\n- xhci: Add a quirk for writing ERST in high-low order (git-fixes).\n- xhci: Fix Link TRB DMA in command ring stopped completion event (git-fixes).\n- xhci: Fix incorrect stream context type macro (git-fixes).\n- xhci: Mitigate failed set dequeue pointer commands (git-fixes).\n- xhci: Use pm_runtime_get to prevent RPM on unsupported systems (git-fixes).\n- xhci: tegra: fix checked USB2 port number (git-fixes).\n- zonefs: Improve error handling (git-fixes).\n","status":"published","published":"2024-11-13T10:13:12Z","modified":"2026-02-04T03:21:18.182362Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3986-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).\n- CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).\n- CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command  (bsc#1228620).\n- CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).\n- CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).\n- CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).\n- CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).\n- CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)\n- CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).\n- CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).\n- CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).\n- CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).\n- CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).\n- CVE-2024-46813: drm/amd/display: Check link_index before accessing dc-\u003elinks (bsc#1231191).\n- CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).\n- CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).\n- CVE-2024-46828: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1231114).\n- CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).\n- CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).\n- CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).\n- CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).\n- CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100).\n- CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).\n- CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).\n- CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).\n- CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (bsc#1231435).\n- CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (bsc#1231436).\n- CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).\n- CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442).\n- CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).\n- CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).\n- CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).\n- CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003).\n- CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).\n- CVE-2024-47704: drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944).\n- CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872).\n- CVE-2024-47706: block, bfq: fix possible UAF for bfqq-\u003ebic with merge chain (bsc#1231942).\n- CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).\n- CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049).\n- CVE-2024-47727: x86/tdx: Fix 'in-kernel MMIO' check (bsc#1232116).\n- CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).\n- CVE-2024-47731: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (bsc#1232117).\n- CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).\n- CVE-2024-47741: btrfs: fix race setting file private on concurrent lseek using same fd (bsc#1231869).\n- CVE-2024-47745: mm: split critical region in remap_file_pages() and invoke LSMs in between (bsc#1232135).\n- CVE-2024-47747: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (bsc#1232145).\n- CVE-2024-47752: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning (bsc#1232130).\n- CVE-2024-47753: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning (bsc#1231868).\n- CVE-2024-47754: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning (bsc#1232131).\n- CVE-2024-49864: rxrpc: Fix a race between socket set up and I/O thread creation (bsc#1232256).\n- CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount (bsc#1232262).\n- CVE-2024-49882: ext4: fix double brelse() the buffer of the extents path (bsc#1232200).\n- CVE-2024-49888: bpf: Fix a sdiv overflow issue (bsc#1232208).\n- CVE-2024-49890: drm/amd/pm: ensure the fw_info is not null before using it (bsc#1232217).\n- CVE-2024-49892: drm/amd/display: Initialize get_bytes_per_element's default to 1 (bsc#1232220).\n- CVE-2024-49896: drm/amd/display: Check stream before comparing them (bsc#1232221).\n- CVE-2024-49898: drm/amd/display: Check null-initialized variables (bsc#1232222).\n- CVE-2024-49906: drm/amd/display: Check null pointer before try to access it (bsc#1232332).\n- CVE-2024-49907: drm/amd/display: Check null pointers before using dc-\u003eclk_mgr (bsc#1232334).\n- CVE-2024-49908: drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (bsc#1232335).\n- CVE-2024-49914: drm/amd/display: Add null check for pipe_ctx-\u003eplane_state in (bsc#1232369).\n- CVE-2024-49917: drm/amd/display: Add NULL check for clk_mgr and clk_mgr-\u003efuncs in dcn30_init_hw (bsc#1231965).\n- CVE-2024-49918: drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer (bsc#1231967).\n- CVE-2024-49919: drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer (bsc#1231968).\n- CVE-2024-49920: drm/amd/display: Check null pointers before multiple uses (bsc#1232313).\n- CVE-2024-49936: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424).\n- CVE-2024-49946: ppp: do not assume bh is held in ppp_channel_bridge_input() (bsc#1232164).\n- CVE-2024-49949: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (bsc#1232160).\n- CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).\n- CVE-2024-49953: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice (bsc#1232156).\n- CVE-2024-49954: static_call: Replace pointless WARN_ON() in static_call_module_notify() (bsc#1232155).\n- CVE-2024-49958: ocfs2: reserve space for inline xattr before attaching reflink tree (bsc#1232151).\n- CVE-2024-49960: ext4: fix timer use-after-free on failed mount (bsc#1232395).\n- CVE-2024-49967: ext4: no need to continue when the number of entries is 1 (bsc#1232140).\n- CVE-2024-49969: drm/amd/display: Fix index out of bounds in DCN30 color transformation (bsc#1232519).\n- CVE-2024-49972: drm/amd/display: Deallocate DML memory if allocation fails (bsc#1232315).\n- CVE-2024-49973: r8169: add tally counter fields added with RTL8125 (bsc#1232105).\n- CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383).\n- CVE-2024-49986: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors (bsc#1232093).\n- CVE-2024-49991: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer (bsc#1232282).\n- CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (bsc#1232316).\n- CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).\n- CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).\n- CVE-2024-50000: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (bsc#1232085).\n- CVE-2024-50001: net/mlx5: Fix error path in multi-packet WQE transmit (bsc#1232084).\n- CVE-2024-50002: static_call: Handle module init failure correctly in static_call_del_module() (bsc#1232083).\n- CVE-2024-50020: ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() (bsc#1231989).\n- CVE-2024-50021: ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() (bsc#1231957).\n- CVE-2024-50022: device-dax: correct pgoff align in dax_set_mapping() (bsc#1231956).\n- CVE-2024-50024: net: Fix an unsafe loop on the list (bsc#1231954).\n- CVE-2024-50027: thermal: core: Free tzp copy along with the thermal zone (bsc#1231951).\n- CVE-2024-50028: thermal: core: Reference count the zone in thermal_zone_get_by_id() (bsc#1231950).\n- CVE-2024-50033: slip: make slhc_remember() more robust against malicious packets (bsc#1231914).\n- CVE-2024-50035: ppp: fix ppp_async_encode() illegal access (bsc#1232392).\n- CVE-2024-50040: igb: Do not bring the device up after non-fatal error (bsc#1231908).\n- CVE-2024-50041: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash (bsc#1231907).\n- CVE-2024-50042: ice: Fix increasing MSI-X on VF (bsc#1231906).\n- CVE-2024-50045: netfilter: br_netfilter: fix panic with metadata_dst skb (bsc#1231903).\n- CVE-2024-50046: kabi fix for NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (bsc#1231902).\n- CVE-2024-50047: smb: client: fix UAF in async decryption (bsc#1232418).\n- CVE-2024-50059: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (bsc#1232345).\n- CVE-2024-50060: io_uring: check if we need to reschedule during overflow flush (bsc#1232417).\n- CVE-2024-50063: kABI: bpf: struct bpf_map kABI workaround (bsc#1232435).\n- CVE-2024-50064: zram: do not free statically defined names (bsc#1231901).\n\nThe following non-security bugs were fixed:\n\n- 9p: explicitly deny setlease attempts (git-fixes).\n- ACPI: CPPC: Add support for setting EPP register in FFH (stable-fixes).\n- ACPI: CPPC: Make rmw_lock a raw_spin_lock (git-fixes).\n- ACPI: EC: Do not release locks during operation region accesses (stable-fixes).\n- ACPI: PAD: fix crash in exit_round_robin() (stable-fixes).\n- ACPI: PRM: Clean up guid type in struct prm_handler_info (git-fixes).\n- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (git-fixes).\n- ACPI: battery: Fix possible crash when unregistering a battery hook (git-fixes).\n- ACPI: battery: Simplify battery hook locking (stable-fixes).\n- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (stable-fixes).\n- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add another DMI match for the TongFang GMxXGxx (stable-fixes).\n- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (stable-fixes).\n- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (stable-fixes).\n- ACPICA: iasl: handle empty connection_node (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: cleanup sdw_intel_scan_controller (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: fetch fwnode once in sdw_intel_scan_controller() (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: simplify sdw-master-count property read (stable-fixes).\n- ALSA: Reorganize kerneldoc parameter names (stable-fixes).\n- ALSA: asihpi: Fix potential OOB array access (stable-fixes).\n- ALSA: core: add isascii() check to card ID generator (stable-fixes).\n- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (git-fixes).\n- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (stable-fixes).\n- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (git-fixes).\n- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (git-fixes).\n- ALSA: hda/conexant: fix some typos (stable-fixes).\n- ALSA: hda/cs8409: Fix possible NULL dereference (git-fixes).\n- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs (bsc#1219803).\n- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (stable-fixes).\n- ALSA: hda/realtek: Enable mic on Vaio VJFH52 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 (stable-fixes).\n- ALSA: hda/realtek: Fix the push button function for the ALC257 (git-fixes).\n- ALSA: hda/realtek: Limit internal Mic boost on Dell platform (stable-fixes).\n- ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init (stable-fixes).\n- ALSA: hda/realtek: Update default depop procedure (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8 (stable-fixes).\n- ALSA: hda/realtek: tas2781: Fix ROG ALLY X audio (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects (stable-fixes).\n- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE (git-fixes).\n- ALSA: hda: Sound support for HP Spectre x360 16 inch model 2024 (stable-fixes).\n- ALSA: hda: tas2781: Fix missing setup at runtime PM (bsc#1230132).\n- ALSA: hdsp: Break infinite MIDI input flush loop (stable-fixes).\n- ALSA: line6: add hw monitor volume control to POD HD500X (stable-fixes).\n- ALSA: line6: update contact information (stable-fixes).\n- ALSA: mixer_oss: Remove some incorrect kfree_const() usages (git-fixes).\n- ALSA: silence integer wrapping warning (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET (stable-fixes).\n- ALSA: usb-audio: Add input value sanity checks for standard types (stable-fixes).\n- ALSA: usb-audio: Add logitech Audio profile quirk (stable-fixes).\n- ALSA: usb-audio: Add native DSD support for Luxman D-08u (stable-fixes).\n- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1232768).\n- ALSA: usb-audio: Add quirks for Dell WD19 dock (stable-fixes).\n- ALSA: usb-audio: Define macros for quirk table entries (stable-fixes).\n- ALSA: usb-audio: Replace complex quirk lines with macros (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (stable-fixes).\n- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (git-fixes).\n- ASoC: Intel: sst: Support LPE0F28 ACPI HID (stable-fixes).\n- ASoC: amd: yc: Add quirk for HP Dragonfly pro one (stable-fixes).\n- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized (git-fixes).\n- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (stable-fixes).\n- ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work() (stable-fixes).\n- ASoC: codecs: wsa883x: Handle reading version failure (stable-fixes).\n- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (git-fixes).\n- ASoC: dapm: fix bounds checker error in dapm_widget_list_create (git-fixes).\n- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (stable-fixes).\n- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m (git-fixes).\n- ASoC: max98388: Fix missing increment of variable slot_found (git-fixes).\n- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (git-fixes).\n- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (stable-fixes).\n- ASoC: tas2781: Use of_property_read_reg() (stable-fixes).\n- Bluetooth: Call iso_exit() on module unload (git-fixes).\n- Bluetooth: ISO: Fix multiple init when debugfs is disabled (git-fixes).\n- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (git-fixes).\n- Bluetooth: Remove debugfs directory on module init failure (git-fixes).\n- Bluetooth: bnep: fix wild-memory-access in proto_unregister (git-fixes).\n- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 (stable-fixes).\n- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (git-fixes).\n- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (git-fixes).\n- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (git-fixes).\n- Drop USB dwc2 patch that caused a regression on RPi3 (bsc#1232342)\n- Drop the previous HD-audio TAS2781 fix (bsc#1230132) The proposed fix turned out to be incorrect\n- HID: Ignore battery for all ELAN I2C-HID devices (stable-fixes).\n- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (git-fixes).\n- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk (stable-fixes).\n- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (stable-fixes).\n- HID: multitouch: Add support for lenovo Y9000P Touchpad (stable-fixes).\n- HID: plantronics: Workaround for an unexcepted opposite volume key (stable-fixes).\n- Input: adp5589-keys - fix NULL pointer dereference (git-fixes).\n- Input: adp5589-keys - fix adp5589_gpio_get_value() (git-fixes).\n- Input: edt-ft5x06 - fix regmap leak when probe fails (git-fixes).\n- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (stable-fixes).\n- KVM: Fix coalesced_mmio_has_room() to avoid premature userspace exit (git-fixes).\n- KVM: SVM: Disallow guest from changing userspace's MSR_AMD64_DE_CFG value (git-fixes).\n- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock (git-fixes).\n- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled (git-fixes).\n- KVM: VMX: Set PFERR_GUEST_{FINAL,PAGE}_MASK if and only if the GVA is valid (git-fixes).\n- KVM: Write the per-page 'segment' when clearing (part of) a guest page (git-fixes).\n- KVM: s390: Change virtual to physical address access in diag 0x258 handler (git-fixes bsc#1232626).\n- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (git-fixes bsc#1231276).\n- KVM: s390: gaccess: Check if guest address is in memslot (git-fixes bsc#1232623).\n- KVM: x86/mmu: Skip emulation on page fault iff 1+ SPs were unprotected (git-fixes).\n- KVM: x86/mmu: Trigger unprotect logic only on write-protection page faults (git-fixes).\n- KVM: x86: Dedup fastpath MSR post-handling logic (git-fixes).\n- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits (git-fixes).\n- KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (git-fixes).\n- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode() (git-fixes).\n- KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (git-fixes).\n- KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- NFS: Avoid unnecessary rescanning of the per-server delegation list (git-fixes).\n- NFSD: Fix NFSv4's PUTPUBFH operation (git-fixes).\n- NFSD: Mark filecache 'down' if init fails (git-fixes).\n- NFSv3: only use NFS timeout for MOUNT when protocols are compatible (bsc#1231016).\n- NFSv4: Fix clearing of layout segments in layoutreturn (git-fixes).\n- PCI: Add ACS quirk for Qualcomm SA8775P (stable-fixes).\n- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip (stable-fixes).\n- PCI: Fix pci_enable_acs() support for the ACS quirks (bsc#1229019).\n- PCI: Mark Creative Labs EMU20k2 INTx masking as broken (stable-fixes).\n- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix (jsc#PED-10559).\n- RAS/AMD/ATL: Expand helpers for adding and removing base and hole (jsc#PED-10559).\n- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization (jsc#PED-10559).\n- RAS/AMD/ATL: Read DRAM hole base early (jsc#PED-10559).\n- RAS/AMD/ATL: Validate address map when information is gathered (jsc#PED-10559).\n- RDMA/bnxt_re: Add a check for memory allocation (git-fixes)\n- RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (git-fixes)\n- RDMA/bnxt_re: Change the sequence of updating the CQ toggle value (git-fixes)\n- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (git-fixes)\n- RDMA/bnxt_re: Fix a possible memory leak (git-fixes)\n- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (git-fixes)\n- RDMA/bnxt_re: Fix incorrect dereference of srq in async event (git-fixes)\n- RDMA/bnxt_re: Fix out of bound check (git-fixes)\n- RDMA/bnxt_re: Fix the GID table length (git-fixes)\n- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters (git-fixes)\n- RDMA/bnxt_re: Fix the usage of control path spin locks (git-fixes)\n- RDMA/bnxt_re: Return more meaningful error (git-fixes)\n- RDMA/bnxt_re: synchronize the qp-handle table array (git-fixes)\n- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)\n- RDMA/cxgb4: Dump vendor specific QP details (git-fixes)\n- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (git-fixes)\n- RDMA/irdma: Fix misspelling of 'accept*' (git-fixes)\n- RDMA/mad: Improve handling of timed out WRs of mad agent (git-fixes)\n- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (git-fixes).\n- RDMA/mana_ib: use the correct page table index based on hardware page size (git-fixes).\n- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults (git-fixes)\n- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (git-fixes)\n- RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled (git-fixes).\n- RDMA/rtrs-srv: Avoid null pointer deref during path establishment (git-fixes)\n- RDMA/srpt: Make slab cache names unique (git-fixes)\n- Revert 'ALSA: hda/conexant: Mute speakers at suspend / shutdown' (bsc#1228269).\n- Revert 'ALSA: hda: Conditionally use snooping for AMD HDMI' (stable-fixes).\n- Revert 'KEYS: encrypted: Add check for strsep' (git-fixes).\n- Revert 'driver core: Fix uevent_show() vs driver detach race' (git-fixes).\n- Revert 'ixgbe: Manual AN-37 for troublesome link partners for X550 SFI' (git-fixes).\n- Revert 'ubifs: ubifs_symlink: Fix memleak of inode-\u003ei_link in error path' (git-fixes).\n- Revert 'wifi: iwlwifi: remove retry loops in start' (git-fixes).\n- SUNRPC: Fix integer overflow in decode_rc_list() (git-fixes).\n- SUNRPC: Fixup gss_status tracepoint error output (git-fixes).\n- SUNRPC: clnt.c: Remove misleading comment (git-fixes).\n- USB: appledisplay: close race between probe and completion handler (git-fixes).\n- USB: misc: cypress_cy7c63: check for short transfer (git-fixes).\n- USB: misc: yurex: fix race between read and write (git-fixes).\n- USB: serial: option: add Telit FN920C04 MBIM compositions (stable-fixes).\n- USB: serial: option: add support for Quectel EG916Q-GL (stable-fixes).\n- Use pahole -j1 option for reproducible builds (bsc#1230414 bsc#1229450).\n- accel/qaic: Fix the for loop used to walk SG table (git-fixes).\n- arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (git-fixes)\n- arm64: cputype: Add Neoverse-N3 definitions (git-fixes)\n- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (git-fixes).\n- arm64: errata: Expand speculative SSBS workaround once more (git-fixes)\n- arm64: esr: Define ESR_ELx_EC_* constants as UL (git-fixes)\n- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS (git-fixes).\n- arm64: probes: Fix simulate_ldr*_literal() (git-fixes)\n- arm64: probes: Fix uprobes for big-endian kernels (git-fixes)\n- arm64: probes: Remove broken LDR (literal) uprobe support (git-fixes)\n- ata: libata: Set DID_TIME_OUT for commands that actually timed out (git-fixes).\n- ata: libata: avoid superfluous disk spin down + spin up during hibernation (git-fixes).\n- audit: do not WARN_ON_ONCE(!current-\u003emm) in audit_exe_compare() (git-fixes).\n- audit: do not take task_lock() in audit_exe_compare() code path (git-fixes).\n- block: print symbolic error name instead of error code (bsc#1231872).\n- block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (bsc#1229677).\n- bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response (git-fixes).\n- bnxt_en: Fix error recovery for 5760X (P7) chips (git-fixes).\n- bnxt_en: Fix the PCI-AER routines (git-fixes).\n- bnxt_en: Restore PTP tx_avail count in case of skb_pad() error (git-fixes).\n- bnxt_en: refactor reset close code (git-fixes).\n- bpf, lsm: Add disabled BPF LSM hook list (git-fixes).\n- bpf, net: Fix a potential race in do_sock_getsockopt() (git-fixes).\n- bpf, verifier: Correct tail_call_reachable for bpf prog (git-fixes).\n- bpf, x64: Remove tail call detection (git-fixes).\n- bpf,perf: Fix perf_event_detach_bpf_prog error handling (git-fixes).\n- bpf: Fail verification for sign-extension of packet data/data_end/data_meta (git-fixes).\n- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (git-fixes).\n- bpf: Fix error message on kfunc arg type mismatch (git-fixes).\n- bpf: Fix helper writes to read-only maps (git-fixes).\n- bpf: Fix tailcall cases in test_bpf (git-fixes).\n- bpf: Fix truncation bug in coerce_reg_to_size_sx() (git-fixes).\n- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types (git-fixes).\n- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers (git-fixes).\n- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (git-fixes).\n- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos (git-fixes).\n- btf, scripts: rust: drop is_rust_module.sh (bsc#1230414 bsc#1229450).\n- btrfs: send: fix invalid clone operation for file that got its size decreased (git-fixes).\n- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode (stable-fixes).\n- ceph: fix cap ref leak via netfs init_request (bsc#1231384).\n- clk: bcm: bcm53573: fix OF node leak in init (stable-fixes).\n- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (stable-fixes).\n- comedi: ni_routing: tools: Check when the file could not be opened (stable-fixes).\n- config: Disable LAM on x86 (bsc#1217845)\n- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems (git-fixes).\n- crypto: hisilicon/qm - flush all work before driver removed (bsc#1232075)\n- crypto: octeontx - Fix authenc setkey (stable-fixes).\n- crypto: octeontx* - Select CRYPTO_AUTHENC (git-fixes).\n- crypto: octeontx2 - Fix authenc setkey (stable-fixes).\n- crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTO_SIMD and re-enable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Register modules as SIMD (bsc#1230501 ltc#208632).\n- cxgb4: Properly lock TX queue for the selftest (git-fixes).\n- cxgb4: add forgotten u64 ivlan cast before shift (git-fixes).\n- cxgb4: unnecessary check for 0 in the free_sge_txq_uld() function (git-fixes).\n- dcache: keep dentry_hashtable or d_hash_shift even when not used (git-fixes).\n- debugfs: fix automount d_fsdata usage (git-fixes).\n- devlink: Fix command annotation documentation (git-fixes).\n- dmaengine: sh: rz-dmac: handle configs where one address is zero (git-fixes).\n- dmaengine: ti: k3-udma: Set EOP for all TRs in cyclic BCDMA transfer (git-fixes).\n- driver core: bus: Fix double free in driver API bus_register() (stable-fixes).\n- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (stable-fixes).\n- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring (git-fixes).\n- drm/amd/display: Add HDMI DSC native YCbCr422 support (stable-fixes).\n- drm/amd/display: Add disable timeout option (bsc#1231435)\n- drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944)\n- drm/amd/display: Check null pointer before dereferencing se (stable-fixes).\n- drm/amd/display: Clean up dsc blocks in accelerated mode (stable-fixes).\n- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (stable-fixes).\n- drm/amd/display: Remove a redundant check in authenticated_dp (stable-fixes).\n- drm/amd/display: Revert 'Check HDCP returned status' (stable-fixes).\n- drm/amd/display: Round calculated vtotal (stable-fixes).\n- drm/amd/display: Skip to enable dsc if it has been off (stable-fixes).\n- drm/amd/display: Validate backlight caps are sane (stable-fixes).\n- drm/amd/pm: Vangogh: Fix kernel memory out of bounds write (git-fixes).\n- drm/amd: Guard against bad data for ATIF ACPI method (git-fixes).\n- drm/amdgpu/swsmu: Only force workload setup on init (git-fixes).\n- drm/amdgpu/vcn: enable AV1 on both instances (stable-fixes).\n- drm/i915/gem: fix bitwise and logical AND mixup (git-fixes).\n- drm/i915/hdcp: fix connector refcounting (git-fixes).\n- drm/mediatek: Fix get efuse issue for MT8188 DPTX (git-fixes).\n- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds() (git-fixes).\n- drm/msm/dpu: do not always program merge_3d block (git-fixes).\n- drm/msm/dpu: make sure phys resources are properly initialized (git-fixes).\n- drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check (git-fixes).\n- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (git-fixes).\n- drm/msm/dsi: improve/fix dsc pclk calculation (git-fixes).\n- drm/msm: Allocate memory for disp snapshot with kvzalloc() (git-fixes).\n- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (git-fixes).\n- drm/radeon: Fix encoder-\u003epossible_clones (git-fixes).\n- drm/sched: Add locking to drm_sched_entity_modify_sched (git-fixes).\n- drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job (git-fixes).\n- drm/v3d: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (stable-fixes).\n- drm/vc4: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vmwgfx: Handle surface check failure correctly (git-fixes).\n- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS (git-fixes).\n- e1000e: Fix S0ix residency on corporate systems (git-fixes).\n- e1000e: change I219 (19) devices to ADP (git-fixes).\n- e1000e: fix force smbus during suspend flow (git-fixes).\n- e1000e: move force SMBUS near the end of enable_ulp function (git-fixes).\n- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (stable-fixes).\n- eth: bnxt: fix counting packets discarded due to OOM and netpoll (git-fixes).\n- ext4: do not track ranges in fast_commit if inode has inlined data (bsc#1231635).\n- ext4: fix fast commit inode enqueueing during a full journal commit (bsc#1231636).\n- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible() (bsc#1231637).\n- ext4: fix possible tid_t sequence overflows (bsc#1231634).\n- ext4: mark fc as ineligible using an handle in ext4_xattr_set() (bsc#1231640).\n- ext4: use handle to mark fc as ineligible in __track_dentry_update() (bsc#1231639).\n- fat: fix uninitialized variable (git-fixes).\n- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (stable-fixes).\n- fbdev: sisfb: Fix strbuf array overflow (stable-fixes).\n- fgraph: Change the name of cpuhp state to 'fgraph:online' (git-fixes).\n- fgraph: Fix missing unlock in register_ftrace_graph() (git-fixes).\n- fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks (git-fixes).\n- filemap: remove use of wait bookmarks (bsc#1224088).\n- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (git-fixes).\n- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (git-fixes).\n- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (git-fixes).\n- fs/9p: drop inodes immediately on non-.L too (git-fixes).\n- fs/9p: fix the cache always being enabled on files with qid flags (git-fixes).\n- genirq/msi: Fix off-by-one error in msi_domain_alloc() (git-fixes).\n- gpio: aspeed: Add the flush write to ensure the write complete (git-fixes).\n- gpio: aspeed: Use devm_clk api to manage clock source (git-fixes).\n- gpio: davinci: fix lazy disable (git-fixes).\n- gve: Fix XDP TX completion handling when counters overflow (git-fixes).\n- gve: Fix an edge case for TSO skb validity check (git-fixes).\n- gve: ignore nonrelevant GSO type bits when processing TSO headers (git-fixes).\n- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (git-fixes).\n- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (git-fixes).\n- hwmon: (adm9240) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (adt7470) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (max16065) Fix alarm attributes (git-fixes).\n- hwmon: (max16065) Remove use of i2c_match_id() (stable-fixes).\n- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list (stable-fixes).\n- hwmon: (tmp513) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature (git-fixes).\n- i2c: core: Setup i2c_adapter runtime-pm before calling device_add() (git-fixes).\n- i2c: core: fix lockdep warning for sparsely nested adapter chain (git-fixes).\n- i2c: cpm: Remove linux,i2c-index conversion from be32 (git-fixes).\n- i2c: exynos5: Calculate t_scl_l, t_scl_h according to i2c spec (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell Precision 3540 (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell XPS 15 7590 (git-fixes).\n- i2c: i801: Use a different adapter-name for IDF adapters (stable-fixes).\n- i2c: i801: add helper i801_restore_regs (git-fixes).\n- i2c: ismt: kill transaction in hardware on timeout (git-fixes).\n- i2c: ocores: Move system PM hooks to the NOIRQ phase (git-fixes).\n- i2c: ocores: Remove #ifdef guards for PM related functions (git-fixes).\n- i2c: omap: switch to NOIRQ_SYSTEM_SLEEP_PM_OPS() and RUNTIME_PM_OPS() (git-fixes).\n- i2c: omap: wakeup the controller during suspend() callback (git-fixes).\n- i2c: rcar: properly format a debug output (git-fixes).\n- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume (git-fixes).\n- i2c: stm32f7: perform most of irq job in threaded handler (git-fixes).\n- i2c: synquacer: Deal with optional PCLK correctly (git-fixes).\n- i2c: synquacer: Remove a clk reference from struct synquacer_i2c (stable-fixes).\n- i2c: xiic: Try re-initialization on bus busy timeout (git-fixes).\n- i2c: xiic: improve error message when transfer fails to start (stable-fixes).\n- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition (stable-fixes).\n- i40e: Fix XDP program unloading while removing the driver (git-fixes).\n- i40e: Report MFS in decimal base instead of hex (git-fixes).\n- iavf: Fix TC config comparison with existing adapter TC config (git-fixes).\n- ice: Fix VSI list rule with ICE_SW_LKUP_LAST type (git-fixes).\n- ice: Fix checking for unsupported keys on non-tunnel device (git-fixes).\n- ice: Fix lldp packets dropping after changing the number of channels (git-fixes).\n- ice: Fix netif_is_ice() in Safe Mode (git-fixes).\n- ice: Fix package download algorithm (git-fixes).\n- ice: Fix recipe read procedure (git-fixes).\n- ice: Fix reset handler (git-fixes).\n- ice: Flush FDB entries before reset (git-fixes).\n- ice: Interpret .set_channels() input differently (git-fixes).\n- ice: Rebuild TC queues on VSI queue reconfiguration (git-fixes).\n- ice: Reject pin requests with unsupported flags (git-fixes).\n- ice: add flag to distinguish reset from .ndo_bpf in XDP rings config (git-fixes).\n- ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (git-fixes).\n- ice: avoid IRQ collision to fix init failure on ACPI S3 resume (git-fixes).\n- ice: clear port vlan config during reset (git-fixes).\n- ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins (git-fixes).\n- ice: do not bring the VSI up, if it was down before the XDP setup (git-fixes).\n- ice: do not busy wait for Rx queue disable in ice_qp_dis() (git-fixes).\n- ice: fix 200G PHY types to link speed mapping (git-fixes).\n- ice: fix 200G link speed message log (git-fixes).\n- ice: fix ICE_LAST_OFFSET formula (git-fixes).\n- ice: fix VLAN replay after reset (git-fixes).\n- ice: fix VSI lists confusion when adding VLANs (git-fixes).\n- ice: fix accounting for filters shared by multiple VSIs (git-fixes).\n- ice: fix accounting if a VLAN already exists (git-fixes).\n- ice: fix iteration of TLVs in Preserved Fields Area (git-fixes).\n- ice: fix page reuse when PAGE_SIZE is over 8k (git-fixes).\n- ice: fix reads from NVM Shadow RAM on E830 and E825-C devices (git-fixes).\n- ice: fix truesize operations for PAGE_SIZE \u003e= 8192 (git-fixes).\n- ice: implement AQ download pkg retry (git-fixes).\n- ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors() (git-fixes).\n- ice: remove af_xdp_zc_qps bitmap (git-fixes).\n- ice: replace synchronize_rcu with synchronize_net (git-fixes).\n- ice: respect netif readiness in AF_XDP ZC related ndo's (git-fixes).\n- ice: set correct dst VSI in only LAN filters (git-fixes).\n- ice: tc: allow zero flags in parsing tc flower (git-fixes).\n- ice: tc: check src_vsi in case of traffic from VF (git-fixes).\n- ice: use proper macro for testing bit (git-fixes).\n- idpf: Interpret .set_channels() input differently (git-fixes).\n- idpf: avoid bloating \u0026idpf_q_vector with big %NR_CPUS (git-fixes).\n- idpf: do not enable NAPI and interrupts prior to allocating Rx buffers (git-fixes).\n- idpf: do not skip over ethtool tcp-data-split setting (git-fixes).\n- idpf: fix UAFs when destroying the queues (git-fixes).\n- idpf: fix memleak in vport interrupt configuration (git-fixes).\n- idpf: fix memory leaks and crashes while performing a soft reset (git-fixes).\n- ieee802154: Fix build error (git-fixes).\n- igb: Always call igb_xdp_ring_update_tail() under Tx lock (git-fixes).\n- igb: Fix not clearing TimeSync interrupts for 82580 (git-fixes).\n- igc: Fix double reset adapter triggered from a single taprio cmd (git-fixes).\n- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (git-fixes).\n- igc: Fix qbv tx latency by setting gtxoffset (git-fixes).\n- igc: Fix qbv_config_change_errors logics (git-fixes).\n- igc: Fix reset adapter logics when tx mode change (git-fixes).\n- igc: Unlock on error in igc_io_resume() (git-fixes).\n- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling (git-fixes).\n- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (git-fixes).\n- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (git-fixes).\n- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() (git-fixes).\n- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (git-fixes).\n- iio: light: opt3001: add missing full-scale range value (git-fixes).\n- iio: light: veml6030: fix ALS sensor resolution (git-fixes).\n- iio: light: veml6030: fix IIO device retrieval from embedded device (git-fixes).\n- iio: light: veml6030: fix microlux value calculation (git-fixes).\n- iio: magnetometer: ak8975: Convert enum-\u003epointer for data in the match tables (stable-fixes).\n- iio: magnetometer: ak8975: Fix 'Unexpected device' error (git-fixes).\n- iio: magnetometer: ak8975: drop incorrect AK09116 compatible (git-fixes).\n- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- io_uring/eventfd: move to more idiomatic RCU free usage (git-fixes).\n- io_uring/io-wq: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/io-wq: inherit cpuset of cgroup in io worker (git-fixes).\n- io_uring/net: harden multishot termination case for recv (git-fixes).\n- io_uring/rw: fix cflags posting for single issue multishot read (git-fixes).\n- io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN (git-fixes).\n- io_uring/sqpoll: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/sqpoll: do not put cpumask on stack (git-fixes).\n- io_uring/sqpoll: retain test for whether the CPU is valid (git-fixes).\n- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL (git-fixes).\n- iommu/amd: Allocate the page table root using GFP_KERNEL (git-fixes).\n- iommu/amd: Do not set the D bit on AMD v2 table entries (git-fixes).\n- iommu/amd: Fix typo of , instead of ; (git-fixes).\n- iommu/vt-d: Always reserve a domain ID for identity setup (git-fixes).\n- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (git-fixes).\n- iommufd: Check the domain owner of the parent before creating a nesting domain (git-fixes).\n- iommufd: Protect against overflow of ALIGN() during iova allocation (git-fixes).\n- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit (bsc#1231638).\n- jfs: Fix sanity check in dbMount (git-fixes).\n- jfs: Fix uaf in dbFreeBits (git-fixes).\n- jfs: Fix uninit-value access of new_ea in ea_buffer (git-fixes).\n- jfs: UBSAN: shift-out-of-bounds in dbFindBits (git-fixes).\n- jfs: check if leafidx greater than num leaves per dmap tree (git-fixes).\n- jump_label: Fix static_key_slow_dec() yet again (git-fixes).\n- kABI fix of VM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- kABI: bpf: enum bpf_{type_flag,arg_type} kABI workaround (git-fixes).\n- kABI: bpf: struct bpf_insn_acces_aux kABI workaround (git-fixes).\n- kasan: Fix Software Tag-Based KASAN with GCC (git-fixes).\n- kbuild, bpf: Use test-ge check for v1.25-only pahole (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Add module-specific pahole flags for distilled base BTF (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later (bsc#1230414 bsc#1229450).\n- kbuild: avoid too many execution of scripts/pahole-flags.sh (bsc#1230414 bsc#1229450).\n- kbuild: bpf: Tell pahole to DECL_TAG kfuncs (bsc#1230414 bsc#1229450).\n- kconfig: qconf: fix buffer overflow in debug links (git-fixes).\n- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry (git-fixes).\n- keys: Fix overwrite of key expiration on instantiation (git-fixes).\n- kthread: unpark only parked kthread (git-fixes).\n- lib/xarray: introduce a new helper xas_get_order (bsc#1231617).\n- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (git-fixes).\n- macsec: do not increment counters for an unrelated SA (git-fixes).\n- maple_tree: correct tree corruption on spanning store (git-fixes).\n- media: i2c: imx335: Enable regulator supplies (stable-fixes).\n- media: imx335: Fix reset-gpio handling (git-fixes).\n- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (git-fixes).\n- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() (stable-fixes).\n- mei: use kvmalloc for read buffer (git-fixes).\n- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).\n- minmax: avoid overly complex min()/max() macro arguments in xen (git-fixes).\n- mlx5: avoid truncating error message (git-fixes).\n- mlx5: stop warning for 64KB pages (git-fixes).\n- mm/filemap: optimize filemap folio adding (bsc#1231617).\n- mm/filemap: return early if failed to allocate memory for split (bsc#1231617).\n- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point (git-fixes).\n- mm: mmap: no need to call khugepaged_enter_vma() for stack (jsc#PED-10978).\n- modpost: fix acpi MODULE_DEVICE_TABLE built with mismatched endianness (git-fixes).\n- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (git-fixes).\n- module: abort module loading when sysfs setup suffer errors (git-fixes).\n- nbd: fix race between timeout and normal completion (bsc#1230918).\n- net/mlx5: Add missing masks and QoS bit masks for scheduling elements (git-fixes).\n- net/mlx5: Added cond_resched() to crdump collection (git-fixes).\n- net/mlx5: Check capability for fw_reset (git-fixes).\n- net/mlx5: Check for invalid vector index on EQ creation (git-fixes).\n- net/mlx5: Explicitly set scheduling element and TSAR type (git-fixes).\n- net/mlx5: Fix command bitmask initialization (git-fixes).\n- net/mlx5: Fix error handling in irq_pool_request_irq (git-fixes).\n- net/mlx5: Lag, do bond only if slaves agree on roce state (git-fixes).\n- net/mlx5: Lag, do not use the hardcoded value of the first port (git-fixes).\n- net/mlx5: Stop waiting for PCI if pci channel is offline (git-fixes).\n- net/mlx5: Unregister notifier on eswitch init failure (git-fixes).\n- net/mlx5: Update the list of the PCI supported devices (git-fixes).\n- net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (git-fixes).\n- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map (git-fixes).\n- net/mlx5e: Add missing link modes to ptys2ethtool_map (git-fixes).\n- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (git-fixes).\n- net/mlx5e: Correctly report errors for ethtool rx flows (git-fixes).\n- net/mlx5e: Do not call cleanup on profile rollback failure (git-fixes).\n- net/mlx5e: Fix IPsec tunnel mode offload feature check (git-fixes).\n- net/mlx5e: Fix UDP GSO for encapsulated packets (git-fixes).\n- net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (git-fixes).\n- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (git-fixes).\n- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (git-fixes).\n- net: mana: Implement get_ringparam/set_ringparam for mana (bsc#1229891).\n- net: mana: Improve mana_set_channels() in low mem conditions (bsc#1230289).\n- net: phy: Remove LED entry from LEDs list on unregister (git-fixes).\n- net: phy: bcm84881: Fix some error handling paths (git-fixes).\n- net: phy: dp83869: fix memory corruption when enabling fiber (git-fixes).\n- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (git-fixes).\n- net: qede: use return from qede_parse_actions() (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flow_spec (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flower (git-fixes).\n- net: stmmac: dwmac-tegra: Fix link bring-up sequence (git-fixes)\n- net: sysfs: Fix /sys/class/net/\u0026lt;iface\u003e path for statistics (git-fixes).\n- net: test for not too small csum_start in virtio_net_hdr_to_skb() (git-fixes).\n- net: usb: usbnet: fix name regression (get-fixes).\n- net: usb: usbnet: fix race in probe failure (git-fixes).\n- netdevsim: use cond_resched() in nsim_dev_trap_report_work() (git-fixes).\n- nfs: fix memory leak in error path of nfs4_do_reclaim (git-fixes).\n- nfsd: call cache_put if xdr_reserve_space returns NULL (git-fixes).\n- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (git-fixes).\n- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (git-fixes).\n- nfsd: fix refcount leak when file is unhashed after being found (git-fixes).\n- nfsd: map the EBADMSG to nfserr_io to avoid warning (git-fixes).\n- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (git-fixes).\n- nfsd: return -EINVAL when namelen is 0 (git-fixes).\n- nilfs2: fix kernel bug due to missing clearing of buffer delay flag (git-fixes).\n- nouveau/dmem: Fix privileged error in copy engine channel (git-fixes).\n- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (git-fixes).\n- nouveau/gsp: Avoid addressing beyond end of rpc-\u003eentries (stable-fixes).\n- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- nvme-multipath: suppress partition scan until the disk is ready (bsc#1228244).\n- nvme-pci: fix race condition between reset and nvme_dev_disable() (git-fixes).\n- nvme-pci: qdepth 1 quirk (git-fixes).\n- nvme-pci: set doorbell config before unquiescing (git-fixes).\n- nvme: disable CC.CRIME (NVME_CC_CRIME) (jsc#PED-9901).\n- nvme: null terminate nvme_tls_attrs (git-fixes).\n- nvme: re-fix error-handling for io_uring nvme-passthrough (git-fixes).\n- nvmet-auth: assign dh_key to NULL after kfree_sensitive (git-fixes).\n- ocfs2: fix the la space leak when unmounting an ocfs2 volume (git-fixes).\n- ocfs2: fix uninit-value in ocfs2_get_block() (git-fixes).\n- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (git-fixes).\n- parport: Proper fix for array out-of-bounds access (git-fixes).\n- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check (git-fixes).\n- phy: qcom: qmp-combo: move driver data initialisation earlier (git-fixes).\n- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend (git-fixes).\n- phy: tegra: xusb: Add error pointer check in xusb.c (git-fixes).\n- phy: ti: phy-j721e-wiz: fix usxgmii configuration (git-fixes).\n- pinctrl: apple: check devm_kasprintf() returned value (git-fixes).\n- pinctrl: ocelot: fix system hang on level based interrupts (stable-fixes).\n- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug (git-fixes).\n- platform/x86: dell-sysman: add support for alienware products (stable-fixes).\n- platform/x86: dell-wmi: Ignore suspend notifications (stable-fixes).\n- platform/x86: lenovo-ymc: Ignore the 0x0 state (stable-fixes).\n- platform/x86: touchscreen_dmi: add nanote-next quirk (stable-fixes).\n- power: reset: brcmstb: Do not go into infinite loop if reset fails (stable-fixes).\n- powercap: intel_rapl: Fix off by one in get_rpi() (git-fixes).\n- powerpc/64: Convert patch_instruction() to patch_u32() (bsc#1194869).\n- powerpc/boot: Handle allocation failure in simple_realloc() (bsc#1194869).\n- powerpc/boot: Only free if realloc() succeeds (bsc#1194869).\n- powerpc/code-patching: Add generic memory patching (bsc#1194869).\n- powerpc/code-patching: Perform hwsync in __patch_instruction() in case of failure (bsc#1194869).\n- powerpc/crypto: do not build aes-gcm-p10 by default (bsc#1230501 ltc#208632).\n- powerpc/crypto: fix missing skcipher dependency for aes-gcm-p10 (bsc#1230501 ltc#208632).\n- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace (bsc#1194869).\n- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (bsc#1194869).\n- powerpc/xmon: Fix disassembly CPU feature checks (bsc#1065729).\n- printk: Add notation to console_srcu locking (bsc#1232183).\n- qed: avoid truncating work queue length (git-fixes).\n- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (bsc#1226631).\n- rcu: Fix buffer overflow in print_cpu_stall_info() (bsc#1226623).\n- rpm/check-for-config-changes: add HAVE_RUST and RUSTC_SUPPORTS_ to IGNORED_CONFIGS_RE They depend on SHADOW_CALL_STACK.\n- rpm/release-projects: Add SLFO projects (bsc#1231293).\n- rpmsg: glink: Handle rejected intent request better (git-fixes).\n- runtime constants: add default dummy infrastructure (git-fixes).\n- runtime constants: add x86 architecture support (git-fixes).\n- s390/mm: Add cond_resched() to cmm_alloc/free_pages() (bsc#1228747).\n- s390/pci: Handle PCI error codes other than 0x3a (git-fixes bsc#1232629).\n- s390/sclp: Deactivate sclp after all its users (git-fixes bsc#1232628).\n- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (git-fixes bsc#1232627).\n- scsi: fnic: Move flush_work initialization out of if block (bsc#1230055).\n- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd() (bsc#1232757).\n- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (bsc#1232757).\n- scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (bsc#1232757).\n- scsi: lpfc: Remove trailing space after \\n newline (bsc#1232757).\n- scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs (bsc#1232757 bsc#1228119).\n- scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to KERN_WARNING (bsc#1232757).\n- scsi: lpfc: Support loopback tests with VMID enabled (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.5 (bsc#1232757).\n- scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE (bsc#1232757).\n- selftests/bpf: Add a test case to write mtu result into .rodata (git-fixes).\n- selftests/bpf: Add a test case to write strtol result into .rodata (git-fixes).\n- selftests/bpf: Add test for sign extension in coerce_subreg_to_size_sx() (git-fixes).\n- selftests/bpf: Add test for truncation after sign extension in coerce_reg_to_size_sx() (git-fixes).\n- selftests/bpf: Add tests for ldsx of pkt data/data_end/data_meta accesses (git-fixes).\n- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test (git-fixes).\n- selftests/bpf: Rename ARG_PTR_TO_LONG test description (git-fixes).\n- selftests/bpf: test for malformed BPF_CORE_TYPE_ID_LOCAL relocation (git-fixes).\n- serial: imx: Update mctrl old_status on RTSD interrupt (git-fixes).\n- serial: protect uart_port_dtr_rts() in uart_shutdown() too (stable-fixes).\n- soundwire: intel_bus_common: enable interrupts before exiting reset (stable-fixes).\n- spi: atmel-quadspi: Fix wrong register value written to MR (git-fixes).\n- spi: mtk-snfi: fix kerneldoc for mtk_snand_is_page_ops() (git-fixes).\n- spi: s3c64xx: fix timeout counters in flush_fifo (git-fixes).\n- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select (git-fixes).\n- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- splice: always fsnotify_access(in), fsnotify_modify(out) on success (git-fixes).\n- splice: fsnotify_access(fd)/fsnotify_modify(fd) in vmsplice (git-fixes).\n- splice: fsnotify_access(in), fsnotify_modify(out) on success in tee (git-fixes).\n- srcu: Fix callbacks acceleration mishandling (git-fixes).\n- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (git-fixes).\n- sumversion: Fix a memory leak in get_src_version() (git-fixes).\n- supported.conf: mark nhpoly1305 module as supported (bsc#1231035)\n- supported.conf: mark ultravisor userspace access as supported (bsc#1232090)\n- task_work: add kerneldoc annotation for 'data' argument (git-fixes).\n- thunderbolt: Improve DisplayPort tunnel setup process to be more robust (stable-fixes).\n- tools: hv: rm .*.cmd when make clean (git-fixes).\n- tracing/hwlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/osnoise: Fix build when timerlat is not enabled (git-fixes).\n- tracing/osnoise: Skip running osnoise if all instances are off (git-fixes).\n- tracing/osnoise: Switch from PF_NO_SETAFFINITY to migrate_disable (git-fixes).\n- tracing/osnoise: Use a cpumask to know what threads are kthreads (git-fixes).\n- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (git-fixes).\n- tracing/timerlat: Add user-space interface (git-fixes).\n- tracing/timerlat: Drop interface_lock in stop_kthread() (git-fixes).\n- tracing/timerlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (git-fixes).\n- tracing/timerlat: Move hrtimer_init to timerlat_fd open() (git-fixes).\n- tracing/timerlat: Only clear timer if a kthread exists (git-fixes).\n- tracing: Consider the NULL character when validating the event length (git-fixes).\n- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (stable-fixes).\n- ubifs: Fix adding orphan entry twice for the same inode (git-fixes).\n- ubifs: Fix unattached xattr inode if powercut happens after deleting (git-fixes).\n- ubifs: add check for crypto_shash_tfm_digest (git-fixes).\n- ubifs: dbg_orphan_check: Fix missed key type checking (git-fixes).\n- unicode: Do not special case ignorable code points (stable-fixes).\n- uprobe: avoid out-of-bounds memory access of fetching args (git-fixes).\n- uprobes: encapsulate preparation of uprobe args buffer (git-fixes).\n- uprobes: introduce the global struct vm_special_mapping xol_mapping (bsc#1231114).\n- uprobes: turn xol_area-\u003epages into xol_area-\u003epage (bsc#1231114).\n- usb: chipidea: udc: enable suspend interrupt after usb reset (stable-fixes).\n- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario (stable-fixes).\n- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG (git-fixes).\n- usb: dwc3: core: Stop processing of pending events if controller is halted (git-fixes).\n- usb: gadget: core: force synchronous registration (git-fixes).\n- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant (stable-fixes).\n- usb: gadget: f_uac2: fix non-newline-terminated function name (stable-fixes).\n- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store (git-fixes).\n- usb: phy: Fix API devm_usb_put_phy() can not release the phy (git-fixes).\n- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (stable-fixes).\n- usb: typec: altmode should keep reference to parent (git-fixes).\n- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (git-fixes).\n- usb: xhci: Fix problem with xhci resume from suspend (stable-fixes).\n- usb: xhci: fix loss of data on Cadence xHC (git-fixes).\n- usbip: tools: Fix detach_port() invalid port error path (git-fixes).\n- usbnet: fix cyclical race on disconnect with work queue (git-fixes).\n- vdpa: Fix an error handling path in eni_vdpa_probe() (git-fixes).\n- vdpa_sim_blk: Fix the potential leak of mgmt_dev (git-fixes).\n- vdpa_sim_blk: allocate the buffer zeroed (git-fixes).\n- vduse: avoid using __GFP_NOFAIL (git-fixes).\n- vfs: dcache: move hashlen_hash() from callers into d_hash() (git-fixes).\n- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (git-fixes).\n- vhost_vdpa: assign irq bypass producer token correctly (git-fixes).\n- virtio_console: fix misc probe bugs (git-fixes).\n- vmalloc: modify the alloc_vmap_area() error message for better diagnostics (jsc#PED-10978).\n- vmxnet3: Add XDP support (bsc#1226498).\n- vmxnet3: Fix missing reserved tailroom (bsc#1226498).\n- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame (bsc#1226498).\n- vmxnet3: add command to allow disabling of offloads (bsc#1226498).\n- vmxnet3: add latency measurement support in vmxnet3 (bsc#1226498).\n- vmxnet3: prepare for version 9 changes (bsc#1226498).\n- vmxnet3: update to version 9 (bsc#1226498).\n- vt: prevent kernel-infoleak in con_font_get() (git-fixes).\n- wifi: ath10k: Fix memory leak in management tx (git-fixes).\n- wifi: ath11k: Fix invalid ring usage in full monitor mode (git-fixes).\n- wifi: ath11k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (stable-fixes).\n- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (stable-fixes).\n- wifi: brcm80211: BRCM_TRACING should depend on TRACING (git-fixes).\n- wifi: cfg80211: Set correct chandef when starting CAC (stable-fixes).\n- wifi: cfg80211: clear wdev-\u003ecqm_config pointer on free (git-fixes).\n- wifi: iwlegacy: Fix 'field-spanning write' warning in il_enqueue_hcmd() (git-fixes).\n- wifi: iwlwifi: allow only CN mcc from WRDD (stable-fixes).\n- wifi: iwlwifi: config: label 'gl' devices as discrete (git-fixes).\n- wifi: iwlwifi: mvm: Fix a race in scan abort flow (stable-fixes).\n- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (git-fixes).\n- wifi: iwlwifi: mvm: avoid NULL pointer dereference (stable-fixes).\n- wifi: iwlwifi: mvm: do not add default link in fw restart flow (git-fixes).\n- wifi: iwlwifi: mvm: do not leak a link on AP removal (git-fixes).\n- wifi: iwlwifi: mvm: drop wrong STA selection in TX (stable-fixes).\n- wifi: iwlwifi: mvm: use correct key iteration (stable-fixes).\n- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL (stable-fixes).\n- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (git-fixes).\n- wifi: mac80211: fix RCU list iterations (stable-fixes).\n- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (git-fixes).\n- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation (stable-fixes).\n- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable (stable-fixes).\n- wifi: mt76: mt7915: hold dev-\u003emt76.mutex while disabling tx worker (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (stable-fixes).\n- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c (stable-fixes).\n- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons (git-fixes).\n- wifi: rtw88: select WANT_DEV_COREDUMP (stable-fixes).\n- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements (stable-fixes).\n- wifi: rtw89: avoid to add interface to list twice when SER (stable-fixes).\n- wifi: rtw89: correct base HT rate mask for firmware (stable-fixes).\n- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load (git-fixes).\n- x86/Documentation: Indent 'note::' directive for protocol version number note (git-fixes).\n- x86/PCI: Check pcie_find_root_port() return for NULL (git-fixes).\n- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h (git-fixes).\n- x86/apic: Always explicitly disarm TSC-deadline timer (git-fixes).\n- x86/apic: Make x2apic_disable() work correctly (git-fixes).\n- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (git-fixes).\n- x86/bugs: Skip RSB fill at VMEXIT (git-fixes).\n- x86/cpufeatures: Add a IBPB_NO_RET BUG flag (git-fixes).\n- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (git-fixes).\n- x86/entry: Have entry_ibpb() invalidate return predictions (git-fixes).\n- x86/entry: Remove unwanted instrumentation in common_interrupt() (git-fixes).\n- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency (git-fixes).\n- x86/mm: Use IPIs to synchronize LAM enablement (git-fixes).\n- x86/resctrl: Annotate get_mem_config() functions as __init (git-fixes).\n- x86/resctrl: Avoid overflow in MB settings in bw_validate() (git-fixes).\n- x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler (git-fixes).\n- x86: do the user address masking outside the user access area (git-fixes).\n- x86: fix user address masking non-canonical speculation issue (git-fixes).\n- x86: make the masked_user_access_begin() macro use its argument only once (git-fixes).\n- x86: support user address masking instead of non-speculative conditional (git-fixes).\n- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2 (git-fixes).\n- xfs: check shortform attr entry flags specifically (git-fixes).\n- xfs: convert delayed extents to unwritten when zeroing post eof blocks (git-fixes).\n- xfs: fix finding a last resort AG in xfs_filestream_pick_ag (git-fixes).\n- xfs: fix freeing speculative preallocations for preallocated files (git-fixes).\n- xfs: make sure sb_fdblocks is non-negative (git-fixes).\n- xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional (git-fixes).\n- xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset (git-fixes).\n- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent (git-fixes).\n- xfs: validate recovered name buffers when recovering xattr items (git-fixes).\n- xhci: Add a quirk for writing ERST in high-low order (git-fixes).\n- xhci: Fix Link TRB DMA in command ring stopped completion event (git-fixes).\n- xhci: Fix incorrect stream context type macro (git-fixes).\n- xhci: Mitigate failed set dequeue pointer commands (git-fixes).\n- xhci: Use pm_runtime_get to prevent RPM on unsupported systems (git-fixes).\n- xhci: tegra: fix checked USB2 port number (git-fixes).\n- zonefs: Improve error handling (git-fixes).\n","status":"published","published":"2024-11-13T10:13:55Z","modified":"2026-02-04T03:18:26.504409Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:4318-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).\n- CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).\n- CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).\n- CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562).\n- CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).\n- CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).\n- CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).\n- CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).\n- CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).\n- CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb-\u003ehead (bsc#1224518).\n- CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).\n- CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).\n- CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).\n- CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).\n- CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).\n- CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).\n- CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).\n- CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).\n- CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).\n- CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).\n- CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).\n- CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).\n- CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command  (bsc#1228620).\n- CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).\n- CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).\n- CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).\n- CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).\n- CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).\n- CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).\n- CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).\n- CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).\n- CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)\n- CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).\n- CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).\n- CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).\n- CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).\n- CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).\n- CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).\n- CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).\n- CVE-2024-46813: drm/amd/display: Check link_index before accessing dc-\u003elinks (bsc#1231191).\n- CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).\n- CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).\n- CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).\n- CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).\n- CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).\n- CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).\n- CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).\n- CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100).\n- CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).\n- CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).\n- CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).\n- CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (bsc#1231435).\n- CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (bsc#1231436).\n- CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).\n- CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442).\n- CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).\n- CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()\u0026iput() (bsc#1231930).\n- CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).\n- CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).\n- CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003).\n- CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).\n- CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).\n- CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946).\n- CVE-2024-47704: drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944).\n- CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872).\n- CVE-2024-47706: block, bfq: fix possible UAF for bfqq-\u003ebic with merge chain (bsc#1231942).\n- CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).\n- CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049).\n- CVE-2024-47727: x86/tdx: Fix 'in-kernel MMIO' check (bsc#1232116).\n- CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).\n- CVE-2024-47731: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (bsc#1232117).\n- CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).\n- CVE-2024-47741: btrfs: fix race setting file private on concurrent lseek using same fd (bsc#1231869).\n- CVE-2024-47745: mm: call the security_mmap_file() LSM hook in remap_file_pages() (bsc#1232135).\n- CVE-2024-47747: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (bsc#1232145).\n- CVE-2024-47752: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning (bsc#1232130).\n- CVE-2024-47753: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning (bsc#1231868).\n- CVE-2024-47754: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning (bsc#1232131).\n- CVE-2024-49852: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (bsc#1232819).\n- CVE-2024-49864: rxrpc: Fix a race between socket set up and I/O thread creation (bsc#1232256).\n- CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount (bsc#1232262).\n- CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).\n- CVE-2024-49881: ext4: update orig_path in ext4_find_extent() (bsc#1232201).\n- CVE-2024-49882: ext4: fix double brelse() the buffer of the extents path (bsc#1232200).\n- CVE-2024-49883: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199).\n- CVE-2024-49888: bpf: Fix a sdiv overflow issue (bsc#1232208).\n- CVE-2024-49890: drm/amd/pm: ensure the fw_info is not null before using it (bsc#1232217).\n- CVE-2024-49892: drm/amd/display: Initialize get_bytes_per_element's default to 1 (bsc#1232220).\n- CVE-2024-49894: drm/amd/display: Fix index out of bounds in degamma hardware format translation (bsc#1232354).\n- CVE-2024-49895: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (bsc#1232352).\n- CVE-2024-49896: drm/amd/display: Check stream before comparing them (bsc#1232221).\n- CVE-2024-49897: drm/amd/display: Check phantom_stream before it is used (bsc#1232355).\n- CVE-2024-49898: drm/amd/display: Check null-initialized variables (bsc#1232222).\n- CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).\n- CVE-2024-49901: drm/msm/adreno: Assign msm_gpu-\u003epdev earlier to avoid nullptrs (bsc#1232305).\n- CVE-2024-49906: drm/amd/display: Check null pointer before try to access it (bsc#1232332).\n- CVE-2024-49907: drm/amd/display: Check null pointers before using dc-\u003eclk_mgr (bsc#1232334).\n- CVE-2024-49908: drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (bsc#1232335).\n- CVE-2024-49909: drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func (bsc#1232337).\n- CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (bsc#1232366).\n- CVE-2024-49912: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (bsc#1232367).\n- CVE-2024-49913: drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (bsc#1232307).\n- CVE-2024-49914: drm/amd/display: Add null check for pipe_ctx-\u003eplane_state in (bsc#1232369).\n- CVE-2024-49917: drm/amd/display: Add NULL check for clk_mgr and clk_mgr-\u003efuncs in dcn30_init_hw (bsc#1231965).\n- CVE-2024-49918: drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer (bsc#1231967).\n- CVE-2024-49919: drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer (bsc#1231968).\n- CVE-2024-49920: drm/amd/display: Check null pointers before multiple uses (bsc#1232313).\n- CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).\n- CVE-2024-49922: drm/amd/display: Check null pointers before using them (bsc#1232374).\n- CVE-2024-49923: drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags (bsc#1232361).\n- CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)\n- CVE-2024-49933: blk_iocost: fix more out of bound shifts (bsc#1232368).\n- CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).\n- CVE-2024-49936: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424).\n- CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).\n- CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).\n- CVE-2024-49946: ppp: do not assume bh is held in ppp_channel_bridge_input() (bsc#1232164).\n- CVE-2024-49949: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (bsc#1232160).\n- CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).\n- CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).\n- CVE-2024-49953: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice (bsc#1232156).\n- CVE-2024-49954: static_call: Replace pointless WARN_ON() in static_call_module_notify() (bsc#1232155).\n- CVE-2024-49958: ocfs2: reserve space for inline xattr before attaching reflink tree (bsc#1232151).\n- CVE-2024-49959: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (bsc#1232149).\n- CVE-2024-49960: ext4: fix timer use-after-free on failed mount (bsc#1232395).\n- CVE-2024-49967: ext4: no need to continue when the number of entries is 1 (bsc#1232140).\n- CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).\n- CVE-2024-49969: drm/amd/display: Fix index out of bounds in DCN30 color transformation (bsc#1232519).\n- CVE-2024-49972: drm/amd/display: Deallocate DML memory if allocation fails (bsc#1232315).\n- CVE-2024-49973: r8169: add tally counter fields added with RTL8125 (bsc#1232105).\n- CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383).\n- CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).\n- CVE-2024-49986: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors (bsc#1232093).\n- CVE-2024-49987: bpftool: Fix undefined behavior in qsort(NULL, 0, ...) (bsc#1232258).\n- CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).\n- CVE-2024-49991: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer (bsc#1232282).\n- CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (bsc#1232316).\n- CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).\n- CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).\n- CVE-2024-50000: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (bsc#1232085).\n- CVE-2024-50001: net/mlx5: Fix error path in multi-packet WQE transmit (bsc#1232084).\n- CVE-2024-50002: static_call: Handle module init failure correctly in static_call_del_module() (bsc#1232083).\n- CVE-2024-50003: drm/amd/display: Fix system hang while resume with TBT monitor (bsc#1232385).\n- CVE-2024-50004: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 (bsc#1232396).\n- CVE-2024-50006: ext4: fix i_data_sem unlock order in ext4_ind_migrate() (bsc#1232442).\n- CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).\n- CVE-2024-50012: cpufreq: Avoid a bad reference count on CPU node (bsc#1232386).\n- CVE-2024-50014: ext4: fix access to uninitialised lock in fc replay path (bsc#1232446).\n- CVE-2024-50015: ext4: dax: fix overflowing extents beyond inode size when partially writing (bsc#1232079).\n- CVE-2024-50020: ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() (bsc#1231989).\n- CVE-2024-50021: ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() (bsc#1231957).\n- CVE-2024-50022: device-dax: correct pgoff align in dax_set_mapping() (bsc#1231956).\n- CVE-2024-50024: net: Fix an unsafe loop on the list (bsc#1231954).\n- CVE-2024-50027: thermal: core: Free tzp copy along with the thermal zone (bsc#1231951).\n- CVE-2024-50028: thermal: core: Reference count the zone in thermal_zone_get_by_id() (bsc#1231950).\n- CVE-2024-50033: slip: make slhc_remember() more robust against malicious packets (bsc#1231914).\n- CVE-2024-50035: ppp: fix ppp_async_encode() illegal access (bsc#1232392).\n- CVE-2024-50040: igb: Do not bring the device up after non-fatal error (bsc#1231908).\n- CVE-2024-50041: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash (bsc#1231907).\n- CVE-2024-50042: ice: Fix increasing MSI-X on VF (bsc#1231906).\n- CVE-2024-50045: netfilter: br_netfilter: fix panic with metadata_dst skb (bsc#1231903).\n- CVE-2024-50046: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (bsc#1231902).\n- CVE-2024-50047: smb: client: fix UAF in async decryption (bsc#1232418).\n- CVE-2024-50059: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (bsc#1232345).\n- CVE-2024-50060: io_uring: check if we need to reschedule during overflow flush (bsc#1232417).\n- CVE-2024-50063: bpf: Prevent tail call between progs attached to different hooks (bsc#1232435).\n- CVE-2024-50064: zram: free secondary algorithms names (bsc#1231901).\n- CVE-2024-50080: ublk: do not allow user copy for unprivileged device (bsc#1232502).\n- CVE-2024-50081: blk-mq: setup queue -\u003etag_set before initializing hctx (bsc#1232501).\n- CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).\n- CVE-2024-50084: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() (bsc#1232494).\n- CVE-2024-50087: btrfs: fix uninitialized pointer free on read_alloc_one_name() error (bsc#1232499).\n- CVE-2024-50088: btrfs: fix uninitialized pointer free in add_inode_ref() (bsc#1232498).\n- CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).\n- CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).\n- CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).\n- CVE-2024-50124: Bluetooth: ISO: Fix UAF on iso_sock_timeout (bsc#1232926).\n- CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).\n- CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).\n- CVE-2024-50128: net: wwan: fix global oob in wwan_rtnl_policy (bsc#1232905).\n- CVE-2024-50130: netfilter: bpf: must hold reference on net namespace (bsc#1232894).\n- CVE-2024-50138: bpf: Use raw_spinlock_t in ringbuf (bsc#1232935).\n- CVE-2024-50139: KVM: arm64: Fix shift-out-of-bounds bug (bsc#1233062).\n- CVE-2024-50145: octeon_ep: add SKB allocation failures handling in __octep_oq_process_rx() (bsc#1233044).\n- CVE-2024-50153: scsi: target: core: Fix null-ptr-deref in target_alloc_device() (bsc#1233061).\n- CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070).\n- CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050).\n- CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049).\n- CVE-2024-50169: vsock: Update rx_bytes on read_skb() (bsc#1233320).\n- CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057).\n- CVE-2024-50177: drm/amd/display: fix a UBSAN warning in DML2.1 (bsc#1233115).\n- CVE-2024-50182: secretmem: disable memfd_secret() if arch cannot set direct map (bsc#1233129).\n- CVE-2024-50184: virtio_pmem: Check device status before requesting flush (bsc#1233135).\n- CVE-2024-50186: net: explicitly clear the sk pointer, when pf-\u003ecreate fails (bsc#1233110).\n- CVE-2024-50192: irqchip/gic-v4: Do not allow a VMOVP on a dying VPE (bsc#1233106).\n- CVE-2024-50195: posix-clock: Fix missing timespec64 check in pc_clock_settime() (bsc#1233103).\n- CVE-2024-50225: btrfs: fix error propagation of split bios (bsc#1233193).\n- CVE-2024-50230: nilfs2: fix kernel bug due to missing clearing of checked flag (bsc#1233206).\n- CVE-2024-50245: fs/ntfs3: Fix possible deadlock in mi_read (bsc#1233203).\n- CVE-2024-50246: fs/ntfs3: Add rough attr alloc_size check (bsc#1233207).\n- CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233226).\n- CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).\n- CVE-2024-50257: netfilter: Fix use-after-free in get_info() (bsc#1233244).\n- CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (bsc#1233253).\n- CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-\u003etrans (bsc#1233453).\n- CVE-2024-50271: signal: restore the override_rlimit logic (bsc#1233460).\n- CVE-2024-50273: btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1233462).\n- CVE-2024-50274: idpf: avoid vport access in idpf_get_link_ksettings (bsc#1233463).\n- CVE-2024-50275: arm64/sve: Discard stale CPU state when handling SVE traps (bsc#1233464).\n- CVE-2024-50276: net: vertexcom: mse102x: Fix possible double free of TX skb (bsc#1233465).\n- CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).\n- CVE-2024-50289: media: av7110: fix a spectre vulnerability (bsc#1233478).\n- CVE-2024-50295: net: arc: fix the device for dma_map_single/dma_unmap_single (bsc#1233484).\n- CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).\n- CVE-2024-50298: net: enetc: allocate vf_state during PF probes (bsc#1233487).\n- CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233540).\n- CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).\n- CVE-2024-53048: ice: fix crash on probe for DPLL enabled E810 LOM (bsc#1233721).\n- CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).\n- CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).\n- CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).\n- CVE-2024-53058: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (bsc#1233552).\n- CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (bsc#1233570).\n- CVE-2024-53082: virtio_net: Add hash_key_length check (bsc#1233573).\n- CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (bsc#1234085).\n- CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (bsc#1234078).\n- CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1234223).\n\nThe following non-security bugs were fixed:\n\n- 9p: explicitly deny setlease attempts (git-fixes).\n- ACPI: CPPC: Add support for setting EPP register in FFH (stable-fixes).\n- ACPI: CPPC: Fix _CPC register setting issue (git-fixes).\n- ACPI: CPPC: Make rmw_lock a raw_spin_lock (git-fixes).\n- ACPI: EC: Do not release locks during operation region accesses (stable-fixes).\n- ACPI: PAD: fix crash in exit_round_robin() (stable-fixes).\n- ACPI: PRM: Clean up guid type in struct prm_handler_info (git-fixes).\n- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (git-fixes).\n- ACPI: battery: Fix possible crash when unregistering a battery hook (git-fixes).\n- ACPI: battery: Simplify battery hook locking (stable-fixes).\n- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (stable-fixes).\n- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add another DMI match for the TongFang GMxXGxx (stable-fixes).\n- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (stable-fixes).\n- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (stable-fixes).\n- ACPICA: iasl: handle empty connection_node (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: cleanup sdw_intel_scan_controller (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: fetch fwnode once in sdw_intel_scan_controller() (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: simplify sdw-master-count property read (stable-fixes).\n- ALSA: 6fire: Release resources at card release (git-fixes).\n- ALSA: Reorganize kerneldoc parameter names (stable-fixes).\n- ALSA: ac97: bus: Fix the mistake in the comment (git-fixes).\n- ALSA: asihpi: Fix potential OOB array access (stable-fixes).\n- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ALSA: core: add isascii() check to card ID generator (stable-fixes).\n- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (git-fixes).\n- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (git-fixes).\n- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (stable-fixes).\n- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (git-fixes).\n- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (git-fixes).\n- ALSA: hda/conexant: fix Z60MR100 startup pop issue (stable-fixes).\n- ALSA: hda/conexant: fix some typos (stable-fixes).\n- ALSA: hda/cs8409: Fix possible NULL dereference (git-fixes).\n- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs (bsc#1219803).\n- ALSA: hda/realtek - Fixed Clevo platform headset Mic issue (stable-fixes).\n- ALSA: hda/realtek - update set GPIO3 to default for Thinkpad with ALC1318 (git-fixes).\n- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (stable-fixes).\n- ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (stable-fixes).\n- ALSA: hda/realtek: Apply quirk for Medion E15433 (bsc#1233298).\n- ALSA: hda/realtek: Enable mic on Vaio VJFH52 (stable-fixes).\n- ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (stable-fixes).\n- ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform (bsc#1233298).\n- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (bsc#1233298).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 (stable-fixes).\n- ALSA: hda/realtek: Fix the push button function for the ALC257 (git-fixes).\n- ALSA: hda/realtek: Limit internal Mic boost on Dell platform (stable-fixes).\n- ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init (stable-fixes).\n- ALSA: hda/realtek: Set PCBeep to default value for ALC274 (stable-fixes).\n- ALSA: hda/realtek: Update ALC225 depop procedure (git-fixes).\n- ALSA: hda/realtek: Update ALC256 depop procedure (git-fixes).\n- ALSA: hda/realtek: Update default depop procedure (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8 (stable-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10 (stable-fixes).\n- ALSA: hda/realtek: tas2781: Fix ROG ALLY X audio (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects (stable-fixes).\n- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE (git-fixes).\n- ALSA: hda: Poll jack events for LS7A HD-Audio (stable-fixes).\n- ALSA: hda: Show the codec quirk info at probing (stable-fixes).\n- ALSA: hda: Sound support for HP Spectre x360 16 inch model 2024 (stable-fixes).\n- ALSA: hda: tas2781: Fix missing setup at runtime PM (bsc#1230132).\n- ALSA: hdsp: Break infinite MIDI input flush loop (stable-fixes).\n- ALSA: ice1712: Remove redundant code in stac9460_dac_vol_put (stable-fixes).\n- ALSA: line6: add hw monitor volume control to POD HD500X (stable-fixes).\n- ALSA: line6: update contact information (stable-fixes).\n- ALSA: mixer_oss: Remove some incorrect kfree_const() usages (git-fixes).\n- ALSA: pcm: Add sanity NULL check for the default mmap fault handler (stable-fixes).\n- ALSA: silence integer wrapping warning (stable-fixes).\n- ALSA: ump: Fix evaluation of MIDI 1.0 FB info (git-fixes).\n- ALSA: us122l: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ALSA: usb-audio: Add Pioneer DJ/AlphaTheta DJM-A9 Mixer (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET (stable-fixes).\n- ALSA: usb-audio: Add input value sanity checks for standard types (stable-fixes).\n- ALSA: usb-audio: Add logitech Audio profile quirk (stable-fixes).\n- ALSA: usb-audio: Add native DSD support for Luxman D-08u (stable-fixes).\n- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1232768).\n- ALSA: usb-audio: Add quirks for Dell WD19 dock (stable-fixes).\n- ALSA: usb-audio: Define macros for quirk table entries (stable-fixes).\n- ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (stable-fixes).\n- ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).\n- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (stable-fixes).\n- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (git-fixes).\n- ALSA: usb-audio: Make mic volume workarounds globally applicable (stable-fixes).\n- ALSA: usb-audio: Replace complex quirk lines with macros (stable-fixes).\n- ALSA: usb-audio: Use snprintf instead of sprintf in build_mixer_unit_ctl (stable-fixes).\n- ALSA: usb-audio: add mixer mapping for Corsair HS80 (stable-fixes).\n- ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ASoC: Intel: avs: da7219: Remove suspend_pre() and resume_post() (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (stable-fixes).\n- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (git-fixes).\n- ASoC: Intel: sst: Support LPE0F28 ACPI HID (stable-fixes).\n- ASoC: SOF: Add i2s bt dai configuration support for AMD platforms (bsc#1233305).\n- ASoC: SOF: Add support for configuring PDM interface from topology (bsc#1233305).\n- ASoC: SOF: Deprecate invalid enums in IPC3 (bsc#1233305).\n- ASoC: SOF: IPC4: get pipeline priority from topology (bsc#1233305).\n- ASoC: SOF: IPC4: synchronize fw_config_params with fw definitions (bsc#1233305).\n- ASoC: SOF: Refactor sof_i2s_tokens reading to update acpbt dai (bsc#1233305).\n- ASoC: SOF: Rename amd_bt sof_dai_type (bsc#1233305).\n- ASoC: SOF: Wire up buffer flags (bsc#1233305).\n- ASoC: SOF: add alignment for topology header file struct definition (bsc#1233305).\n- ASoC: SOF: align topology header file with sof topology header (bsc#1233305).\n- ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index (git-fixes).\n- ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai() (git-fixes).\n- ASoC: SOF: ipc4-control: Add support for ALSA enum control (bsc#1233305).\n- ASoC: SOF: ipc4-control: Add support for ALSA switch control (bsc#1233305).\n- ASoC: SOF: ipc4-mtrace: move debug slot related definitions to header.h (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add deep buffer size to debug prints (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add module ID print during module set up (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Helper to find an swidget by module/instance id (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (bsc#1233305).\n- ASoC: SOF: ipc4-topology: change chain_dma handling in dai_config (bsc#1233305).\n- ASoC: SOF: ipc4-topology: export sof_ipc4_copier_is_single_format (bsc#1233305).\n- ASoC: SOF: ipc4-topology: set config_length based on device_count (bsc#1233305).\n- ASoC: SOF: ipc4: Add data struct for module notification message from firmware (bsc#1233305).\n- ASoC: SOF: ipc4: Add new message type: SOF_IPC4_GLB_LOAD_LIBRARY_PREPARE (bsc#1233305).\n- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits (git-fixes).\n- ASoC: SOF: topology: Parse DAI type token for dspless mode (bsc#1233305).\n- ASoC: SOF: topology: dynamically allocate and store DAI widget-\u003eprivate (bsc#1233305).\n- ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA (stable-fixes).\n- ASoC: amd: yc: Add quirk for HP Dragonfly pro one (stable-fixes).\n- ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (git-fixes).\n- ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA (stable-fixes).\n- ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6 (stable-fixes).\n- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022 (stable-fixes).\n- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized (git-fixes).\n- ASoC: audio-graph-card2: Purge absent supplies for device tree nodes (stable-fixes).\n- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (git-fixes).\n- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (stable-fixes).\n- ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work() (stable-fixes).\n- ASoC: codecs: wsa883x: Handle reading version failure (stable-fixes).\n- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (git-fixes).\n- ASoC: dapm: fix bounds checker error in dapm_widget_list_create (git-fixes).\n- ASoC: fsl_micfil: Add sample rate constraint (stable-fixes).\n- ASoC: fsl_micfil: fix regmap_write_bits usage (git-fixes).\n- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (stable-fixes).\n- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m (git-fixes).\n- ASoC: max98388: Fix missing increment of variable slot_found (git-fixes).\n- ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec (git-fixes).\n- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (git-fixes).\n- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (stable-fixes).\n- ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c (git-fixes).\n- ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue (stable-fixes).\n- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (git-fixes).\n- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (stable-fixes).\n- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (stable-fixes).\n- ASoC: tas2781: Add new driver version for tas2563 \u0026 tas2781 qfn chip (stable-fixes).\n- ASoC: tas2781: Use of_property_read_reg() (stable-fixes).\n- Bluetooth: Call iso_exit() on module unload (git-fixes).\n- Bluetooth: ISO: Fix multiple init when debugfs is disabled (git-fixes).\n- Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (git-fixes).\n- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (git-fixes).\n- Bluetooth: Remove debugfs directory on module init failure (git-fixes).\n- Bluetooth: bnep: fix wild-memory-access in proto_unregister (git-fixes).\n- Bluetooth: btintel: Direct exception event to bluetooth stack (git-fixes).\n- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test (bsc#1230557)\n- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 (stable-fixes).\n- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (git-fixes).\n- Bluetooth: fix use-after-free in device_for_each_child() (git-fixes).\n- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (git-fixes).\n- Bluetooth: hci_core: Fix calling mgmt_device_connected (git-fixes).\n- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (git-fixes).\n- HID: Ignore battery for all ELAN I2C-HID devices (stable-fixes).\n- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (git-fixes).\n- HID: core: zero-initialize the report buffer (git-fixes).\n- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk (stable-fixes).\n- HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (stable-fixes).\n- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (stable-fixes).\n- HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (stable-fixes).\n- HID: multitouch: Add support for B2402FVA track point (stable-fixes).\n- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (stable-fixes).\n- HID: multitouch: Add support for lenovo Y9000P Touchpad (stable-fixes).\n- HID: plantronics: Workaround for an unexcepted opposite volume key (stable-fixes).\n- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (git-fixes).\n- HID: wacom: fix when get product name maybe null pointer (git-fixes).\n- Input: adp5589-keys - fix NULL pointer dereference (git-fixes).\n- Input: adp5589-keys - fix adp5589_gpio_get_value() (git-fixes).\n- Input: edt-ft5x06 - fix regmap leak when probe fails (git-fixes).\n- Input: hideep - add missing dependency on REGMAP_I2C (git-fixes).\n- Input: hycon-hy46xx - add missing dependency on REGMAP_I2C (git-fixes).\n- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (stable-fixes).\n- Input: xpad - add GameSir T4 Kaleid Controller support (git-fixes).\n- Input: xpad - add GameSir VID for Xbox One controllers (git-fixes).\n- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller (git-fixes).\n- Input: xpad - add support for MSI Claw A1M (git-fixes).\n- Input: xpad - add support for Machenike G5 Pro Controller (git-fixes).\n- Input: xpad - fix support for some third-party controllers (git-fixes).\n- Input: xpad - sort xpad_device by vendor and product ID (git-fixes).\n- Input: xpad - spelling fixes for 'Xbox' (git-fixes).\n- KVM: Fix coalesced_mmio_has_room() to avoid premature userspace exit (git-fixes).\n- KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending doorbells (bsc#1215199).\n- KVM: PPC: Book3S HV: Stop using vc-\u003edpdes for nested KVM guests (bsc#1215199).\n- KVM: PPC: Book3S HV: remove unused varible (bsc#1194869).\n- KVM: SEV-ES: Fix svm_get_msr()/svm_set_msr() for KVM_SEV_ES_INIT guests (bsc#1232207).\n- KVM: SEV-ES: Prevent MSR access post VMSA encryption (bsc#1232207).\n- KVM: SVM: Disallow guest from changing userspace's MSR_AMD64_DE_CFG value (git-fixes).\n- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock (git-fixes).\n- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled (git-fixes).\n- KVM: VMX: Set PFERR_GUEST_{FINAL,PAGE}_MASK if and only if the GVA is valid (git-fixes).\n- KVM: Write the per-page 'segment' when clearing (part of) a guest page (git-fixes).\n- KVM: s390: Change virtual to physical address access in diag 0x258 handler (git-fixes bsc#1232626).\n- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (git-fixes bsc#1231276).\n- KVM: s390: gaccess: Check if guest address is in memslot (git-fixes bsc#1232623).\n- KVM: x86/mmu: Skip emulation on page fault iff 1+ SPs were unprotected (git-fixes).\n- KVM: x86/mmu: Trigger unprotect logic only on write-protection page faults (git-fixes).\n- KVM: x86: Dedup fastpath MSR post-handling logic (git-fixes).\n- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits (git-fixes).\n- KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (git-fixes).\n- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode() (git-fixes).\n- KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (git-fixes).\n- KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- NFS: Avoid unnecessary rescanning of the per-server delegation list (git-fixes).\n- NFS: remove revoked delegation from server's delegation list (git-fixes).\n- NFSD: Fix NFSv4's PUTPUBFH operation (git-fixes).\n- NFSD: Mark filecache 'down' if init fails (git-fixes).\n- NFSv3: only use NFS timeout for MOUNT when protocols are compatible (bsc#1231016).\n- NFSv4: Fix clearing of layout segments in layoutreturn (git-fixes).\n- PCI: Add ACS quirk for Qualcomm SA8775P (stable-fixes).\n- PCI: Add T_PVPERL macro (git-fixes).\n- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip (stable-fixes).\n- PCI: Fix pci_enable_acs() support for the ACS quirks (bsc#1229019).\n- PCI: Fix reset_method_store() memory leak (git-fixes).\n- PCI: Mark Creative Labs EMU20k2 INTx masking as broken (stable-fixes).\n- PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf() (git-fixes).\n- PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds (git-fixes).\n- PCI: keystone: Add link up check to ks_pcie_other_map_bus() (git-fixes).\n- PCI: keystone: Set mode as Root Complex for 'ti,keystone-pcie' compatible (git-fixes).\n- PCI: rockchip-ep: Fix address translation unit programming (git-fixes).\n- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix (jsc#PED-10559).\n- RAS/AMD/ATL: Expand helpers for adding and removing base and hole (jsc#PED-10559).\n- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization (jsc#PED-10559).\n- RAS/AMD/ATL: Read DRAM hole base early (jsc#PED-10559).\n- RAS/AMD/ATL: Validate address map when information is gathered (jsc#PED-10559).\n- RDMA/bnxt_re: Add a check for memory allocation (git-fixes)\n- RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (git-fixes)\n- RDMA/bnxt_re: Change the sequence of updating the CQ toggle value (git-fixes)\n- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (git-fixes)\n- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (git-fixes)\n- RDMA/bnxt_re: Fix a possible memory leak (git-fixes)\n- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (git-fixes)\n- RDMA/bnxt_re: Fix incorrect dereference of srq in async event (git-fixes)\n- RDMA/bnxt_re: Fix out of bound check (git-fixes)\n- RDMA/bnxt_re: Fix the GID table length (git-fixes)\n- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters (git-fixes)\n- RDMA/bnxt_re: Fix the usage of control path spin locks (git-fixes)\n- RDMA/bnxt_re: Return more meaningful error (git-fixes)\n- RDMA/bnxt_re: synchronize the qp-handle table array (git-fixes)\n- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)\n- RDMA/cxgb4: Dump vendor specific QP details (git-fixes)\n- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (git-fixes)\n- RDMA/hns: Add mutex_destroy() (git-fixes)\n- RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset (git-fixes)\n- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (git-fixes)\n- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci (git-fixes)\n- RDMA/hns: Fix cpu stuck caused by printings during reset (git-fixes)\n- RDMA/hns: Fix different dgids mapping to the same dip_idx (git-fixes)\n- RDMA/hns: Fix flush cqe error when racing with destroy qp (git-fixes)\n- RDMA/hns: Fix out-of-order issue of requester when setting FENCE (git-fixes)\n- RDMA/hns: Use dev_* printings in hem code instead of ibdev_* (git-fixes)\n- RDMA/hns: Use macro instead of magic number (git-fixes)\n- RDMA/irdma: Fix misspelling of 'accept*' (git-fixes)\n- RDMA/mad: Improve handling of timed out WRs of mad agent (git-fixes)\n- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (git-fixes).\n- RDMA/mana_ib: use the correct page table index based on hardware page size (git-fixes).\n- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults (git-fixes)\n- RDMA/mlx5: Move events notifier registration to be after device registration (git-fixes)\n- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (git-fixes)\n- RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled (git-fixes).\n- RDMA/rtrs-srv: Avoid null pointer deref during path establishment (git-fixes)\n- RDMA/rxe: Fix the qp flush warnings in req (git-fixes)\n- RDMA/rxe: Set queue pair cur_qp_state when being queried (git-fixes)\n- RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES (git-fixes)\n- RDMA/srpt: Make slab cache names unique (git-fixes)\n- Revert 'ALSA: hda/conexant: Mute speakers at suspend / shutdown' (bsc#1228269).\n- Revert 'ALSA: hda: Conditionally use snooping for AMD HDMI' (stable-fixes).\n- Revert 'KEYS: encrypted: Add check for strsep' (git-fixes).\n- Revert 'KVM: PPC: Book3S HV Nested: Stop forwarding all HFUs to L1' (bsc#1215199).\n- Revert 'RDMA/core: Fix ENODEV error for iWARP test over vlan' (git-fixes)\n- Revert 'cgroup: Fix memory leak caused by missing cgroup_bpf_offline' (bsc#1234108).\n- Revert 'cpufreq: brcmstb-avs-cpufreq: Fix initial command check' (stable-fixes).\n- Revert 'driver core: Fix uevent_show() vs driver detach race' (git-fixes).\n- Revert 'ixgbe: Manual AN-37 for troublesome link partners for X550 SFI' (git-fixes).\n- Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (git-fixes).\n- Revert 'ubifs: ubifs_symlink: Fix memleak of inode-\u003ei_link in error path' (git-fixes).\n- Revert 'usb: gadget: composite: fix OS descriptors w_value logic' (git-fixes).\n- Revert 'wifi: iwlwifi: remove retry loops in start' (git-fixes).\n- SUNRPC: Fix integer overflow in decode_rc_list() (git-fixes).\n- SUNRPC: Fixup gss_status tracepoint error output (git-fixes).\n- SUNRPC: Remove BUG_ON call sites (git-fixes).\n- SUNRPC: clnt.c: Remove misleading comment (git-fixes).\n- USB: appledisplay: close race between probe and completion handler (git-fixes).\n- USB: chaoskey: Fix possible deadlock chaoskey_list_lock (git-fixes).\n- USB: chaoskey: fail open after removal (git-fixes).\n- USB: gadget: dummy-hcd: Fix 'task hung' problem (git-fixes).\n- USB: misc: cypress_cy7c63: check for short transfer (git-fixes).\n- USB: misc: yurex: fix race between read and write (git-fixes).\n- USB: serial: ftdi_sio: Fix atomicity violation in get_serial_info() (git-fixes).\n- USB: serial: io_edgeport: fix use after free in debug printk (git-fixes).\n- USB: serial: option: add Fibocom FG132 0x0112 composition (stable-fixes).\n- USB: serial: option: add Quectel RG650V (stable-fixes).\n- USB: serial: option: add Telit FN920C04 MBIM compositions (stable-fixes).\n- USB: serial: option: add support for Quectel EG916Q-GL (stable-fixes).\n- USB: serial: qcserial: add support for Sierra Wireless EM86xx (stable-fixes).\n- accel/qaic: Fix the for loop used to walk SG table (git-fixes).\n- accel: Use XArray instead of IDR for minors (jsc#PED-11580).\n- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (git-fixes).\n- ad7780: fix division by zero in ad7780_write_raw() (git-fixes).\n- aes-gcm-p10: Use the correct bit to test for P10 (bsc#1232704).\n- amd-pstate: Set min_perf to nominal_perf for active mode performance gov (git-fixes).\n- apparmor: fix 'Do simple duplicate message elimination' (git-fixes).\n- apparmor: test: Fix memory leak for aa_unpack_strdup() (git-fixes).\n- apparmor: use kvfree_sensitive to free data-\u003edata (git-fixes).\n- arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (git-fixes)\n- arm64: cputype: Add Neoverse-N3 definitions (git-fixes)\n- arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (git-fixes)\n- arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay (git-fixes)\n- arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay (git-fixes)\n- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (git-fixes)\n- arm64: dts: imx8qxp: Add VPU subsystem file (git-fixes)\n- arm64: dts: imx93: add nvmem property for eqos (git-fixes)\n- arm64: dts: imx93: add nvmem property for fec1 (git-fixes)\n- arm64: dts: imx93: add ocotp node (git-fixes)\n- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus (git-fixes)\n- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes (git-fixes)\n- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (git-fixes)\n- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (git-fixes)\n- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo (git-fixes)\n- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes (git-fixes)\n- arm64: dts: rockchip: Fix rt5651 compatible value on (git-fixes)\n- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610 (git-fixes)\n- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node (git-fixes)\n- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma (git-fixes)\n- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (git-fixes)\n- arm64: dts: rockchip: Remove undocumented supports-emmc property (git-fixes)\n- arm64: dts: rockchip: fix i2c2 pinctrl-names property on (git-fixes)\n- arm64: dts: rockchip: remove num-slots property from (git-fixes)\n- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone (git-fixes)\n- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (git-fixes).\n- arm64: errata: Expand speculative SSBS workaround once more (git-fixes)\n- arm64: esr: Define ESR_ELx_EC_* constants as UL (git-fixes)\n- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (git-fixes)\n- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS (git-fixes).\n- arm64: probes: Fix simulate_ldr*_literal() (git-fixes)\n- arm64: probes: Fix uprobes for big-endian kernels (git-fixes)\n- arm64: probes: Remove broken LDR (literal) uprobe support (git-fixes)\n- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (git-fixes)\n- arm64: smccc: replace custom COUNT_ARGS() \u0026 CONCATENATE() (git-fixes)\n- arm64: tegra: Move AGX Orin nodes to correct location (git-fixes)\n- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (git-fixes)\n- ata: libata: Set DID_TIME_OUT for commands that actually timed out (git-fixes).\n- ata: libata: avoid superfluous disk spin down + spin up during hibernation (git-fixes).\n- audit: do not WARN_ON_ONCE(!current-\u003emm) in audit_exe_compare() (git-fixes).\n- audit: do not take task_lock() in audit_exe_compare() code path (git-fixes).\n- block: print symbolic error name instead of error code (bsc#1231872).\n- block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (bsc#1229677).\n- bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response (git-fixes).\n- bnxt_en: Fix error recovery for 5760X (P7) chips (git-fixes).\n- bnxt_en: Fix the PCI-AER routines (git-fixes).\n- bnxt_en: Restore PTP tx_avail count in case of skb_pad() error (git-fixes).\n- bnxt_en: refactor reset close code (git-fixes).\n- bpf, arm64: Fix address emission with tag-based KASAN enabled (git-fixes)\n- bpf, arm64: Remove garbage frame for struct_ops trampoline (git-fixes)\n- bpf, lsm: Add disabled BPF LSM hook list (git-fixes).\n- bpf, net: Fix a potential race in do_sock_getsockopt() (git-fixes).\n- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock (git-fixes).\n- bpf, verifier: Correct tail_call_reachable for bpf prog (git-fixes).\n- bpf, vsock: Drop static vsock_bpf_prot initialization (git-fixes).\n- bpf, x64: Remove tail call detection (git-fixes).\n- bpf,perf: Fix perf_event_detach_bpf_prog error handling (git-fixes).\n- bpf: Fail verification for sign-extension of packet data/data_end/data_meta (git-fixes).\n- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (git-fixes).\n- bpf: Fix error message on kfunc arg type mismatch (git-fixes).\n- bpf: Fix helper writes to read-only maps (git-fixes).\n- bpf: Fix tailcall cases in test_bpf (git-fixes).\n- bpf: Fix truncation bug in coerce_reg_to_size_sx() (git-fixes).\n- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types (git-fixes).\n- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers (git-fixes).\n- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (git-fixes).\n- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos (git-fixes).\n- btf, scripts: rust: drop is_rust_module.sh (bsc#1230414 bsc#1229450).\n- btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() (bsc#1233193)\n- btrfs: send: fix invalid clone operation for file that got its size decreased (git-fixes).\n- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (git-fixes).\n- can: c_can: fix {rx,tx}_errors statistics (git-fixes).\n- can: dev: can_set_termination(): allow sleeping GPIOs (git-fixes).\n- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: hi311x: hi3110_can_ist(): fix potential use-after-free (git-fixes).\n- can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics (git-fixes).\n- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: j1939: j1939_session_new(): fix skb reference counting (git-fixes).\n- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation (git-fixes).\n- can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6 (git-fixes).\n- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes (git-fixes).\n- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode (stable-fixes).\n- can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (git-fixes).\n- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (git-fixes).\n- ceph: fix cap ref leak via netfs init_request (bsc#1231384).\n- cgroup/bpf: only cgroup v2 can be attached by bpf programs (bsc#1234108).\n- clk: bcm: bcm53573: fix OF node leak in init (stable-fixes).\n- clk: clk-apple-nco: Add NULL check in applnco_probe (git-fixes).\n- clk: clk-axi-clkgen: make sure to enable the AXI bus clock (git-fixes).\n- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (stable-fixes).\n- clk: imx: clk-scu: fix clk enable state save and restore (git-fixes).\n- clk: imx: fracn-gppll: correct PLL initialization flow (git-fixes).\n- clk: imx: fracn-gppll: fix pll power up (git-fixes).\n- clk: imx: lpcg-scu: SW workaround for errata (e10858) (git-fixes).\n- clk: qcom: clk-alpha-pll: drop lucid-evo pll enabled warning (git-fixes).\n- clk: qcom: clk-alpha-pll: fix lucid 5lpe pll enabled check (git-fixes).\n- clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (git-fixes).\n- clk: renesas: rzg2l: Fix FOUTPOSTDIV clk (git-fixes).\n- clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset (git-fixes).\n- comedi: Flush partial mappings in error case (git-fixes).\n- comedi: ni_routing: tools: Check when the file could not be opened (stable-fixes).\n- config: Disable LAM on x86 (bsc#1217845).\n- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems (git-fixes).\n- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (git-fixes).\n- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (git-fixes).\n- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() (git-fixes).\n- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() (git-fixes).\n- cpufreq: loongson2: Unregister platform_driver on failure (git-fixes).\n- cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (git-fixes).\n- crypto: aes-gcm-p10 - Use the correct bit to test for P10 (bsc#1232704).\n- crypto: api - Fix liveliness check in crypto_alg_tested (stable-fixes).\n- crypto: bcm - add error check in the ahash_hmac_init function (git-fixes).\n- crypto: caam - Fix the pointer passed to caam_qi_shutdown() (git-fixes).\n- crypto: caam - add error check to caam_rsa_set_priv_key_form (git-fixes).\n- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (git-fixes).\n- crypto: cavium - Fix the if condition to exit loop after timeout (git-fixes).\n- crypto: hisilicon/qm - flush all work before driver removed (bsc#1232075)\n- crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() (git-fixes).\n- crypto: octeontx - Fix authenc setkey (stable-fixes).\n- crypto: octeontx* - Select CRYPTO_AUTHENC (git-fixes).\n- crypto: octeontx2 - Fix authenc setkey (stable-fixes).\n- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (git-fixes).\n- crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTO_SIMD and re-enable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Register modules as SIMD (bsc#1230501 ltc#208632).\n- crypto: qat - remove check after debugfs_create_dir() (git-fixes).\n- crypto: qat - remove faulty arbiter config reset (git-fixes).\n- crypto: qat/qat_4xxx - fix off by one in uof_get_name() (git-fixes).\n- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (git-fixes).\n- cxgb4: Properly lock TX queue for the selftest (git-fixes).\n- cxgb4: add forgotten u64 ivlan cast before shift (git-fixes).\n- cxgb4: unnecessary check for 0 in the free_sge_txq_uld() function (git-fixes).\n- cxl: downgrade a warning message to debug level in cxl_probe_component_regs() (bsc#1229165).\n- dcache: keep dentry_hashtable or d_hash_shift even when not used (git-fixes).\n- debugfs: fix automount d_fsdata usage (git-fixes).\n- devlink: Fix command annotation documentation (git-fixes).\n- dma-fence: Fix reference leak on fence merge failure path (git-fixes).\n- dma-fence: Use kernel's sort for merging fences (git-fixes).\n- dmaengine: sh: rz-dmac: handle configs where one address is zero (git-fixes).\n- dmaengine: ti: k3-udma: Set EOP for all TRs in cyclic BCDMA transfer (git-fixes).\n- doc: rcu: update printed dynticks counter bits (git-fixes).\n- driver core: bus: Fix double free in driver API bus_register() (stable-fixes).\n- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (stable-fixes).\n- drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() (git-fixes).\n- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring (git-fixes).\n- drm/amd/display: Add HDMI DSC native YCbCr422 support (stable-fixes).\n- drm/amd/display: Add disable timeout option (bsc#1231435)\n- drm/amd/display: Adjust VSDB parser for replay feature (stable-fixes).\n- drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944)\n- drm/amd/display: Check null pointer before dereferencing se (stable-fixes).\n- drm/amd/display: Clean up dsc blocks in accelerated mode (stable-fixes).\n- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (stable-fixes).\n- drm/amd/display: Fix brightness level not retained over reboot (git-fixes).\n- drm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe (git-fixes).\n- drm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in hwss_setup_dpp (git-fixes).\n- drm/amd/display: Remove a redundant check in authenticated_dp (stable-fixes).\n- drm/amd/display: Revert 'Check HDCP returned status' (stable-fixes).\n- drm/amd/display: Round calculated vtotal (stable-fixes).\n- drm/amd/display: Skip to enable dsc if it has been off (stable-fixes).\n- drm/amd/display: Validate backlight caps are sane (stable-fixes).\n- drm/amd/pm: Vangogh: Fix kernel memory out of bounds write (git-fixes).\n- drm/amd: Add some missing straps from NBIO 7.11.0 (git-fixes).\n- drm/amd: Fix initialization mistake for NBIO 7.7.0 (stable-fixes).\n- drm/amd: Guard against bad data for ATIF ACPI method (git-fixes).\n- drm/amdgpu/swsmu: Only force workload setup on init (git-fixes).\n- drm/amdgpu/vcn: enable AV1 on both instances (stable-fixes).\n- drm/amdgpu: Adjust debugfs eviction and IB access permissions (stable-fixes).\n- drm/amdgpu: Adjust debugfs register access permissions (stable-fixes).\n- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (git-fixes).\n- drm/amdgpu: Fix JPEG v4.0.3 register write (git-fixes).\n- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (stable-fixes).\n- drm/amdgpu: fix check in gmc_v9_0_get_vm_pte() (git-fixes).\n- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (git-fixes).\n- drm/amdkfd: Accounting pdd vram_usage for svm (stable-fixes).\n- drm/amdkfd: Fix wrong usage of INIT_WORK() (git-fixes).\n- drm/bridge: anx7625: Drop EDID cache on bridge power off (git-fixes).\n- drm/bridge: it6505: Drop EDID cache on bridge power off (git-fixes).\n- drm/bridge: tc358767: Fix link properties discovery (git-fixes).\n- drm/bridge: tc358768: Fix DSI command tx (git-fixes).\n- drm/etnaviv: Request pages from DMA32 zone on addressing_limited (git-fixes).\n- drm/etnaviv: hold GPU lock across perfmon sampling (git-fixes).\n- drm/i915/gem: fix bitwise and logical AND mixup (git-fixes).\n- drm/i915/hdcp: fix connector refcounting (git-fixes).\n- drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/mediatek: Fix child node refcount handling in early exit (git-fixes).\n- drm/mediatek: Fix get efuse issue for MT8188 DPTX (git-fixes).\n- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (git-fixes).\n- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (git-fixes).\n- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds() (git-fixes).\n- drm/msm/dpu: do not always program merge_3d block (git-fixes).\n- drm/msm/dpu: drop LM_3 / LM_4 on MSM8998 (git-fixes).\n- drm/msm/dpu: drop LM_3 / LM_4 on SDM845 (git-fixes).\n- drm/msm/dpu: make sure phys resources are properly initialized (git-fixes).\n- drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check (git-fixes).\n- drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block (git-fixes).\n- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (git-fixes).\n- drm/msm/dsi: improve/fix dsc pclk calculation (git-fixes).\n- drm/msm/gpu: Check the status of registration to PM QoS (git-fixes).\n- drm/msm: Allocate memory for disp snapshot with kvzalloc() (git-fixes).\n- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (git-fixes).\n- drm/msm: Fix some typos in comment (git-fixes).\n- drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() (git-fixes).\n- drm/omap: Fix locking in omap_gem_new_dmabuf() (git-fixes).\n- drm/omap: Fix possible NULL dereference (git-fixes).\n- drm/panfrost: Add missing OPP table refcnt decremental (git-fixes).\n- drm/panfrost: Remove unused id_mask from struct panfrost_model (git-fixes).\n- drm/radeon: Fix encoder-\u003epossible_clones (git-fixes).\n- drm/rockchip: vop: Fix a dereferenced before check warning (git-fixes).\n- drm/sched: Add locking to drm_sched_entity_modify_sched (git-fixes).\n- drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job (git-fixes).\n- drm/sti: Add __iomem for mixer_dbg_mxn's parameter (git-fixes).\n- drm/sti: avoid potential dereference of error pointers (git-fixes).\n- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (git-fixes).\n- drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (git-fixes).\n- drm/v3d: Address race-condition in MMU flush (git-fixes).\n- drm/v3d: Enable Performance Counters before clearing them (git-fixes).\n- drm/v3d: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (stable-fixes).\n- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush (git-fixes).\n- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load (git-fixes).\n- drm/vc4: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vc4: hdmi: Avoid hang with debug registers when suspended (git-fixes).\n- drm/vc4: hvs: Correct logic on stopping an HVS channel (git-fixes).\n- drm/vc4: hvs: Do not write gamma luts on 2711 (git-fixes).\n- drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer (git-fixes).\n- drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function (git-fixes).\n- drm/vkms: Drop unnecessary call to drm_crtc_cleanup() (git-fixes).\n- drm/vmwgfx: Handle surface check failure correctly (git-fixes).\n- drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (stable-fixes).\n- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS (git-fixes).\n- drm: Expand max DRM device number to full MINORBITS (jsc#PED-11580).\n- drm: Use XArray instead of IDR for minors (jsc#PED-11580).\n- drm: use ATOMIC64_INIT() for atomic64_t (git-fixes).\n- drm: xlnx: zynqmp_dpsub: fix hotplug detection (git-fixes).\n- drm: zynqmp_kms: Unplug DRM device before removal (git-fixes).\n- e1000e: Fix S0ix residency on corporate systems (git-fixes).\n- e1000e: Remove Meteor Lake SMBUS workarounds (git-fixes).\n- e1000e: change I219 (19) devices to ADP (git-fixes).\n- e1000e: fix force smbus during suspend flow (git-fixes).\n- e1000e: move force SMBUS near the end of enable_ulp function (git-fixes).\n- efi/libstub: Free correct pointer on failure (git-fixes).\n- efi/libstub: fix efi_parse_options() ignoring the default command line (git-fixes).\n- efi/libstub: zboot.lds: Discard .discard sections (stable-fixes).\n- efi/memattr: Ignore table if the size is clearly bogus (bsc#1231465).\n- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (stable-fixes).\n- eth: bnxt: fix counting packets discarded due to OOM and netpoll (git-fixes).\n- ext4: do not track ranges in fast_commit if inode has inlined data (bsc#1231635).\n- ext4: fix fast commit inode enqueueing during a full journal commit (bsc#1231636).\n- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible() (bsc#1231637).\n- ext4: fix possible tid_t sequence overflows (bsc#1231634).\n- ext4: fix slab-use-after-free in ext4_split_extent_at() (bsc#1232201)\n- ext4: fix unttached inode after power cut with orphan file feature enabled (bsc#1234009).\n- ext4: mark fc as ineligible using an handle in ext4_xattr_set() (bsc#1231640).\n- ext4: use handle to mark fc as ineligible in __track_dentry_update() (bsc#1231639).\n- f2fs: get out of a repeat loop when getting a locked data page (bsc#1234011).\n- fat: fix uninitialized variable (git-fixes).\n- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (stable-fixes).\n- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (git-fixes).\n- fbdev: sisfb: Fix strbuf array overflow (stable-fixes).\n- fgraph: Change the name of cpuhp state to 'fgraph:online' (git-fixes).\n- fgraph: Fix missing unlock in register_ftrace_graph() (git-fixes).\n- fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks (git-fixes).\n- filemap: remove use of wait bookmarks (bsc#1224088).\n- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (git-fixes).\n- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (git-fixes).\n- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (git-fixes).\n- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (git-fixes).\n- firmware: google: Unregister driver_info on failure (git-fixes).\n- firmware_loader: Fix possible resource leak in fw_log_firmware_info() (git-fixes).\n- fs/9p: drop inodes immediately on non-.L too (git-fixes).\n- fs/9p: fix the cache always being enabled on files with qid flags (git-fixes).\n- fs/ntfs3: Add more attributes checks in mi_enum_attr() (bsc#1233207)\n- fs/ntfs3: Fixed overflow check in mi_enum_attr() (bsc#1233207)\n- fs/ntfs3: Sequential field availability check in mi_enum_attr() (bsc#1233207)\n- fs: Fix uninitialized value issue in from_kuid and from_kgid (git-fixes).\n- genirq/msi: Fix off-by-one error in msi_domain_alloc() (git-fixes).\n- goldfish: Fix unused const variable 'goldfish_pipe_acpi_match' (git-fixes).\n- gpio: aspeed: Add the flush write to ensure the write complete (git-fixes).\n- gpio: aspeed: Use devm_clk api to manage clock source (git-fixes).\n- gpio: davinci: fix lazy disable (git-fixes).\n- gpio: exar: set value when external pull-up or pull-down is present (git-fixes).\n- gpio: zevio: Add missed label initialisation (git-fixes).\n- gve: Fix XDP TX completion handling when counters overflow (git-fixes).\n- gve: Fix an edge case for TSO skb validity check (git-fixes).\n- gve: ignore nonrelevant GSO type bits when processing TSO headers (git-fixes).\n- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (git-fixes).\n- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (git-fixes).\n- hv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer (git-fixes).\n- hwmon: (adm9240) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (adt7470) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (max16065) Fix alarm attributes (git-fixes).\n- hwmon: (max16065) Remove use of i2c_match_id() (stable-fixes).\n- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list (stable-fixes).\n- hwmon: (nct6775-core) Fix overflows seen when writing limit attributes (git-fixes).\n- hwmon: (tmp513) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (tps23861) Fix reporting of negative temperatures (git-fixes).\n- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature (git-fixes).\n- i2c: core: Setup i2c_adapter runtime-pm before calling device_add() (git-fixes).\n- i2c: core: fix lockdep warning for sparsely nested adapter chain (git-fixes).\n- i2c: cpm: Remove linux,i2c-index conversion from be32 (git-fixes).\n- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set (git-fixes).\n- i2c: exynos5: Calculate t_scl_l, t_scl_h according to i2c spec (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell Precision 3540 (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell XPS 15 7590 (git-fixes).\n- i2c: i801: Use a different adapter-name for IDF adapters (stable-fixes).\n- i2c: i801: add helper i801_restore_regs (git-fixes).\n- i2c: ismt: kill transaction in hardware on timeout (git-fixes).\n- i2c: ocores: Move system PM hooks to the NOIRQ phase (git-fixes).\n- i2c: ocores: Remove #ifdef guards for PM related functions (git-fixes).\n- i2c: omap: switch to NOIRQ_SYSTEM_SLEEP_PM_OPS() and RUNTIME_PM_OPS() (git-fixes).\n- i2c: omap: wakeup the controller during suspend() callback (git-fixes).\n- i2c: rcar: properly format a debug output (git-fixes).\n- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume (git-fixes).\n- i2c: stm32f7: perform most of irq job in threaded handler (git-fixes).\n- i2c: synquacer: Deal with optional PCLK correctly (git-fixes).\n- i2c: synquacer: Remove a clk reference from struct synquacer_i2c (stable-fixes).\n- i2c: xiic: Try re-initialization on bus busy timeout (git-fixes).\n- i2c: xiic: improve error message when transfer fails to start (stable-fixes).\n- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (git-fixes).\n- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition (stable-fixes).\n- i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- i40e: Fix XDP program unloading while removing the driver (git-fixes).\n- i40e: Report MFS in decimal base instead of hex (git-fixes).\n- i40e: fix race condition by adding filter's intermediate sync state (git-fixes).\n- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (git-fixes).\n- iavf: Fix TC config comparison with existing adapter TC config (git-fixes).\n- ice: Fix VSI list rule with ICE_SW_LKUP_LAST type (git-fixes).\n- ice: Fix checking for unsupported keys on non-tunnel device (git-fixes).\n- ice: Fix lldp packets dropping after changing the number of channels (git-fixes).\n- ice: Fix netif_is_ice() in Safe Mode (git-fixes).\n- ice: Fix package download algorithm (git-fixes).\n- ice: Fix recipe read procedure (git-fixes).\n- ice: Fix reset handler (git-fixes).\n- ice: Flush FDB entries before reset (git-fixes).\n- ice: Interpret .set_channels() input differently (git-fixes).\n- ice: Rebuild TC queues on VSI queue reconfiguration (git-fixes).\n- ice: Reject pin requests with unsupported flags (git-fixes).\n- ice: add flag to distinguish reset from .ndo_bpf in XDP rings config (git-fixes).\n- ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (git-fixes).\n- ice: avoid IRQ collision to fix init failure on ACPI S3 resume (git-fixes).\n- ice: clear port vlan config during reset (git-fixes).\n- ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins (git-fixes).\n- ice: do not bring the VSI up, if it was down before the XDP setup (git-fixes).\n- ice: do not busy wait for Rx queue disable in ice_qp_dis() (git-fixes).\n- ice: fix 200G PHY types to link speed mapping (git-fixes).\n- ice: fix 200G link speed message log (git-fixes).\n- ice: fix ICE_LAST_OFFSET formula (git-fixes).\n- ice: fix VLAN replay after reset (git-fixes).\n- ice: fix VSI lists confusion when adding VLANs (git-fixes).\n- ice: fix accounting for filters shared by multiple VSIs (git-fixes).\n- ice: fix accounting if a VLAN already exists (git-fixes).\n- ice: fix iteration of TLVs in Preserved Fields Area (git-fixes).\n- ice: fix page reuse when PAGE_SIZE is over 8k (git-fixes).\n- ice: fix reads from NVM Shadow RAM on E830 and E825-C devices (git-fixes).\n- ice: fix truesize operations for PAGE_SIZE \u003e= 8192 (git-fixes).\n- ice: implement AQ download pkg retry (git-fixes).\n- ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors() (git-fixes).\n- ice: remove af_xdp_zc_qps bitmap (git-fixes).\n- ice: replace synchronize_rcu with synchronize_net (git-fixes).\n- ice: respect netif readiness in AF_XDP ZC related ndo's (git-fixes).\n- ice: set correct dst VSI in only LAN filters (git-fixes).\n- ice: tc: allow zero flags in parsing tc flower (git-fixes).\n- ice: tc: check src_vsi in case of traffic from VF (git-fixes).\n- ice: use proper macro for testing bit (git-fixes).\n- idpf: Interpret .set_channels() input differently (git-fixes).\n- idpf: avoid bloating \u0026idpf_q_vector with big %NR_CPUS (git-fixes).\n- idpf: do not enable NAPI and interrupts prior to allocating Rx buffers (git-fixes).\n- idpf: do not skip over ethtool tcp-data-split setting (git-fixes).\n- idpf: fix UAFs when destroying the queues (git-fixes).\n- idpf: fix memleak in vport interrupt configuration (git-fixes).\n- idpf: fix memory leaks and crashes while performing a soft reset (git-fixes).\n- ieee802154: Fix build error (git-fixes).\n- igb: Always call igb_xdp_ring_update_tail() under Tx lock (git-fixes).\n- igb: Disable threaded IRQ for igb_msix_other (git-fixes).\n- igb: Fix not clearing TimeSync interrupts for 82580 (git-fixes).\n- igc: Fix double reset adapter triggered from a single taprio cmd (git-fixes).\n- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (git-fixes).\n- igc: Fix qbv tx latency by setting gtxoffset (git-fixes).\n- igc: Fix qbv_config_change_errors logics (git-fixes).\n- igc: Fix reset adapter logics when tx mode change (git-fixes).\n- igc: Unlock on error in igc_io_resume() (git-fixes).\n- iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (git-fixes).\n- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling (git-fixes).\n- iio: accel: kx022a: Fix raw read format (git-fixes).\n- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (git-fixes).\n- iio: adc: ad7606: Fix typo in the driver name (git-fixes).\n- iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer (git-fixes).\n- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (git-fixes).\n- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts: Fix uninitialized symbol 'ret' (git-fixes).\n- iio: gts: fix infinite loop for gain_to_scaletables() (git-fixes).\n- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (git-fixes).\n- iio: light: al3010: Fix an error handling path in al3010_probe() (git-fixes).\n- iio: light: opt3001: add missing full-scale range value (git-fixes).\n- iio: light: veml6030: fix ALS sensor resolution (git-fixes).\n- iio: light: veml6030: fix IIO device retrieval from embedded device (git-fixes).\n- iio: light: veml6030: fix microlux value calculation (git-fixes).\n- iio: magnetometer: ak8975: Convert enum-\u003epointer for data in the match tables (stable-fixes).\n- iio: magnetometer: ak8975: Fix 'Unexpected device' error (git-fixes).\n- iio: magnetometer: ak8975: drop incorrect AK09116 compatible (git-fixes).\n- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- ima: fix buffer overrun in ima_eventdigest_init_common (git-fixes).\n- initramfs: avoid filename buffer overrun (bsc#1232436).\n- intel_idle: add Granite Rapids Xeon support (bsc#1231630).\n- intel_idle: fix ACPI _CST matching for newer Xeon platforms (bsc#1231630).\n- io_uring/eventfd: move to more idiomatic RCU free usage (git-fixes).\n- io_uring/io-wq: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/io-wq: inherit cpuset of cgroup in io worker (git-fixes).\n- io_uring/net: harden multishot termination case for recv (git-fixes).\n- io_uring/rw: fix cflags posting for single issue multishot read (git-fixes).\n- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (git-fixes).\n- io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN (git-fixes).\n- io_uring/sqpoll: close race on waiting for sqring entries (git-fixes).\n- io_uring/sqpoll: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/sqpoll: do not put cpumask on stack (git-fixes).\n- io_uring/sqpoll: retain test for whether the CPU is valid (git-fixes).\n- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL (git-fixes).\n- iommu/amd: Allocate the page table root using GFP_KERNEL (git-fixes).\n- iommu/amd: Do not set the D bit on AMD v2 table entries (git-fixes).\n- iommu/amd: Fix typo of , instead of ; (git-fixes).\n- iommu/vt-d: Always reserve a domain ID for identity setup (git-fixes).\n- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (git-fixes).\n- iommufd: Check the domain owner of the parent before creating a nesting domain (git-fixes).\n- iommufd: Protect against overflow of ALIGN() during iova allocation (git-fixes).\n- irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (git-fixes).\n- jbd2: Move j_transaction_overhead_buffers into a hole (bsc#1234042).\n- jbd2: avoid infinite transaction commit loop (bsc#1234039).\n- jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (bsc#1234043).\n- jbd2: avoid mount failed when commit block is partial submitted (bsc#1234040).\n- jbd2: correct the printing of write_flags in jbd2_write_superblock() (bsc#1234045).\n- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit (bsc#1231638).\n- jbd2: fix kernel-doc for j_transaction_overhead_buffers (bsc#1234042).\n- jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (bsc#1234044).\n- jbd2: fix soft lockup in journal_finish_inode_data_buffers() (bsc#1234046).\n- jbd2: make jbd2_journal_get_max_txn_bufs() internal (bsc#1234041).\n- jbd2: precompute number of transaction descriptor blocks (bsc#1234042).\n- jfs: Fix sanity check in dbMount (git-fixes).\n- jfs: Fix uaf in dbFreeBits (git-fixes).\n- jfs: Fix uninit-value access of new_ea in ea_buffer (git-fixes).\n- jfs: UBSAN: shift-out-of-bounds in dbFindBits (git-fixes).\n- jfs: check if leafidx greater than num leaves per dmap tree (git-fixes).\n- jump_label: Fix static_key_slow_dec() yet again (git-fixes).\n- kABI fix of VM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- kABI: Restore exported __arm_smccc_sve_check (git-fixes)\n- kABI: bpf: enum bpf_{type_flag,arg_type} kABI workaround (git-fixes).\n- kABI: bpf: struct bpf_insn_acces_aux kABI workaround (git-fixes).\n- kabi, mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes kabi).\n- kasan: Fix Software Tag-Based KASAN with GCC (git-fixes).\n- kasan: move checks to do_strncpy_from_user (git-fixes).\n- kbuild, bpf: Use test-ge check for v1.25-only pahole (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Add module-specific pahole flags for distilled base BTF (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later (bsc#1230414 bsc#1229450).\n- kbuild: avoid too many execution of scripts/pahole-flags.sh (bsc#1230414 bsc#1229450).\n- kbuild: bpf: Tell pahole to DECL_TAG kfuncs (bsc#1230414 bsc#1229450).\n- kconfig: qconf: fix buffer overflow in debug links (git-fixes).\n- kernel-binary: Enable livepatch package only when livepatch is enabled (bsc#1218644).\n- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y (git-fixes).\n- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry (git-fixes).\n- keys: Fix overwrite of key expiration on instantiation (git-fixes).\n- kthread: unpark only parked kthread (git-fixes).\n- leds: lp55xx: Remove redundant test for invalid channel number (git-fixes).\n- lib/xarray: introduce a new helper xas_get_order (bsc#1231617).\n- lib: string_helpers: silence snprintf() output truncation warning (git-fixes).\n- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (git-fixes).\n- macsec: do not increment counters for an unrelated SA (git-fixes).\n- mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (git-fixes).\n- maple_tree: correct tree corruption on spanning store (git-fixes).\n- maple_tree: fix alloc node fail issue (git-fixes).\n- maple_tree: refine mas_store_root() on storing NULL (git-fixes).\n- media: adv7604: prevent underflow condition when reporting colorspace (git-fixes).\n- media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: amphion: Set video drvdata before register video device (git-fixes).\n- media: ar0521: do not overflow when checking PLL values (git-fixes).\n- media: atomisp: Add check for rgby_data memory allocation failure (git-fixes).\n- media: bttv: use audio defaults for winfast2000 (git-fixes).\n- media: core: v4l2-ioctl: check if ioctl is known to avoid NULL name (git-fixes).\n- media: cx24116: prevent overflows on SNR calculus (git-fixes).\n- media: dvb_frontend: do not play tricks with underflow values (git-fixes).\n- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (stable-fixes).\n- media: dvbdev: prevent the risk of out of memory access (git-fixes).\n- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (git-fixes).\n- media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: i2c: imx335: Enable regulator supplies (stable-fixes).\n- media: i2c: tc358743: Fix crash in the probe error path when using polling (git-fixes).\n- media: imx-jpeg: Ensure power suppliers be suspended before detach them (git-fixes).\n- media: imx-jpeg: Set video drvdata before register video device (git-fixes).\n- media: imx335: Fix reset-gpio handling (git-fixes).\n- media: mantis: remove orphan mantis_core.h (git-fixes).\n- media: mtk-jpeg: Fix null-ptr-deref during unload module (git-fixes).\n- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (git-fixes).\n- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (git-fixes).\n- media: platform: exynos4-is: Fix an OF node reference leak in fimc_md_is_isp_available (git-fixes).\n- media: pulse8-cec: fix data timestamp at pulse8_setup() (git-fixes).\n- media: s5p-jpeg: prevent buffer overflows (git-fixes).\n- media: stb0899_algo: initialize cfr before using it (git-fixes).\n- media: ts2020: fix null-ptr-deref in ts2020_probe() (git-fixes).\n- media: uvcvideo: Require entities to have a non-zero unique ID (git-fixes).\n- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (git-fixes).\n- media: uvcvideo: Stop stream during unregister (git-fixes).\n- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (git-fixes).\n- media: v4l2-tpg: prevent the risk of a division by zero (git-fixes).\n- media: vb2: Fix comment (git-fixes).\n- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() (stable-fixes).\n- media: videobuf2: fix typo: vb2_dbuf -\u003e vb2_qbuf (git-fixes).\n- media: wl128x: Fix atomicity violation in fmc_send_cmd() (git-fixes).\n- mei: use kvmalloc for read buffer (git-fixes).\n- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).\n- mfd: rt5033: Fix missing regmap_del_irq_chip() (git-fixes).\n- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (git-fixes).\n- minmax: avoid overly complex min()/max() macro arguments in xen (git-fixes).\n- minmax: scsi: fix mis-use of 'clamp()' in sr.c (git-fixes).\n- misc: apds990x: Fix missing pm_runtime_disable() (git-fixes).\n- mlx5: avoid truncating error message (git-fixes).\n- mlx5: stop warning for 64KB pages (git-fixes).\n- mlxbf_gige: disable RX filters until RX path initialized (git-fixes).\n- mm/filemap: optimize filemap folio adding (bsc#1231617).\n- mm/filemap: return early if failed to allocate memory for split (bsc#1231617).\n- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (bsc#1234012).\n- mm: avoid unsafe VMA hook invocation when error arises on mmap hook (git-fixes).\n- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point (git-fixes).\n- mm: mmap: no need to call khugepaged_enter_vma() for stack (jsc#PED-10978).\n- mm: move dummy_vm_ops out of a header (git-fixes prerequisity).\n- mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes).\n- mm: refactor map_deny_write_exec() (git-fixes).\n- mm: resolve faulty mmap_region() error path behaviour (git-fixes).\n- mm: unconditionally close VMAs on error (git-fixes).\n- mmc: core: Further prevent card detect during shutdown (git-fixes).\n- mmc: mmc_spi: drop buggy snprintf() (git-fixes).\n- mmc: sunxi-mmc: Fix A100 compatible description (git-fixes).\n- modpost: fix acpi MODULE_DEVICE_TABLE built with mismatched endianness (git-fixes).\n- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (git-fixes).\n- modpost: remove incorrect code in do_eisa_entry() (git-fixes).\n- module: abort module loading when sysfs setup suffer errors (git-fixes).\n- mtd: rawnand: atmel: Fix possible memory leak (git-fixes).\n- mtd: spi-nor: core: replace dummy buswidth from addr to data (git-fixes).\n- nbd: fix race between timeout and normal completion (bsc#1230918).\n- net/mlx5: Add missing masks and QoS bit masks for scheduling elements (git-fixes).\n- net/mlx5: Added cond_resched() to crdump collection (git-fixes).\n- net/mlx5: Check capability for fw_reset (git-fixes).\n- net/mlx5: Check for invalid vector index on EQ creation (git-fixes).\n- net/mlx5: Explicitly set scheduling element and TSAR type (git-fixes).\n- net/mlx5: Fix command bitmask initialization (git-fixes).\n- net/mlx5: Fix error handling in irq_pool_request_irq (git-fixes).\n- net/mlx5: Lag, do bond only if slaves agree on roce state (git-fixes).\n- net/mlx5: Lag, do not use the hardcoded value of the first port (git-fixes).\n- net/mlx5: Stop waiting for PCI if pci channel is offline (git-fixes).\n- net/mlx5: Unregister notifier on eswitch init failure (git-fixes).\n- net/mlx5: Update the list of the PCI supported devices (git-fixes).\n- net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (git-fixes).\n- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map (git-fixes).\n- net/mlx5e: Add missing link modes to ptys2ethtool_map (git-fixes).\n- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (git-fixes).\n- net/mlx5e: Correctly report errors for ethtool rx flows (git-fixes).\n- net/mlx5e: Do not call cleanup on profile rollback failure (git-fixes).\n- net/mlx5e: Fix IPsec tunnel mode offload feature check (git-fixes).\n- net/mlx5e: Fix UDP GSO for encapsulated packets (git-fixes).\n- net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (git-fixes).\n- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (git-fixes).\n- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (git-fixes).\n- net: mana: Implement get_ringparam/set_ringparam for mana (bsc#1229891).\n- net: mana: Improve mana_set_channels() in low mem conditions (bsc#1230289).\n- net: mdio-ipq4019: add missing error check (git-fixes).\n- net: phy: Remove LED entry from LEDs list on unregister (git-fixes).\n- net: phy: bcm84881: Fix some error handling paths (git-fixes).\n- net: phy: dp83822: Fix reset pin definitions (git-fixes).\n- net: phy: dp83869: fix memory corruption when enabling fiber (git-fixes).\n- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (git-fixes).\n- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (git-fixes).\n- net: qede: use return from qede_parse_actions() (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flow_spec (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flower (git-fixes).\n- net: relax socket state check at accept time (git-fixes).\n- net: stmmac: dwmac-tegra: Fix link bring-up sequence (git-fixes)\n- net: sysfs: Fix /sys/class/net/\u0026lt;iface\u003e path for statistics (git-fixes).\n- net: test for not too small csum_start in virtio_net_hdr_to_skb() (git-fixes).\n- net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (git-fixes).\n- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (git-fixes).\n- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (git-fixes).\n- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (stable-fixes).\n- net: usb: usbnet: fix name regression (get-fixes).\n- net: usb: usbnet: fix race in probe failure (git-fixes).\n- net: wwan: fix global oob in wwan_rtnl_policy (git-fixes).\n- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() (git-fixes).\n- net: xfrm: preserve kabi for xfrm_state (bsc#1233754).\n- netdevsim: copy addresses for both in and out paths (git-fixes).\n- netdevsim: use cond_resched() in nsim_dev_trap_report_work() (git-fixes).\n- netfilter: nf_tables: missing iterator type in lookup walk (git-fixes).\n- nfs: Fix KMSAN warning in decode_getfattr_attrs() (git-fixes).\n- nfs: avoid i_lock contention in nfs_clear_invalid_mapping (git-fixes).\n- nfs: fix memory leak in error path of nfs4_do_reclaim (git-fixes).\n- nfsd: call cache_put if xdr_reserve_space returns NULL (git-fixes).\n- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (git-fixes).\n- nfsd: enable NFSv2 caused by upstream commit (bsc#1230914).\n- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (git-fixes).\n- nfsd: fix refcount leak when file is unhashed after being found (git-fixes).\n- nfsd: map the EBADMSG to nfserr_io to avoid warning (git-fixes).\n- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (git-fixes).\n- nfsd: remove unsafe BUG_ON from set_change_info (bsc#1234121).\n- nfsd: return -EINVAL when namelen is 0 (git-fixes).\n- nilfs2: fix kernel bug due to missing clearing of buffer delay flag (git-fixes).\n- nilfs2: fix potential deadlock with newly created symlinks (git-fixes).\n- nouveau/dmem: Fix privileged error in copy engine channel (git-fixes).\n- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (git-fixes).\n- nouveau/dp: handle retries for AUX CH transfers with GSP (git-fixes).\n- nouveau/gsp: Avoid addressing beyond end of rpc-\u003eentries (stable-fixes).\n- nouveau: fw: sync dma after setup is called (git-fixes).\n- nouveau: handle EBUSY and EAGAIN for GSP aux errors (git-fixes).\n- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- ntfs3: Add bounds checking to mi_enum_attr() (bsc#1233207)\n- nvme-fabrics: fix kernel crash while shutting down controller (git-fixes).\n- nvme-loop: flush off pending I/O while shutting down loop controller (git-fixes).\n- nvme-multipath: suppress partition scan until the disk is ready (bsc#1228244).\n- nvme-pci: fix freeing of the HMB descriptor table (git-fixes).\n- nvme-pci: fix race condition between reset and nvme_dev_disable() (git-fixes).\n- nvme-pci: qdepth 1 quirk (git-fixes).\n- nvme-pci: reverse request order in nvme_queue_rqs (git-fixes).\n- nvme-pci: set doorbell config before unquiescing (git-fixes).\n- nvme/host: Fix RCU list traversal to use SRCU primitive (git-fixes).\n- nvme: disable CC.CRIME (NVME_CC_CRIME) (jsc#PED-9901).\n- nvme: null terminate nvme_tls_attrs (git-fixes).\n- nvme: re-fix error-handling for io_uring nvme-passthrough (git-fixes).\n- nvme: tcp: avoid race between queue_lock lock and destroy (git-fixes).\n- nvmet-auth: assign dh_key to NULL after kfree_sensitive (git-fixes).\n- ocfs2: fix UBSAN warning in ocfs2_verify_volume() (git-fixes).\n- ocfs2: fix the la space leak when unmounting an ocfs2 volume (git-fixes).\n- ocfs2: fix uninit-value in ocfs2_get_block() (git-fixes).\n- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (git-fixes).\n- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (git-fixes).\n- ocfs2: uncache inode which has failed entering the group (git-fixes).\n- of: Add cleanup.h based auto release via __free(device_node) markings (bsc#1232386)\n- parport: Proper fix for array out-of-bounds access (git-fixes).\n- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check (git-fixes).\n- phy: qcom: qmp-combo: move driver data initialisation earlier (git-fixes).\n- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend (git-fixes).\n- phy: tegra: xusb: Add error pointer check in xusb.c (git-fixes).\n- phy: ti: phy-j721e-wiz: fix usxgmii configuration (git-fixes).\n- pinctrl: apple: check devm_kasprintf() returned value (git-fixes).\n- pinctrl: k210: Undef K210_PC_DEFAULT (git-fixes).\n- pinctrl: ocelot: fix system hang on level based interrupts (stable-fixes).\n- pinctrl: qcom: spmi: fix debugfs drive strength (git-fixes).\n- pinctrl: zynqmp: drop excess struct member description (git-fixes).\n- platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (git-fixes).\n- platform/x86/amd/pmc: Detect when STB is not available (git-fixes).\n- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug (git-fixes).\n- platform/x86: dell-sysman: add support for alienware products (stable-fixes).\n- platform/x86: dell-wmi: Ignore suspend notifications (stable-fixes).\n- platform/x86: lenovo-ymc: Ignore the 0x0 state (stable-fixes).\n- platform/x86: panasonic-laptop: Return errno correctly in show callback (git-fixes).\n- platform/x86: touchscreen_dmi: add nanote-next quirk (stable-fixes).\n- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (bsc#1234098).\n- power: reset: brcmstb: Do not go into infinite loop if reset fails (stable-fixes).\n- power: supply: bq27xxx: Fix registers of bq27426 (git-fixes).\n- power: supply: core: Remove might_sleep() from power_supply_put() (git-fixes).\n- power: supply: rt9471: Fix wrong WDT function regfield declaration (git-fixes).\n- power: supply: rt9471: Use IC status regfield to report real charger status (git-fixes).\n- powercap: intel_rapl: Fix off by one in get_rpi() (git-fixes).\n- powerpc/64: Convert patch_instruction() to patch_u32() (bsc#1194869).\n- powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0 (bsc#1215199).\n- powerpc/atomic: Use YZ constraints for DS-form instructions (bsc#1194869).\n- powerpc/boot: Handle allocation failure in simple_realloc() (bsc#1194869).\n- powerpc/boot: Only free if realloc() succeeds (bsc#1194869).\n- powerpc/code-patching: Add generic memory patching (bsc#1194869).\n- powerpc/code-patching: Perform hwsync in __patch_instruction() in case of failure (bsc#1194869).\n- powerpc/crypto: do not build aes-gcm-p10 by default (bsc#1230501 ltc#208632).\n- powerpc/crypto: fix missing skcipher dependency for aes-gcm-p10 (bsc#1230501 ltc#208632).\n- powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (bsc#1215199).\n- powerpc/fadump: Refactor and prepare fadump_cma_init for late init (bsc#1215199).\n- powerpc/kexec: Fix return of uninitialized variable (bsc#1194869).\n- powerpc/mm/fault: Fix kfence page fault reporting (bsc#1194869).\n- powerpc/mm: Fix boot crash with FLATMEM (bsc#1194869).\n- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL (bsc#1194869).\n- powerpc/powernv: Free name on error in opal_event_init() (bsc#1194869).\n- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (bsc#1194869).\n- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (bsc#1194869).\n- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct (bsc#1215199).\n- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace (bsc#1194869).\n- powerpc/vdso: Inconditionally use CFUNC macro (bsc#1215199).\n- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (bsc#1194869).\n- powerpc/xmon: Fix disassembly CPU feature checks (bsc#1065729).\n- printk: Add notation to console_srcu locking (bsc#1232183).\n- pwm: imx-tpm: Use correct MODULO value for EPWM mode (git-fixes).\n- qed: avoid truncating work queue length (git-fixes).\n- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (bsc#1226631).\n- rcu: Fix buffer overflow in print_cpu_stall_info() (bsc#1226623).\n- regmap: detach regmap from dev on regmap_exit (git-fixes).\n- regmap: irq: Set lockdep class for hierarchical IRQ domains (git-fixes).\n- rpm/check-for-config-changes: add HAVE_RUST and RUSTC_SUPPORTS_ to IGNORED_CONFIGS_RE They depend on SHADOW_CALL_STACK.\n- rpm/release-projects: Add SLFO projects (bsc#1231293).\n- rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation (bsc#1218644).\n- rpmsg: glink: Handle rejected intent request better (git-fixes).\n- rtc: ab-eoz9: do not fail temperature reads on undervoltage notification (git-fixes).\n- rtc: abx80x: Fix WDT bit position of the status register (git-fixes).\n- rtc: bbnsm: add remove hook (git-fixes).\n- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (git-fixes).\n- rtc: rzn1: fix BCD to rtc_time conversion errors (git-fixes).\n- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- runtime constants: add default dummy infrastructure (git-fixes).\n- runtime constants: add x86 architecture support (git-fixes).\n- s390/mm: Add cond_resched() to cmm_alloc/free_pages() (bsc#1228747).\n- s390/pci: Handle PCI error codes other than 0x3a (git-fixes bsc#1232629).\n- s390/sclp: Deactivate sclp after all its users (git-fixes bsc#1232628).\n- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (git-fixes bsc#1232627).\n- scsi: NCR5380: Check for phase match during PDMA fixup (git-fixes).\n- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers (git-fixes).\n- scsi: Remove scsi device no_start_on_resume flag (git-fixes).\n- scsi: aacraid: Rearrange order of struct aac_srb_unit (git-fixes).\n- scsi: cdrom: kABI: fix cdrom_dev_ops change (git-fixes).\n- scsi: core: Disable CDL by default (git-fixes).\n- scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING (git-fixes).\n- scsi: core: Fix the return value of scsi_logical_block_count() (git-fixes).\n- scsi: core: Handle devices which return an unusually large VPD page count (git-fixes).\n- scsi: core: alua: I/O errors for ALUA state transitions (git-fixes).\n- scsi: fnic: Move flush_work initialization out of if block (bsc#1230055).\n- scsi: hisi_sas: Handle the NCQ error returned by D2H frame (git-fixes).\n- scsi: hpsa: Fix allocation size for Scsi_Host private data (git-fixes).\n- scsi: kABI: restore no_start_on_resume to scsi_device (git-fixes).\n- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (git-fixes).\n- scsi: libsas: Fix the failure of adding phy with zero-address to port (git-fixes).\n- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd() (bsc#1232757).\n- scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Copyright updates for 14.4.0.6 patches (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (bsc#1232757).\n- scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (bsc#1232757).\n- scsi: lpfc: Modify CGN warning signal calculation based on EDC response (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Remove trailing space after \\n newline (bsc#1232757).\n- scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs (bsc#1232757 bsc#1228119).\n- scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to KERN_WARNING (bsc#1232757).\n- scsi: lpfc: Support loopback tests with VMID enabled (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.5 (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.6 (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE (bsc#1232757).\n- scsi: mac_scsi: Disallow bus errors during PDMA send (git-fixes).\n- scsi: mac_scsi: Refactor polling loop (git-fixes).\n- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages (git-fixes).\n- scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (git-fixes).\n- scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (git-fixes).\n- scsi: mpi3mr: Avoid possible run-time warning with long manufacturer strings (git-fixes).\n- scsi: mpi3mr: Fix ATA NCQ priority support (git-fixes).\n- scsi: mpi3mr: Validate SAS port assignments (git-fixes).\n- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (git-fixes).\n- scsi: pm8001: Do not overwrite PCI queue mapping (git-fixes).\n- scsi: pm80xx: Set phy-\u003eenable_completion only when we wait for it (git-fixes).\n- scsi: qedf: Set qed_slowpath_params to zero before use (git-fixes).\n- scsi: scsi_transport_fc: Allow setting rport state to current state (git-fixes).\n- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress (git-fixes).\n- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (git-fixes).\n- scsi: smartpqi: correct stream detection (git-fixes).\n- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly (git-fixes).\n- scsi: spi: Fix sshdr use (git-fixes).\n- scsi: sr: Fix unintentional arithmetic wraparound (git-fixes).\n- scsi: wd33c93: Do not use stale scsi_pointer value (git-fixes).\n- security/keys: fix slab-out-of-bounds in key_task_permission (git-fixes).\n- selftests/bpf: Add a test case to write mtu result into .rodata (git-fixes).\n- selftests/bpf: Add a test case to write strtol result into .rodata (git-fixes).\n- selftests/bpf: Add test for sign extension in coerce_subreg_to_size_sx() (git-fixes).\n- selftests/bpf: Add test for truncation after sign extension in coerce_reg_to_size_sx() (git-fixes).\n- selftests/bpf: Add tests for ldsx of pkt data/data_end/data_meta accesses (git-fixes).\n- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test (git-fixes).\n- selftests/bpf: Rename ARG_PTR_TO_LONG test description (git-fixes).\n- selftests/bpf: test for malformed BPF_CORE_TYPE_ID_LOCAL relocation (git-fixes).\n- serial: 8250: omap: Move pm_runtime_get_sync (git-fixes).\n- serial: imx: Update mctrl old_status on RTSD interrupt (git-fixes).\n- serial: protect uart_port_dtr_rts() in uart_shutdown() too (stable-fixes).\n- signal: Replace BUG_ON()s (bsc#1234093).\n- soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (git-fixes).\n- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (git-fixes).\n- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- soundwire: intel_bus_common: enable interrupts before exiting reset (stable-fixes).\n- spi: Fix acpi deferred irq probe (git-fixes).\n- spi: atmel-quadspi: Fix register name in verbose logging function (git-fixes).\n- spi: atmel-quadspi: Fix wrong register value written to MR (git-fixes).\n- spi: mpc52xx: Add cancel_work_sync before module remove (git-fixes).\n- spi: mtk-snfi: fix kerneldoc for mtk_snand_is_page_ops() (git-fixes).\n- spi: s3c64xx: fix timeout counters in flush_fifo (git-fixes).\n- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select (git-fixes).\n- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- spi: tegra210-quad: Avoid shift-out-of-bounds (git-fixes).\n- splice: always fsnotify_access(in), fsnotify_modify(out) on success (git-fixes).\n- splice: fsnotify_access(fd)/fsnotify_modify(fd) in vmsplice (git-fixes).\n- splice: fsnotify_access(in), fsnotify_modify(out) on success in tee (git-fixes).\n- srcu: Fix callbacks acceleration mishandling (git-fixes).\n- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (git-fixes).\n- sumversion: Fix a memory leak in get_src_version() (git-fixes).\n- supported.conf: mark nhpoly1305 module as supported (bsc#1231035).\n- supported.conf: mark ultravisor userspace access as supported (bsc#1232090).\n- task_work: add kerneldoc annotation for 'data' argument (git-fixes).\n- tcp: Fix refcnt handling in __inet_hash_connect() (git-fixes).\n- thermal: core: Initialize thermal zones before registering them (git-fixes).\n- thermal: int3400: Fix reading of current_uuid for active policy (git-fixes).\n- thermal: intel: int340x: processor: Fix warning during module unload (git-fixes).\n- thunderbolt: Honor TMU requirements in the domain when setting TMU mode (stable-fixes).\n- thunderbolt: Improve DisplayPort tunnel setup process to be more robust (stable-fixes).\n- tools/lib/thermal: Fix sampling handler context ptr (git-fixes).\n- tools/power turbostat: Fix trailing '\\n' parsing (git-fixes).\n- tools/power turbostat: Increase the limit for fd opened (bsc#1233119).\n- tools: hv: rm .*.cmd when make clean (git-fixes).\n- tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1082555 git-fixes).\n- tpm: fix signed/unsigned bug when checking event logs (git-fixes).\n- tracing/hwlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/osnoise: Fix build when timerlat is not enabled (git-fixes).\n- tracing/osnoise: Skip running osnoise if all instances are off (git-fixes).\n- tracing/osnoise: Switch from PF_NO_SETAFFINITY to migrate_disable (git-fixes).\n- tracing/osnoise: Use a cpumask to know what threads are kthreads (git-fixes).\n- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (git-fixes).\n- tracing/timerlat: Add user-space interface (git-fixes).\n- tracing/timerlat: Drop interface_lock in stop_kthread() (git-fixes).\n- tracing/timerlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (git-fixes).\n- tracing/timerlat: Move hrtimer_init to timerlat_fd open() (git-fixes).\n- tracing/timerlat: Only clear timer if a kthread exists (git-fixes).\n- tracing: Consider the NULL character when validating the event length (git-fixes).\n- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (git-fixes).\n- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (stable-fixes).\n- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (git-fixes).\n- ubifs: Fix adding orphan entry twice for the same inode (git-fixes).\n- ubifs: Fix unattached xattr inode if powercut happens after deleting (git-fixes).\n- ubifs: add check for crypto_shash_tfm_digest (git-fixes).\n- ubifs: dbg_orphan_check: Fix missed key type checking (git-fixes).\n- ucounts: fix counter leak in inc_rlimit_get_ucounts() (bsc#1233460).\n- unicode: Do not special case ignorable code points (stable-fixes).\n- unicode: Fix utf8_load() error path (git-fixes).\n- uprobe: avoid out-of-bounds memory access of fetching args (git-fixes).\n- uprobes: encapsulate preparation of uprobe args buffer (git-fixes).\n- uprobes: introduce the global struct vm_special_mapping xol_mapping (bsc#1231114).\n- uprobes: turn xol_area-\u003epages into xol_area-\u003epage (bsc#1231114).\n- usb: chipidea: udc: enable suspend interrupt after usb reset (stable-fixes).\n- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario (stable-fixes).\n- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG (git-fixes).\n- usb: dwc3: core: Stop processing of pending events if controller is halted (git-fixes).\n- usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (git-fixes).\n- usb: dwc3: gadget: Fix checking for number of TRBs left (git-fixes).\n- usb: dwc3: gadget: Fix looping of queued SG entries (git-fixes).\n- usb: ehci-spear: fix call balance of sehci clk handling routines (git-fixes).\n- usb: gadget: core: force synchronous registration (git-fixes).\n- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe (stable-fixes).\n- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler (stable-fixes).\n- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context (git-fixes).\n- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant (stable-fixes).\n- usb: gadget: f_uac2: fix non-newline-terminated function name (stable-fixes).\n- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store (git-fixes).\n- usb: musb: Fix hardware lockup on first Rx endpoint request (git-fixes).\n- usb: musb: sunxi: Fix accessing an released usb phy (git-fixes).\n- usb: phy: Fix API devm_usb_put_phy() can not release the phy (git-fixes).\n- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (stable-fixes).\n- usb: typec: altmode should keep reference to parent (git-fixes).\n- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (git-fixes).\n- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (git-fixes).\n- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (git-fixes).\n- usb: xhci: Fix TD invalidation under pending Set TR Dequeue (git-fixes).\n- usb: xhci: Fix problem with xhci resume from suspend (stable-fixes).\n- usb: xhci: fix loss of data on Cadence xHC (git-fixes).\n- usb: yurex: make waiting on yurex_write interruptible (git-fixes).\n- usbip: tools: Fix detach_port() invalid port error path (git-fixes).\n- usbnet: fix cyclical race on disconnect with work queue (git-fixes).\n- vdpa: Fix an error handling path in eni_vdpa_probe() (git-fixes).\n- vdpa_sim_blk: Fix the potential leak of mgmt_dev (git-fixes).\n- vdpa_sim_blk: allocate the buffer zeroed (git-fixes).\n- vduse: avoid using __GFP_NOFAIL (git-fixes).\n- vfs: dcache: move hashlen_hash() from callers into d_hash() (git-fixes).\n- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (git-fixes).\n- vhost_vdpa: assign irq bypass producer token correctly (git-fixes).\n- virtio_console: fix misc probe bugs (git-fixes).\n- vmalloc: modify the alloc_vmap_area() error message for better diagnostics (jsc#PED-10978).\n- vmxnet3: Add XDP support (bsc#1226498).\n- vmxnet3: Fix missing reserved tailroom (bsc#1226498).\n- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame (bsc#1226498).\n- vmxnet3: add command to allow disabling of offloads (bsc#1226498).\n- vmxnet3: add latency measurement support in vmxnet3 (bsc#1226498).\n- vmxnet3: prepare for version 9 changes (bsc#1226498).\n- vmxnet3: update to version 9 (bsc#1226498).\n- vsock: Update msg_count on read_skb() (git-fixes).\n- vt: prevent kernel-infoleak in con_font_get() (git-fixes).\n- watchdog: apple: Actually flush writes after requesting watchdog restart (git-fixes).\n- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (git-fixes).\n- watchdog: rti: of: honor timeout-sec property (git-fixes).\n- wifi: ath10k: Fix memory leak in management tx (git-fixes).\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (git-fixes).\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (git-fixes).\n- wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (git-fixes).\n- wifi: ath11k: Fix invalid ring usage in full monitor mode (git-fixes).\n- wifi: ath11k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: Skip Rx TID cleanup for self peer (git-fixes).\n- wifi: ath12k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: fix crash when unbinding (git-fixes).\n- wifi: ath12k: fix warning when unbinding (git-fixes).\n- wifi: ath12k: remove msdu_end structure for WCN7850 (git-fixes).\n- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (git-fixes).\n- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (stable-fixes).\n- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (stable-fixes).\n- wifi: brcm80211: BRCM_TRACING should depend on TRACING (git-fixes).\n- wifi: brcmfmac: release 'root' node in all execution paths (git-fixes).\n- wifi: cfg80211: Set correct chandef when starting CAC (stable-fixes).\n- wifi: cfg80211: clear wdev-\u003ecqm_config pointer on free (git-fixes).\n- wifi: cw1200: Fix potential NULL dereference (git-fixes).\n- wifi: iwlegacy: Clear stale interrupts before resuming device (stable-fixes).\n- wifi: iwlegacy: Fix 'field-spanning write' warning in il_enqueue_hcmd() (git-fixes).\n- wifi: iwlwifi: allow only CN mcc from WRDD (stable-fixes).\n- wifi: iwlwifi: config: label 'gl' devices as discrete (git-fixes).\n- wifi: iwlwifi: mvm: Fix a race in scan abort flow (stable-fixes).\n- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (git-fixes).\n- wifi: iwlwifi: mvm: avoid NULL pointer dereference (stable-fixes).\n- wifi: iwlwifi: mvm: do not add default link in fw restart flow (git-fixes).\n- wifi: iwlwifi: mvm: do not leak a link on AP removal (git-fixes).\n- wifi: iwlwifi: mvm: drop wrong STA selection in TX (stable-fixes).\n- wifi: iwlwifi: mvm: use correct key iteration (stable-fixes).\n- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL (stable-fixes).\n- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (git-fixes).\n- wifi: mac80211: fix RCU list iterations (stable-fixes).\n- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (git-fixes).\n- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation (stable-fixes).\n- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable (stable-fixes).\n- wifi: mt76: mt7915: hold dev-\u003emt76.mutex while disabling tx worker (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (git-fixes).\n- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c (stable-fixes).\n- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons (git-fixes).\n- wifi: rtw88: select WANT_DEV_COREDUMP (stable-fixes).\n- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements (stable-fixes).\n- wifi: rtw89: avoid to add interface to list twice when SER (stable-fixes).\n- wifi: rtw89: correct base HT rate mask for firmware (stable-fixes).\n- wifi: wfx: Fix error handling in wfx_core_init() (git-fixes).\n- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (bsc#1233443).\n- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load (git-fixes).\n- x86/Documentation: Indent 'note::' directive for protocol version number note (git-fixes).\n- x86/PCI: Check pcie_find_root_port() return for NULL (git-fixes).\n- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h (git-fixes).\n- x86/apic: Always explicitly disarm TSC-deadline timer (git-fixes).\n- x86/apic: Make x2apic_disable() work correctly (git-fixes).\n- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (git-fixes).\n- x86/bugs: Skip RSB fill at VMEXIT (git-fixes).\n- x86/cpufeatures: Add a IBPB_NO_RET BUG flag (git-fixes).\n- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (git-fixes).\n- x86/entry: Have entry_ibpb() invalidate return predictions (git-fixes).\n- x86/entry: Remove unwanted instrumentation in common_interrupt() (git-fixes).\n- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency (git-fixes).\n- x86/microcode/intel: Remove unnecessary cache writeback and invalidation (git-fixes).\n- x86/mm: Use IPIs to synchronize LAM enablement (git-fixes).\n- x86/resctrl: Annotate get_mem_config() functions as __init (git-fixes).\n- x86/resctrl: Avoid overflow in MB settings in bw_validate() (git-fixes).\n- x86/resctrl: Remove hard-coded memory bandwidth limit (git-fixes).\n- x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler (git-fixes).\n- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() (git-fixes).\n- x86/tdx: Dynamically disable SEPT violations from causing #VEs (git-fixes).\n- x86/tdx: Enable CPU topology enumeration (git-fixes).\n- x86/tdx: Introduce wrappers to read and write TD metadata (git-fixes).\n- x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup() (git-fixes).\n- x86/traps: move kmsan check after instrumentation_begin (git-fixes).\n- x86: Increase brk randomness entropy for 64-bit systems (git-fixes).\n- x86: do the user address masking outside the user access area (git-fixes).\n- x86: fix off-by-one in access_ok() (git-fixes).\n- x86: fix user address masking non-canonical speculation issue (git-fixes).\n- x86: make the masked_user_access_begin() macro use its argument only once (git-fixes).\n- x86: support user address masking instead of non-speculative conditional (git-fixes).\n- xfrm: Export symbol xfrm_dev_state_delete (bsc#1233754).\n- xfrm: Fix unregister netdevice hang on hardware offload (bsc#1233754).\n- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2 (git-fixes).\n- xfs: check shortform attr entry flags specifically (git-fixes).\n- xfs: convert delayed extents to unwritten when zeroing post eof blocks (git-fixes).\n- xfs: fix finding a last resort AG in xfs_filestream_pick_ag (git-fixes).\n- xfs: fix freeing speculative preallocations for preallocated files (git-fixes).\n- xfs: make sure sb_fdblocks is non-negative (git-fixes).\n- xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional (git-fixes).\n- xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset (git-fixes).\n- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent (git-fixes).\n- xfs: validate recovered name buffers when recovering xattr items (git-fixes).\n- xhci: Add a quirk for writing ERST in high-low order (git-fixes).\n- xhci: Fix Link TRB DMA in command ring stopped completion event (git-fixes).\n- xhci: Fix incorrect stream context type macro (git-fixes).\n- xhci: Mitigate failed set dequeue pointer commands (git-fixes).\n- xhci: Use pm_runtime_get to prevent RPM on unsupported systems (git-fixes).\n- xhci: tegra: fix checked USB2 port number (git-fixes).\n- zonefs: Improve error handling (git-fixes).\n","status":"published","published":"2024-12-13T15:33:38Z","modified":"2026-02-04T03:58:57.658218Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2024:4387-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).\n- CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).\n- CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562).\n- CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).\n- CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).\n- CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).\n- CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).\n- CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb-\u003ehead (bsc#1224518).\n- CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).\n- CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).\n- CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).\n- CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).\n- CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).\n- CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).\n- CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).\n- CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).\n- CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).\n- CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).\n- CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).\n- CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).\n- CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command  (bsc#1228620).\n- CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (bsc#1233132).\n- CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).\n- CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).\n- CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).\n- CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).\n- CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).\n- CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).\n- CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)\n- CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).\n- CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).\n- CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).\n- CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).\n- CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).\n- CVE-2024-46813: drm/amd/display: Check link_index before accessing dc-\u003elinks (bsc#1231191).\n- CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).\n- CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).\n- CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).\n- CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).\n- CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).\n- CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).\n- CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).\n- CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100).\n- CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).\n- CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).\n- CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).\n- CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (bsc#1231435).\n- CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (bsc#1231436).\n- CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).\n- CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442).\n- CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).\n- CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()\u0026iput() (bsc#1231930).\n- CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).\n- CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).\n- CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003).\n- CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).\n- CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).\n- CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946).\n- CVE-2024-47704: drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944).\n- CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872).\n- CVE-2024-47706: block, bfq: fix possible UAF for bfqq-\u003ebic with merge chain (bsc#1231942).\n- CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).\n- CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049).\n- CVE-2024-47727: x86/tdx: Fix 'in-kernel MMIO' check (bsc#1232116).\n- CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).\n- CVE-2024-47731: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (bsc#1232117).\n- CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).\n- CVE-2024-47741: btrfs: fix race setting file private on concurrent lseek using same fd (bsc#1231869).\n- CVE-2024-47745: mm: call the security_mmap_file() LSM hook in remap_file_pages() (bsc#1232135).\n- CVE-2024-47747: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (bsc#1232145).\n- CVE-2024-47752: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning (bsc#1232130).\n- CVE-2024-47753: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning (bsc#1231868).\n- CVE-2024-47754: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning (bsc#1232131).\n- CVE-2024-49852: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (bsc#1232819).\n- CVE-2024-49864: rxrpc: Fix a race between socket set up and I/O thread creation (bsc#1232256).\n- CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount (bsc#1232262).\n- CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).\n- CVE-2024-49881: ext4: update orig_path in ext4_find_extent() (bsc#1232201).\n- CVE-2024-49882: ext4: fix double brelse() the buffer of the extents path (bsc#1232200).\n- CVE-2024-49883: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199).\n- CVE-2024-49888: bpf: Fix a sdiv overflow issue (bsc#1232208).\n- CVE-2024-49890: drm/amd/pm: ensure the fw_info is not null before using it (bsc#1232217).\n- CVE-2024-49892: drm/amd/display: Initialize get_bytes_per_element's default to 1 (bsc#1232220).\n- CVE-2024-49894: drm/amd/display: Fix index out of bounds in degamma hardware format translation (bsc#1232354).\n- CVE-2024-49895: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (bsc#1232352).\n- CVE-2024-49896: drm/amd/display: Check stream before comparing them (bsc#1232221).\n- CVE-2024-49897: drm/amd/display: Check phantom_stream before it is used (bsc#1232355).\n- CVE-2024-49898: drm/amd/display: Check null-initialized variables (bsc#1232222).\n- CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).\n- CVE-2024-49901: drm/msm/adreno: Assign msm_gpu-\u003epdev earlier to avoid nullptrs (bsc#1232305).\n- CVE-2024-49906: drm/amd/display: Check null pointer before try to access it (bsc#1232332).\n- CVE-2024-49907: drm/amd/display: Check null pointers before using dc-\u003eclk_mgr (bsc#1232334).\n- CVE-2024-49908: drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (bsc#1232335).\n- CVE-2024-49909: drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func (bsc#1232337).\n- CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (bsc#1232366).\n- CVE-2024-49912: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (bsc#1232367).\n- CVE-2024-49913: drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (bsc#1232307).\n- CVE-2024-49914: drm/amd/display: Add null check for pipe_ctx-\u003eplane_state in (bsc#1232369).\n- CVE-2024-49917: drm/amd/display: Add NULL check for clk_mgr and clk_mgr-\u003efuncs in dcn30_init_hw (bsc#1231965).\n- CVE-2024-49918: drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer (bsc#1231967).\n- CVE-2024-49919: drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer (bsc#1231968).\n- CVE-2024-49920: drm/amd/display: Check null pointers before multiple uses (bsc#1232313).\n- CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).\n- CVE-2024-49922: drm/amd/display: Check null pointers before using them (bsc#1232374).\n- CVE-2024-49923: drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags (bsc#1232361).\n- CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)\n- CVE-2024-49933: blk_iocost: fix more out of bound shifts (bsc#1232368).\n- CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).\n- CVE-2024-49936: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424).\n- CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).\n- CVE-2024-49946: ppp: do not assume bh is held in ppp_channel_bridge_input() (bsc#1232164).\n- CVE-2024-49949: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (bsc#1232160).\n- CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).\n- CVE-2024-49953: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice (bsc#1232156).\n- CVE-2024-49954: static_call: Replace pointless WARN_ON() in static_call_module_notify() (bsc#1232155).\n- CVE-2024-49958: ocfs2: reserve space for inline xattr before attaching reflink tree (bsc#1232151).\n- CVE-2024-49959: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (bsc#1232149).\n- CVE-2024-49960: ext4: fix timer use-after-free on failed mount (bsc#1232395).\n- CVE-2024-49967: ext4: no need to continue when the number of entries is 1 (bsc#1232140).\n- CVE-2024-49968: ext4: fix error message when rejecting the default hash (bsc#1232264).\n- CVE-2024-49969: drm/amd/display: Fix index out of bounds in DCN30 color transformation (bsc#1232519).\n- CVE-2024-49972: drm/amd/display: Deallocate DML memory if allocation fails (bsc#1232315).\n- CVE-2024-49973: r8169: add tally counter fields added with RTL8125 (bsc#1232105).\n- CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383).\n- CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).\n- CVE-2024-49986: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors (bsc#1232093).\n- CVE-2024-49987: bpftool: Fix undefined behavior in qsort(NULL, 0, ...) (bsc#1232258).\n- CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).\n- CVE-2024-49991: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer (bsc#1232282).\n- CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (bsc#1232316).\n- CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).\n- CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).\n- CVE-2024-50000: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (bsc#1232085).\n- CVE-2024-50001: net/mlx5: Fix error path in multi-packet WQE transmit (bsc#1232084).\n- CVE-2024-50002: static_call: Handle module init failure correctly in static_call_del_module() (bsc#1232083).\n- CVE-2024-50003: drm/amd/display: Fix system hang while resume with TBT monitor (bsc#1232385).\n- CVE-2024-50004: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 (bsc#1232396).\n- CVE-2024-50006: ext4: fix i_data_sem unlock order in ext4_ind_migrate() (bsc#1232442).\n- CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).\n- CVE-2024-50012: cpufreq: Avoid a bad reference count on CPU node (bsc#1232386).\n- CVE-2024-50014: ext4: fix access to uninitialised lock in fc replay path (bsc#1232446).\n- CVE-2024-50015: ext4: dax: fix overflowing extents beyond inode size when partially writing (bsc#1232079).\n- CVE-2024-50020: ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() (bsc#1231989).\n- CVE-2024-50021: ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() (bsc#1231957).\n- CVE-2024-50022: device-dax: correct pgoff align in dax_set_mapping() (bsc#1231956).\n- CVE-2024-50024: net: Fix an unsafe loop on the list (bsc#1231954).\n- CVE-2024-50027: thermal: core: Free tzp copy along with the thermal zone (bsc#1231951).\n- CVE-2024-50028: thermal: core: Reference count the zone in thermal_zone_get_by_id() (bsc#1231950).\n- CVE-2024-50033: slip: make slhc_remember() more robust against malicious packets (bsc#1231914).\n- CVE-2024-50035: ppp: fix ppp_async_encode() illegal access (bsc#1232392).\n- CVE-2024-50040: igb: Do not bring the device up after non-fatal error (bsc#1231908).\n- CVE-2024-50041: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash (bsc#1231907).\n- CVE-2024-50042: ice: Fix increasing MSI-X on VF (bsc#1231906).\n- CVE-2024-50045: netfilter: br_netfilter: fix panic with metadata_dst skb (bsc#1231903).\n- CVE-2024-50046: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (bsc#1231902).\n- CVE-2024-50047: smb: client: fix UAF in async decryption (bsc#1232418).\n- CVE-2024-50059: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (bsc#1232345).\n- CVE-2024-50060: io_uring: check if we need to reschedule during overflow flush (bsc#1232417).\n- CVE-2024-50063: bpf: Prevent tail call between progs attached to different hooks (bsc#1232435).\n- CVE-2024-50064: zram: free secondary algorithms names (bsc#1231901).\n- CVE-2024-50080: ublk: do not allow user copy for unprivileged device (bsc#1232502).\n- CVE-2024-50081: blk-mq: setup queue -\u003etag_set before initializing hctx (bsc#1232501).\n- CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).\n- CVE-2024-50084: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() (bsc#1232494).\n- CVE-2024-50087: btrfs: fix uninitialized pointer free on read_alloc_one_name() error (bsc#1232499).\n- CVE-2024-50088: btrfs: fix uninitialized pointer free in add_inode_ref() (bsc#1232498).\n- CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).\n- CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).\n- CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).\n- CVE-2024-50124: Bluetooth: ISO: Fix UAF on iso_sock_timeout (bsc#1232926).\n- CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).\n- CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).\n- CVE-2024-50128: net: wwan: fix global oob in wwan_rtnl_policy (bsc#1232905).\n- CVE-2024-50130: netfilter: bpf: must hold reference on net namespace (bsc#1232894).\n- CVE-2024-50138: bpf: Use raw_spinlock_t in ringbuf (bsc#1232935).\n- CVE-2024-50139: KVM: arm64: Fix shift-out-of-bounds bug (bsc#1233062).\n- CVE-2024-50145: octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx() (bsc#1233044).\n- CVE-2024-50153: scsi: target: core: Fix null-ptr-deref in target_alloc_device() (bsc#1233061).\n- CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070).\n- CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050).\n- CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049).\n- CVE-2024-50169: vsock: Update rx_bytes on read_skb() (bsc#1233320).\n- CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057).\n- CVE-2024-50177: drm/amd/display: fix a UBSAN warning in DML2.1 (bsc#1233115).\n- CVE-2024-50182: secretmem: disable memfd_secret() if arch cannot set direct map (bsc#1233129).\n- CVE-2024-50184: virtio_pmem: Check device status before requesting flush (bsc#1233135).\n- CVE-2024-50186: net: explicitly clear the sk pointer, when pf-\u003ecreate fails (bsc#1233110).\n- CVE-2024-50192: irqchip/gic-v4: Do not allow a VMOVP on a dying VPE (bsc#1233106).\n- CVE-2024-50195: posix-clock: Fix missing timespec64 check in pc_clock_settime() (bsc#1233103).\n- CVE-2024-50225: btrfs: fix error propagation of split bios (bsc#1233193).\n- CVE-2024-50230: nilfs2: fix kernel bug due to missing clearing of checked flag (bsc#1233206).\n- CVE-2024-50245: fs/ntfs3: Fix possible deadlock in mi_read (bsc#1233203).\n- CVE-2024-50246: fs/ntfs3: Add rough attr alloc_size check (bsc#1233207).\n- CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233226).\n- CVE-2024-50257: netfilter: Fix use-after-free in get_info() (bsc#1233244).\n- CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (bsc#1233253).\n- CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-\u003etrans (bsc#1233453).\n- CVE-2024-50271: signal: restore the override_rlimit logic (bsc#1233460).\n- CVE-2024-50273: btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1233462).\n- CVE-2024-50274: idpf: avoid vport access in idpf_get_link_ksettings (bsc#1233463).\n- CVE-2024-50275: arm64/sve: Discard stale CPU state when handling SVE traps (bsc#1233464).\n- CVE-2024-50276: net: vertexcom: mse102x: Fix possible double free of TX skb (bsc#1233465).\n- CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).\n- CVE-2024-50289: media: av7110: fix a spectre vulnerability (bsc#1233478).\n- CVE-2024-50295: net: arc: fix the device for dma_map_single/dma_unmap_single (bsc#1233484).\n- CVE-2024-50298: net: enetc: allocate vf_state during PF probes (bsc#1233487).\n- CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233540).\n- CVE-2024-53048: ice: fix crash on probe for DPLL enabled E810 LOM (bsc#1233721).\n- CVE-2024-53058: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (bsc#1233552).\n- CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (bsc#1233570).\n- CVE-2024-53082: virtio_net: Add hash_key_length check (bsc#1233573).\n\nThe following non-security bugs were fixed:\n\n- 9p: explicitly deny setlease attempts (git-fixes).\n- ACPI: CPPC: Add support for setting EPP register in FFH (stable-fixes).\n- ACPI: CPPC: Fix _CPC register setting issue (git-fixes).\n- ACPI: CPPC: Make rmw_lock a raw_spin_lock (git-fixes).\n- ACPI: EC: Do not release locks during operation region accesses (stable-fixes).\n- ACPI: PAD: fix crash in exit_round_robin() (stable-fixes).\n- ACPI: PRM: Clean up guid type in struct prm_handler_info (git-fixes).\n- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (git-fixes).\n- ACPI: battery: Fix possible crash when unregistering a battery hook (git-fixes).\n- ACPI: battery: Simplify battery hook locking (stable-fixes).\n- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (stable-fixes).\n- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add another DMI match for the TongFang GMxXGxx (stable-fixes).\n- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (stable-fixes).\n- ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE (stable-fixes).\n- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (stable-fixes).\n- ACPICA: executer/exsystem: Do not nag user about every Stall() violating the spec (git-fixes).\n- ACPICA: iasl: handle empty connection_node (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: cleanup sdw_intel_scan_controller (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: fetch fwnode once in sdw_intel_scan_controller() (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: simplify sdw-master-count property read (stable-fixes).\n- ALSA: 6fire: Release resources at card release (git-fixes).\n- ALSA: Reorganize kerneldoc parameter names (stable-fixes).\n- ALSA: ac97: bus: Fix the mistake in the comment (git-fixes).\n- ALSA: asihpi: Fix potential OOB array access (stable-fixes).\n- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ALSA: core: add isascii() check to card ID generator (stable-fixes).\n- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (git-fixes).\n- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (git-fixes).\n- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (stable-fixes).\n- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (git-fixes).\n- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (git-fixes).\n- ALSA: hda/conexant: fix some typos (stable-fixes).\n- ALSA: hda/cs8409: Fix possible NULL dereference (git-fixes).\n- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs (bsc#1219803).\n- ALSA: hda/realtek - Fixed Clevo platform headset Mic issue (stable-fixes).\n- ALSA: hda/realtek - update set GPIO3 to default for Thinkpad with ALC1318 (git-fixes).\n- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (stable-fixes).\n- ALSA: hda/realtek: Apply quirk for Medion E15433 (bsc#1233298).\n- ALSA: hda/realtek: Enable mic on Vaio VJFH52 (stable-fixes).\n- ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform (bsc#1233298).\n- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (bsc#1233298).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 (stable-fixes).\n- ALSA: hda/realtek: Fix the push button function for the ALC257 (git-fixes).\n- ALSA: hda/realtek: Limit internal Mic boost on Dell platform (stable-fixes).\n- ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init (stable-fixes).\n- ALSA: hda/realtek: Set PCBeep to default value for ALC274 (stable-fixes).\n- ALSA: hda/realtek: Update ALC225 depop procedure (git-fixes).\n- ALSA: hda/realtek: Update ALC256 depop procedure (git-fixes).\n- ALSA: hda/realtek: Update default depop procedure (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8 (stable-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10 (stable-fixes).\n- ALSA: hda/realtek: tas2781: Fix ROG ALLY X audio (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects (stable-fixes).\n- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE (git-fixes).\n- ALSA: hda: Poll jack events for LS7A HD-Audio (stable-fixes).\n- ALSA: hda: Show the codec quirk info at probing (stable-fixes).\n- ALSA: hda: Sound support for HP Spectre x360 16 inch model 2024 (stable-fixes).\n- ALSA: hda: tas2781: Fix missing setup at runtime PM (bsc#1230132).\n- ALSA: hdsp: Break infinite MIDI input flush loop (stable-fixes).\n- ALSA: ice1712: Remove redundant code in stac9460_dac_vol_put (stable-fixes).\n- ALSA: line6: add hw monitor volume control to POD HD500X (stable-fixes).\n- ALSA: line6: update contact information (stable-fixes).\n- ALSA: mixer_oss: Remove some incorrect kfree_const() usages (git-fixes).\n- ALSA: pcm: Add sanity NULL check for the default mmap fault handler (stable-fixes).\n- ALSA: silence integer wrapping warning (stable-fixes).\n- ALSA: ump: Fix evaluation of MIDI 1.0 FB info (git-fixes).\n- ALSA: us122l: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ALSA: usb-audio: Add Pioneer DJ/AlphaTheta DJM-A9 Mixer (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET (stable-fixes).\n- ALSA: usb-audio: Add input value sanity checks for standard types (stable-fixes).\n- ALSA: usb-audio: Add logitech Audio profile quirk (stable-fixes).\n- ALSA: usb-audio: Add native DSD support for Luxman D-08u (stable-fixes).\n- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1232768).\n- ALSA: usb-audio: Add quirks for Dell WD19 dock (stable-fixes).\n- ALSA: usb-audio: Define macros for quirk table entries (stable-fixes).\n- ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (stable-fixes).\n- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (stable-fixes).\n- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (git-fixes).\n- ALSA: usb-audio: Make mic volume workarounds globally applicable (stable-fixes).\n- ALSA: usb-audio: Replace complex quirk lines with macros (stable-fixes).\n- ALSA: usb-audio: Use snprintf instead of sprintf in build_mixer_unit_ctl (stable-fixes).\n- ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (stable-fixes).\n- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (git-fixes).\n- ASoC: Intel: sst: Support LPE0F28 ACPI HID (stable-fixes).\n- ASoC: SOF: Add i2s bt dai configuration support for AMD platforms (bsc#1233305).\n- ASoC: SOF: Add support for configuring PDM interface from topology (bsc#1233305).\n- ASoC: SOF: Deprecate invalid enums in IPC3 (bsc#1233305).\n- ASoC: SOF: IPC4: get pipeline priority from topology (bsc#1233305).\n- ASoC: SOF: IPC4: synchronize fw_config_params with fw definitions (bsc#1233305).\n- ASoC: SOF: Refactor sof_i2s_tokens reading to update acpbt dai (bsc#1233305).\n- ASoC: SOF: Rename amd_bt sof_dai_type (bsc#1233305).\n- ASoC: SOF: Wire up buffer flags (bsc#1233305).\n- ASoC: SOF: add alignment for topology header file struct definition (bsc#1233305).\n- ASoC: SOF: align topology header file with sof topology header (bsc#1233305).\n- ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index (git-fixes).\n- ASoC: SOF: ipc4-control: Add support for ALSA enum control (bsc#1233305).\n- ASoC: SOF: ipc4-control: Add support for ALSA switch control (bsc#1233305).\n- ASoC: SOF: ipc4-mtrace: move debug slot related definitions to header.h (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add deep buffer size to debug prints (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add module ID print during module set up (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Helper to find an swidget by module/instance id (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (bsc#1233305).\n- ASoC: SOF: ipc4-topology: change chain_dma handling in dai_config (bsc#1233305).\n- ASoC: SOF: ipc4-topology: export sof_ipc4_copier_is_single_format (bsc#1233305).\n- ASoC: SOF: ipc4-topology: set config_length based on device_count (bsc#1233305).\n- ASoC: SOF: ipc4: Add data struct for module notification message from firmware (bsc#1233305).\n- ASoC: SOF: ipc4: Add new message type: SOF_IPC4_GLB_LOAD_LIBRARY_PREPARE (bsc#1233305).\n- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits (git-fixes).\n- ASoC: SOF: topology: Parse DAI type token for dspless mode (bsc#1233305).\n- ASoC: SOF: topology: dynamically allocate and store DAI widget-\u003eprivate (bsc#1233305).\n- ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA (stable-fixes).\n- ASoC: amd: yc: Add quirk for HP Dragonfly pro one (stable-fixes).\n- ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (git-fixes).\n- ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA (stable-fixes).\n- ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6 (stable-fixes).\n- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022 (stable-fixes).\n- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized (git-fixes).\n- ASoC: audio-graph-card2: Purge absent supplies for device tree nodes (stable-fixes).\n- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (git-fixes).\n- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (stable-fixes).\n- ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work() (stable-fixes).\n- ASoC: codecs: wsa883x: Handle reading version failure (stable-fixes).\n- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (git-fixes).\n- ASoC: dapm: fix bounds checker error in dapm_widget_list_create (git-fixes).\n- ASoC: fsl_micfil: Add sample rate constraint (stable-fixes).\n- ASoC: fsl_micfil: fix regmap_write_bits usage (git-fixes).\n- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (stable-fixes).\n- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m (git-fixes).\n- ASoC: max98388: Fix missing increment of variable slot_found (git-fixes).\n- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (git-fixes).\n- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (stable-fixes).\n- ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c (git-fixes).\n- ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue (stable-fixes).\n- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (git-fixes).\n- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (stable-fixes).\n- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (stable-fixes).\n- ASoC: tas2781: Add new driver version for tas2563 \u0026 tas2781 qfn chip (stable-fixes).\n- ASoC: tas2781: Use of_property_read_reg() (stable-fixes).\n- Bluetooth: Call iso_exit() on module unload (git-fixes).\n- Bluetooth: ISO: Fix multiple init when debugfs is disabled (git-fixes).\n- Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (git-fixes).\n- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (git-fixes).\n- Bluetooth: Remove debugfs directory on module init failure (git-fixes).\n- Bluetooth: bnep: fix wild-memory-access in proto_unregister (git-fixes).\n- Bluetooth: btintel: Direct exception event to bluetooth stack (git-fixes).\n- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 (stable-fixes).\n- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (git-fixes).\n- Bluetooth: fix use-after-free in device_for_each_child() (git-fixes).\n- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (git-fixes).\n- Bluetooth: hci_core: Fix calling mgmt_device_connected (git-fixes).\n- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (git-fixes).\n- HID: Ignore battery for all ELAN I2C-HID devices (stable-fixes).\n- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (git-fixes).\n- HID: core: zero-initialize the report buffer (git-fixes).\n- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk (stable-fixes).\n- HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (stable-fixes).\n- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (stable-fixes).\n- HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (stable-fixes).\n- HID: multitouch: Add support for B2402FVA track point (stable-fixes).\n- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (stable-fixes).\n- HID: multitouch: Add support for lenovo Y9000P Touchpad (stable-fixes).\n- HID: plantronics: Workaround for an unexcepted opposite volume key (stable-fixes).\n- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (git-fixes).\n- Input: adp5589-keys - fix NULL pointer dereference (git-fixes).\n- Input: adp5589-keys - fix adp5589_gpio_get_value() (git-fixes).\n- Input: edt-ft5x06 - fix regmap leak when probe fails (git-fixes).\n- Input: hideep - add missing dependency on REGMAP_I2C (git-fixes).\n- Input: hycon-hy46xx - add missing dependency on REGMAP_I2C (git-fixes).\n- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (stable-fixes).\n- Input: xpad - add GameSir T4 Kaleid Controller support (git-fixes).\n- Input: xpad - add GameSir VID for Xbox One controllers (git-fixes).\n- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller (git-fixes).\n- Input: xpad - add support for MSI Claw A1M (git-fixes).\n- Input: xpad - add support for Machenike G5 Pro Controller (git-fixes).\n- Input: xpad - fix support for some third-party controllers (git-fixes).\n- Input: xpad - sort xpad_device by vendor and product ID (git-fixes).\n- Input: xpad - spelling fixes for 'Xbox' (git-fixes).\n- KVM: Add KVM vcpu ioctl to pre-populate guest memory (jsc#PED-6143).\n- KVM: Add KVM_PRE_FAULT_MEMORY vcpu ioctl to pre-populate guest memory (jsc#PED-6143).\n- KVM: Add new members to struct kvm_gfn_range to operate on (jsc#PED-6143).\n- KVM: Document KVM_MEMORY_MAPPING ioctl (jsc#PED-6143).\n- KVM: Document KVM_PRE_FAULT_MEMORY ioctl (jsc#PED-6143).\n- KVM: Fix coalesced_mmio_has_room() to avoid premature userspace exit (git-fixes).\n- KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending doorbells (bsc#1215199).\n- KVM: PPC: Book3S HV: Stop using vc-\u003edpdes for nested KVM guests (bsc#1215199).\n- KVM: PPC: Book3S HV: remove unused varible (bsc#1194869).\n- KVM: SEV-ES: Fix svm_get_msr()/svm_set_msr() for KVM_SEV_ES_INIT guests (bsc#1232207).\n- KVM: SEV-ES: Prevent MSR access post VMSA encryption (bsc#1232207).\n- KVM: SVM: Disallow guest from changing userspace's MSR_AMD64_DE_CFG value (git-fixes).\n- KVM: TDX: Add C wrapper functions for SEAMCALLs to the TDX module (jsc#PED-6143).\n- KVM: TDX: Add TDX 'architectural' error codes (jsc#PED-6143).\n- KVM: TDX: Add helper functions to print TDX SEAMCALL error (jsc#PED-6143).\n- KVM: TDX: Add placeholders for TDX VM/vcpu structure (jsc#PED-6143).\n- KVM: TDX: Define TDX architectural definitions (jsc#PED-6143).\n- KVM: TDX: Make TDX VM type supported (jsc#PED-6143).\n- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock (git-fixes).\n- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled (git-fixes).\n- KVM: VMX: Move out vmx_x86_ops to 'main.c' to dispatch VMX and TDX (jsc#PED-6143).\n- KVM: VMX: Set PFERR_GUEST_{FINAL,PAGE}_MASK if and only if the GVA is valid (git-fixes).\n- KVM: Write the per-page 'segment' when clearing (part of) a guest page (git-fixes).\n- KVM: s390: Change virtual to physical address access in diag 0x258 handler (git-fixes bsc#1232626).\n- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (git-fixes bsc#1231276).\n- KVM: s390: gaccess: Check if guest address is in memslot (git-fixes bsc#1232623).\n- KVM: x86/mmu: Account pf_{fixed,emulate,spurious} in callers of 'do page fault' (jsc#PED-6143).\n- KVM: x86/mmu: Assume guest MMIOs are shared (jsc#PED-6143).\n- KVM: x86/mmu: Bump pf_taken stat only in the 'real' page fault handler (jsc#PED-6143).\n- KVM: x86/mmu: Check that root is valid/loaded when pre-faulting SPTEs (git-fixes).\n- KVM: x86/mmu: Make kvm_mmu_do_page_fault() return mapped level (jsc#PED-6143).\n- KVM: x86/mmu: Skip emulation on page fault iff 1+ SPs were unprotected (git-fixes).\n- KVM: x86/mmu: Trigger unprotect logic only on write-protection page faults (git-fixes).\n- KVM: x86/vmx: Refactor KVM VMX module init/exit functions (jsc#PED-6143).\n- KVM: x86/vmx: initialize loaded_vmcss_on_cpu in vmx_init() (jsc#PED-6143).\n- KVM: x86: Add is_vm_type_supported callback (jsc#PED-6143).\n- KVM: x86: Dedup fastpath MSR post-handling logic (git-fixes).\n- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits (git-fixes).\n- KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (git-fixes).\n- KVM: x86: Implement kvm_arch_vcpu_pre_fault_memory() (jsc#PED-6143).\n- KVM: x86: Implement kvm_arch_{, pre_}vcpu_memory_mapping() (jsc#PED-6143).\n- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode() (git-fixes).\n- KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (git-fixes).\n- KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- NFS: Avoid unnecessary rescanning of the per-server delegation list (git-fixes).\n- NFS: remove revoked delegation from server's delegation list (git-fixes).\n- NFSD: Fix NFSv4's PUTPUBFH operation (git-fixes).\n- NFSD: Mark filecache 'down' if init fails (git-fixes).\n- NFSv3: only use NFS timeout for MOUNT when protocols are compatible (bsc#1231016).\n- NFSv4: Fix clearing of layout segments in layoutreturn (git-fixes).\n- PCI: Add ACS quirk for Qualcomm SA8775P (stable-fixes).\n- PCI: Add T_PVPERL macro (git-fixes).\n- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip (stable-fixes).\n- PCI: Fix pci_enable_acs() support for the ACS quirks (bsc#1229019).\n- PCI: Fix reset_method_store() memory leak (git-fixes).\n- PCI: Mark Creative Labs EMU20k2 INTx masking as broken (stable-fixes).\n- PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf() (git-fixes).\n- PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds (git-fixes).\n- PCI: keystone: Add link up check to ks_pcie_other_map_bus() (git-fixes).\n- PCI: keystone: Set mode as Root Complex for 'ti,keystone-pcie' compatible (git-fixes).\n- PCI: rockchip-ep: Fix address translation unit programming (git-fixes).\n- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix (jsc#PED-10559).\n- RAS/AMD/ATL: Expand helpers for adding and removing base and hole (jsc#PED-10559).\n- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization (jsc#PED-10559).\n- RAS/AMD/ATL: Read DRAM hole base early (jsc#PED-10559).\n- RAS/AMD/ATL: Validate address map when information is gathered (jsc#PED-10559).\n- RDMA/bnxt_re: Add a check for memory allocation (git-fixes)\n- RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (git-fixes)\n- RDMA/bnxt_re: Change the sequence of updating the CQ toggle value (git-fixes)\n- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (git-fixes)\n- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (git-fixes)\n- RDMA/bnxt_re: Fix a possible memory leak (git-fixes)\n- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (git-fixes)\n- RDMA/bnxt_re: Fix incorrect dereference of srq in async event (git-fixes)\n- RDMA/bnxt_re: Fix out of bound check (git-fixes)\n- RDMA/bnxt_re: Fix the GID table length (git-fixes)\n- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters (git-fixes)\n- RDMA/bnxt_re: Fix the usage of control path spin locks (git-fixes)\n- RDMA/bnxt_re: Return more meaningful error (git-fixes)\n- RDMA/bnxt_re: synchronize the qp-handle table array (git-fixes)\n- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)\n- RDMA/cxgb4: Dump vendor specific QP details (git-fixes)\n- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (git-fixes)\n- RDMA/hns: Add mutex_destroy() (git-fixes)\n- RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset (git-fixes)\n- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (git-fixes)\n- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci (git-fixes)\n- RDMA/hns: Fix cpu stuck caused by printings during reset (git-fixes)\n- RDMA/hns: Fix different dgids mapping to the same dip_idx (git-fixes)\n- RDMA/hns: Fix flush cqe error when racing with destroy qp (git-fixes)\n- RDMA/hns: Fix out-of-order issue of requester when setting FENCE (git-fixes)\n- RDMA/hns: Use dev_* printings in hem code instead of ibdev_* (git-fixes)\n- RDMA/hns: Use macro instead of magic number (git-fixes)\n- RDMA/irdma: Fix misspelling of 'accept*' (git-fixes)\n- RDMA/mad: Improve handling of timed out WRs of mad agent (git-fixes)\n- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (git-fixes).\n- RDMA/mana_ib: use the correct page table index based on hardware page size (git-fixes).\n- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults (git-fixes)\n- RDMA/mlx5: Move events notifier registration to be after device registration (git-fixes)\n- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (git-fixes)\n- RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled (git-fixes).\n- RDMA/rtrs-srv: Avoid null pointer deref during path establishment (git-fixes)\n- RDMA/rxe: Fix the qp flush warnings in req (git-fixes)\n- RDMA/rxe: Set queue pair cur_qp_state when being queried (git-fixes)\n- RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES (git-fixes)\n- RDMA/srpt: Make slab cache names unique (git-fixes)\n- SUNRPC: Fix integer overflow in decode_rc_list() (git-fixes).\n- SUNRPC: Fixup gss_status tracepoint error output (git-fixes).\n- SUNRPC: Remove BUG_ON call sites (git-fixes).\n- SUNRPC: clnt.c: Remove misleading comment (git-fixes).\n- USB: appledisplay: close race between probe and completion handler (git-fixes).\n- USB: chaoskey: Fix possible deadlock chaoskey_list_lock (git-fixes).\n- USB: chaoskey: fail open after removal (git-fixes).\n- USB: gadget: dummy-hcd: Fix 'task hung' problem (git-fixes).\n- USB: misc: cypress_cy7c63: check for short transfer (git-fixes).\n- USB: misc: yurex: fix race between read and write (git-fixes).\n- USB: serial: ftdi_sio: Fix atomicity violation in get_serial_info() (git-fixes).\n- USB: serial: io_edgeport: fix use after free in debug printk (git-fixes).\n- USB: serial: option: add Fibocom FG132 0x0112 composition (stable-fixes).\n- USB: serial: option: add Quectel RG650V (stable-fixes).\n- USB: serial: option: add Telit FN920C04 MBIM compositions (stable-fixes).\n- USB: serial: option: add support for Quectel EG916Q-GL (stable-fixes).\n- USB: serial: qcserial: add support for Sierra Wireless EM86xx (stable-fixes).\n- VM: TDX: Initialize the TDX module when loading the KVM intel kernel module (jsc#PED-6143).\n- VM: x86/mmu: Introduce kvm_mmu_map_tdp_page() for use by TDX (jsc#PED-6143).\n- accel/qaic: Fix the for loop used to walk SG table (git-fixes).\n- accel: Use XArray instead of IDR for minors (jsc#PED-11580).\n- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (git-fixes).\n- ad7780: fix division by zero in ad7780_write_raw() (git-fixes).\n- aes-gcm-p10: Use the correct bit to test for P10 (bsc#1232704).\n- amd-pstate: Set min_perf to nominal_perf for active mode performance gov (git-fixes).\n- apparmor: fix 'Do simple duplicate message elimination' (git-fixes).\n- apparmor: test: Fix memory leak for aa_unpack_strdup() (git-fixes).\n- apparmor: use kvfree_sensitive to free data-\u003edata (git-fixes).\n- arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (git-fixes)\n- arm64: cputype: Add Neoverse-N3 definitions (git-fixes)\n- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (git-fixes).\n- arm64: errata: Expand speculative SSBS workaround once more (git-fixes)\n- arm64: esr: Define ESR_ELx_EC_* constants as UL (git-fixes)\n- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS (git-fixes).\n- arm64: probes: Fix simulate_ldr*_literal() (git-fixes)\n- arm64: probes: Fix uprobes for big-endian kernels (git-fixes)\n- arm64: probes: Remove broken LDR (literal) uprobe support (git-fixes)\n- ata: libata: Set DID_TIME_OUT for commands that actually timed out (git-fixes).\n- ata: libata: avoid superfluous disk spin down + spin up during hibernation (git-fixes).\n- audit: do not WARN_ON_ONCE(!current-\u003emm) in audit_exe_compare() (git-fixes).\n- audit: do not take task_lock() in audit_exe_compare() code path (git-fixes).\n- block: print symbolic error name instead of error code (bsc#1231872).\n- block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (bsc#1229677).\n- bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response (git-fixes).\n- bnxt_en: Fix error recovery for 5760X (P7) chips (git-fixes).\n- bnxt_en: Fix the PCI-AER routines (git-fixes).\n- bnxt_en: Restore PTP tx_avail count in case of skb_pad() error (git-fixes).\n- bnxt_en: refactor reset close code (git-fixes).\n- bpf, lsm: Add disabled BPF LSM hook list (git-fixes).\n- bpf, net: Fix a potential race in do_sock_getsockopt() (git-fixes).\n- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock (git-fixes).\n- bpf, verifier: Correct tail_call_reachable for bpf prog (git-fixes).\n- bpf, vsock: Drop static vsock_bpf_prot initialization (git-fixes).\n- bpf, x64: Remove tail call detection (git-fixes).\n- bpf,perf: Fix perf_event_detach_bpf_prog error handling (git-fixes).\n- bpf: Fail verification for sign-extension of packet data/data_end/data_meta (git-fixes).\n- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (git-fixes).\n- bpf: Fix error message on kfunc arg type mismatch (git-fixes).\n- bpf: Fix helper writes to read-only maps (git-fixes).\n- bpf: Fix tailcall cases in test_bpf (git-fixes).\n- bpf: Fix truncation bug in coerce_reg_to_size_sx() (git-fixes).\n- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types (git-fixes).\n- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers (git-fixes).\n- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (git-fixes).\n- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos (git-fixes).\n- btf, scripts: rust: drop is_rust_module.sh (bsc#1230414 bsc#1229450).\n- btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() (bsc#1233193)\n- btrfs: send: fix invalid clone operation for file that got its size decreased (git-fixes).\n- cachefiles: fix dentry leak in cachefiles_open_file() (bsc#1231183).\n- can: c_can: fix {rx,tx}_errors statistics (git-fixes).\n- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation (git-fixes).\n- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes (git-fixes).\n- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode (stable-fixes).\n- ceph: fix cap ref leak via netfs init_request (bsc#1231384).\n- ceph: remove the incorrect Fw reference check when dirtying pages (bsc#1231182).\n- cgroup/bpf: only cgroup v2 can be attached by bpf programs (bsc#1234108).\n- clk: bcm: bcm53573: fix OF node leak in init (stable-fixes).\n- clk: clk-apple-nco: Add NULL check in applnco_probe (git-fixes).\n- clk: clk-axi-clkgen: make sure to enable the AXI bus clock (git-fixes).\n- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (stable-fixes).\n- clk: imx: clk-scu: fix clk enable state save and restore (git-fixes).\n- clk: imx: fracn-gppll: correct PLL initialization flow (git-fixes).\n- clk: imx: fracn-gppll: fix pll power up (git-fixes).\n- clk: imx: lpcg-scu: SW workaround for errata (e10858) (git-fixes).\n- clk: qcom: clk-alpha-pll: drop lucid-evo pll enabled warning (git-fixes).\n- clk: qcom: clk-alpha-pll: fix lucid 5lpe pll enabled check (git-fixes).\n- clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (git-fixes).\n- clk: renesas: rzg2l: Fix FOUTPOSTDIV clk (git-fixes).\n- clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset (git-fixes).\n- comedi: Flush partial mappings in error case (git-fixes).\n- comedi: ni_routing: tools: Check when the file could not be opened (stable-fixes).\n- config: Disable LAM on x86 (bsc#1217845).\n- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems (git-fixes).\n- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (git-fixes).\n- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (git-fixes).\n- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() (git-fixes).\n- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() (git-fixes).\n- cpufreq: loongson2: Unregister platform_driver on failure (git-fixes).\n- cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (git-fixes).\n- crypto: aes-gcm-p10 - Use the correct bit to test for P10 (bsc#1232704).\n- crypto: api - Fix liveliness check in crypto_alg_tested (stable-fixes).\n- crypto: bcm - add error check in the ahash_hmac_init function (git-fixes).\n- crypto: caam - Fix the pointer passed to caam_qi_shutdown() (git-fixes).\n- crypto: caam - add error check to caam_rsa_set_priv_key_form (git-fixes).\n- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (git-fixes).\n- crypto: cavium - Fix the if condition to exit loop after timeout (git-fixes).\n- crypto: hisilicon/qm - flush all work before driver removed (bsc#1232075)\n- crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() (git-fixes).\n- crypto: octeontx - Fix authenc setkey (stable-fixes).\n- crypto: octeontx* - Select CRYPTO_AUTHENC (git-fixes).\n- crypto: octeontx2 - Fix authenc setkey (stable-fixes).\n- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (git-fixes).\n- crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTO_SIMD and re-enable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Register modules as SIMD (bsc#1230501 ltc#208632).\n- crypto: qat - remove check after debugfs_create_dir() (git-fixes).\n- crypto: qat - remove faulty arbiter config reset (git-fixes).\n- crypto: qat/qat_4xxx - fix off by one in uof_get_name() (git-fixes).\n- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (git-fixes).\n- cxgb4: Properly lock TX queue for the selftest (git-fixes).\n- cxgb4: add forgotten u64 ivlan cast before shift (git-fixes).\n- cxgb4: unnecessary check for 0 in the free_sge_txq_uld() function (git-fixes).\n- cxl: downgrade a warning message to debug level in cxl_probe_component_regs() (bsc#1229165).\n- dcache: keep dentry_hashtable or d_hash_shift even when not used (git-fixes).\n- debugfs: fix automount d_fsdata usage (git-fixes).\n- devlink: Fix command annotation documentation (git-fixes).\n- dmaengine: sh: rz-dmac: handle configs where one address is zero (git-fixes).\n- dmaengine: ti: k3-udma: Set EOP for all TRs in cyclic BCDMA transfer (git-fixes).\n- doc: rcu: update printed dynticks counter bits (git-fixes).\n- driver core: bus: Fix double free in driver API bus_register() (stable-fixes).\n- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (stable-fixes).\n- drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() (git-fixes).\n- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring (git-fixes).\n- drm/amd/display: Add HDMI DSC native YCbCr422 support (stable-fixes).\n- drm/amd/display: Add disable timeout option (bsc#1231435)\n- drm/amd/display: Adjust VSDB parser for replay feature (stable-fixes).\n- drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944)\n- drm/amd/display: Check null pointer before dereferencing se (stable-fixes).\n- drm/amd/display: Clean up dsc blocks in accelerated mode (stable-fixes).\n- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (stable-fixes).\n- drm/amd/display: Fix brightness level not retained over reboot (git-fixes).\n- drm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe (git-fixes).\n- drm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in hwss_setup_dpp (git-fixes).\n- drm/amd/display: Remove a redundant check in authenticated_dp (stable-fixes).\n- drm/amd/display: Revert 'Check HDCP returned status' (stable-fixes).\n- drm/amd/display: Round calculated vtotal (stable-fixes).\n- drm/amd/display: Skip to enable dsc if it has been off (stable-fixes).\n- drm/amd/display: Validate backlight caps are sane (stable-fixes).\n- drm/amd/pm: Vangogh: Fix kernel memory out of bounds write (git-fixes).\n- drm/amd: Add some missing straps from NBIO 7.11.0 (git-fixes).\n- drm/amd: Fix initialization mistake for NBIO 7.7.0 (stable-fixes).\n- drm/amd: Guard against bad data for ATIF ACPI method (git-fixes).\n- drm/amdgpu/swsmu: Only force workload setup on init (git-fixes).\n- drm/amdgpu/vcn: enable AV1 on both instances (stable-fixes).\n- drm/amdgpu: Adjust debugfs eviction and IB access permissions (stable-fixes).\n- drm/amdgpu: Adjust debugfs register access permissions (stable-fixes).\n- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (git-fixes).\n- drm/amdgpu: Fix JPEG v4.0.3 register write (git-fixes).\n- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (stable-fixes).\n- drm/amdgpu: fix check in gmc_v9_0_get_vm_pte() (git-fixes).\n- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (git-fixes).\n- drm/amdkfd: Accounting pdd vram_usage for svm (stable-fixes).\n- drm/amdkfd: Fix wrong usage of INIT_WORK() (git-fixes).\n- drm/bridge: anx7625: Drop EDID cache on bridge power off (git-fixes).\n- drm/bridge: it6505: Drop EDID cache on bridge power off (git-fixes).\n- drm/bridge: tc358767: Fix link properties discovery (git-fixes).\n- drm/bridge: tc358768: Fix DSI command tx (git-fixes).\n- drm/etnaviv: Request pages from DMA32 zone on addressing_limited (git-fixes).\n- drm/etnaviv: hold GPU lock across perfmon sampling (git-fixes).\n- drm/i915/gem: fix bitwise and logical AND mixup (git-fixes).\n- drm/i915/hdcp: fix connector refcounting (git-fixes).\n- drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/mediatek: Fix child node refcount handling in early exit (git-fixes).\n- drm/mediatek: Fix get efuse issue for MT8188 DPTX (git-fixes).\n- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (git-fixes).\n- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (git-fixes).\n- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds() (git-fixes).\n- drm/msm/dpu: do not always program merge_3d block (git-fixes).\n- drm/msm/dpu: drop LM_3 / LM_4 on MSM8998 (git-fixes).\n- drm/msm/dpu: drop LM_3 / LM_4 on SDM845 (git-fixes).\n- drm/msm/dpu: make sure phys resources are properly initialized (git-fixes).\n- drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check (git-fixes).\n- drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block (git-fixes).\n- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (git-fixes).\n- drm/msm/dsi: improve/fix dsc pclk calculation (git-fixes).\n- drm/msm/gpu: Check the status of registration to PM QoS (git-fixes).\n- drm/msm: Allocate memory for disp snapshot with kvzalloc() (git-fixes).\n- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (git-fixes).\n- drm/msm: Fix some typos in comment (git-fixes).\n- drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() (git-fixes).\n- drm/omap: Fix locking in omap_gem_new_dmabuf() (git-fixes).\n- drm/omap: Fix possible NULL dereference (git-fixes).\n- drm/panfrost: Add missing OPP table refcnt decremental (git-fixes).\n- drm/panfrost: Remove unused id_mask from struct panfrost_model (git-fixes).\n- drm/radeon: Fix encoder-\u003epossible_clones (git-fixes).\n- drm/rockchip: vop: Fix a dereferenced before check warning (git-fixes).\n- drm/sched: Add locking to drm_sched_entity_modify_sched (git-fixes).\n- drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job (git-fixes).\n- drm/sti: avoid potential dereference of error pointers (git-fixes).\n- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (git-fixes).\n- drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (git-fixes).\n- drm/v3d: Address race-condition in MMU flush (git-fixes).\n- drm/v3d: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (stable-fixes).\n- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush (git-fixes).\n- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load (git-fixes).\n- drm/vc4: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vc4: hdmi: Avoid hang with debug registers when suspended (git-fixes).\n- drm/vc4: hvs: Correct logic on stopping an HVS channel (git-fixes).\n- drm/vc4: hvs: Do not write gamma luts on 2711 (git-fixes).\n- drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer (git-fixes).\n- drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function (git-fixes).\n- drm/vkms: Drop unnecessary call to drm_crtc_cleanup() (git-fixes).\n- drm/vmwgfx: Handle surface check failure correctly (git-fixes).\n- drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (stable-fixes).\n- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS (git-fixes).\n- drm: Expand max DRM device number to full MINORBITS (jsc#PED-11580).\n- drm: Use XArray instead of IDR for minors (jsc#PED-11580).\n- drm: use ATOMIC64_INIT() for atomic64_t (git-fixes).\n- drm: xlnx: zynqmp_dpsub: fix hotplug detection (git-fixes).\n- drm: zynqmp_kms: Unplug DRM device before removal (git-fixes).\n- e1000e: Fix S0ix residency on corporate systems (git-fixes).\n- e1000e: Remove Meteor Lake SMBUS workarounds (git-fixes).\n- e1000e: change I219 (19) devices to ADP (git-fixes).\n- e1000e: fix force smbus during suspend flow (git-fixes).\n- e1000e: move force SMBUS near the end of enable_ulp function (git-fixes).\n- efi/libstub: Free correct pointer on failure (git-fixes).\n- efi/libstub: fix efi_parse_options() ignoring the default command line (git-fixes).\n- efi/libstub: zboot.lds: Discard .discard sections (stable-fixes).\n- efi/memattr: Ignore table if the size is clearly bogus (bsc#1231465).\n- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (stable-fixes).\n- eth: bnxt: fix counting packets discarded due to OOM and netpoll (git-fixes).\n- ext4: do not track ranges in fast_commit if inode has inlined data (bsc#1231635).\n- ext4: fix fast commit inode enqueueing during a full journal commit (bsc#1231636).\n- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible() (bsc#1231637).\n- ext4: fix possible tid_t sequence overflows (bsc#1231634).\n- ext4: fix slab-use-after-free in ext4_split_extent_at() (bsc#1232201)\n- ext4: fix unttached inode after power cut with orphan file feature enabled (bsc#1234009).\n- ext4: mark fc as ineligible using an handle in ext4_xattr_set() (bsc#1231640).\n- ext4: use handle to mark fc as ineligible in __track_dentry_update() (bsc#1231639).\n- f2fs: get out of a repeat loop when getting a locked data page (bsc#1234011).\n- fat: fix uninitialized variable (git-fixes).\n- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (stable-fixes).\n- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (git-fixes).\n- fbdev: sisfb: Fix strbuf array overflow (stable-fixes).\n- fgraph: Change the name of cpuhp state to 'fgraph:online' (git-fixes).\n- fgraph: Fix missing unlock in register_ftrace_graph() (git-fixes).\n- fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks (git-fixes).\n- filemap: remove use of wait bookmarks (bsc#1224088).\n- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (git-fixes).\n- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (git-fixes).\n- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (git-fixes).\n- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (git-fixes).\n- firmware: google: Unregister driver_info on failure (git-fixes).\n- firmware_loader: Fix possible resource leak in fw_log_firmware_info() (git-fixes).\n- fs/9p: drop inodes immediately on non-.L too (git-fixes).\n- fs/9p: fix the cache always being enabled on files with qid flags (git-fixes).\n- fs/ntfs3: Add more attributes checks in mi_enum_attr() (bsc#1233207)\n- fs/ntfs3: Fixed overflow check in mi_enum_attr() (bsc#1233207)\n- fs/ntfs3: Sequential field availability check in mi_enum_attr() (bsc#1233207)\n- fs: Fix uninitialized value issue in from_kuid and from_kgid (git-fixes).\n- genirq/msi: Fix off-by-one error in msi_domain_alloc() (git-fixes).\n- goldfish: Fix unused const variable 'goldfish_pipe_acpi_match' (git-fixes).\n- gpio: aspeed: Add the flush write to ensure the write complete (git-fixes).\n- gpio: aspeed: Use devm_clk api to manage clock source (git-fixes).\n- gpio: davinci: fix lazy disable (git-fixes).\n- gpio: exar: set value when external pull-up or pull-down is present (git-fixes).\n- gpio: zevio: Add missed label initialisation (git-fixes).\n- gve: Fix XDP TX completion handling when counters overflow (git-fixes).\n- gve: Fix an edge case for TSO skb validity check (git-fixes).\n- gve: ignore nonrelevant GSO type bits when processing TSO headers (git-fixes).\n- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (git-fixes).\n- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (git-fixes).\n- hv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer (git-fixes).\n- hwmon: (adm9240) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (adt7470) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (max16065) Fix alarm attributes (git-fixes).\n- hwmon: (max16065) Remove use of i2c_match_id() (stable-fixes).\n- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list (stable-fixes).\n- hwmon: (nct6775-core) Fix overflows seen when writing limit attributes (git-fixes).\n- hwmon: (tmp513) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (tps23861) Fix reporting of negative temperatures (git-fixes).\n- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature (git-fixes).\n- i2c: core: Setup i2c_adapter runtime-pm before calling device_add() (git-fixes).\n- i2c: core: fix lockdep warning for sparsely nested adapter chain (git-fixes).\n- i2c: cpm: Remove linux,i2c-index conversion from be32 (git-fixes).\n- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set (git-fixes).\n- i2c: exynos5: Calculate t_scl_l, t_scl_h according to i2c spec (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell Precision 3540 (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell XPS 15 7590 (git-fixes).\n- i2c: i801: Use a different adapter-name for IDF adapters (stable-fixes).\n- i2c: i801: add helper i801_restore_regs (git-fixes).\n- i2c: ismt: kill transaction in hardware on timeout (git-fixes).\n- i2c: ocores: Move system PM hooks to the NOIRQ phase (git-fixes).\n- i2c: ocores: Remove #ifdef guards for PM related functions (git-fixes).\n- i2c: omap: switch to NOIRQ_SYSTEM_SLEEP_PM_OPS() and RUNTIME_PM_OPS() (git-fixes).\n- i2c: omap: wakeup the controller during suspend() callback (git-fixes).\n- i2c: rcar: properly format a debug output (git-fixes).\n- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume (git-fixes).\n- i2c: stm32f7: perform most of irq job in threaded handler (git-fixes).\n- i2c: synquacer: Deal with optional PCLK correctly (git-fixes).\n- i2c: synquacer: Remove a clk reference from struct synquacer_i2c (stable-fixes).\n- i2c: xiic: Try re-initialization on bus busy timeout (git-fixes).\n- i2c: xiic: improve error message when transfer fails to start (stable-fixes).\n- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (git-fixes).\n- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition (stable-fixes).\n- i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- i40e: Fix XDP program unloading while removing the driver (git-fixes).\n- i40e: Report MFS in decimal base instead of hex (git-fixes).\n- i40e: fix race condition by adding filter's intermediate sync state (git-fixes).\n- iavf: Fix TC config comparison with existing adapter TC config (git-fixes).\n- ice: Fix VSI list rule with ICE_SW_LKUP_LAST type (git-fixes).\n- ice: Fix checking for unsupported keys on non-tunnel device (git-fixes).\n- ice: Fix lldp packets dropping after changing the number of channels (git-fixes).\n- ice: Fix netif_is_ice() in Safe Mode (git-fixes).\n- ice: Fix package download algorithm (git-fixes).\n- ice: Fix recipe read procedure (git-fixes).\n- ice: Fix reset handler (git-fixes).\n- ice: Flush FDB entries before reset (git-fixes).\n- ice: Interpret .set_channels() input differently (git-fixes).\n- ice: Rebuild TC queues on VSI queue reconfiguration (git-fixes).\n- ice: Reject pin requests with unsupported flags (git-fixes).\n- ice: add flag to distinguish reset from .ndo_bpf in XDP rings config (git-fixes).\n- ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (git-fixes).\n- ice: avoid IRQ collision to fix init failure on ACPI S3 resume (git-fixes).\n- ice: clear port vlan config during reset (git-fixes).\n- ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins (git-fixes).\n- ice: do not bring the VSI up, if it was down before the XDP setup (git-fixes).\n- ice: do not busy wait for Rx queue disable in ice_qp_dis() (git-fixes).\n- ice: fix 200G PHY types to link speed mapping (git-fixes).\n- ice: fix 200G link speed message log (git-fixes).\n- ice: fix ICE_LAST_OFFSET formula (git-fixes).\n- ice: fix VLAN replay after reset (git-fixes).\n- ice: fix VSI lists confusion when adding VLANs (git-fixes).\n- ice: fix accounting for filters shared by multiple VSIs (git-fixes).\n- ice: fix accounting if a VLAN already exists (git-fixes).\n- ice: fix iteration of TLVs in Preserved Fields Area (git-fixes).\n- ice: fix page reuse when PAGE_SIZE is over 8k (git-fixes).\n- ice: fix reads from NVM Shadow RAM on E830 and E825-C devices (git-fixes).\n- ice: fix truesize operations for PAGE_SIZE \u003e= 8192 (git-fixes).\n- ice: implement AQ download pkg retry (git-fixes).\n- ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors() (git-fixes).\n- ice: remove af_xdp_zc_qps bitmap (git-fixes).\n- ice: replace synchronize_rcu with synchronize_net (git-fixes).\n- ice: respect netif readiness in AF_XDP ZC related ndo's (git-fixes).\n- ice: set correct dst VSI in only LAN filters (git-fixes).\n- ice: tc: allow zero flags in parsing tc flower (git-fixes).\n- ice: tc: check src_vsi in case of traffic from VF (git-fixes).\n- ice: use proper macro for testing bit (git-fixes).\n- idpf: Interpret .set_channels() input differently (git-fixes).\n- idpf: avoid bloating \u0026idpf_q_vector with big %NR_CPUS (git-fixes).\n- idpf: do not enable NAPI and interrupts prior to allocating Rx buffers (git-fixes).\n- idpf: do not skip over ethtool tcp-data-split setting (git-fixes).\n- idpf: fix UAFs when destroying the queues (git-fixes).\n- idpf: fix memleak in vport interrupt configuration (git-fixes).\n- idpf: fix memory leaks and crashes while performing a soft reset (git-fixes).\n- ieee802154: Fix build error (git-fixes).\n- igb: Always call igb_xdp_ring_update_tail() under Tx lock (git-fixes).\n- igb: Disable threaded IRQ for igb_msix_other (git-fixes).\n- igb: Fix not clearing TimeSync interrupts for 82580 (git-fixes).\n- igc: Fix double reset adapter triggered from a single taprio cmd (git-fixes).\n- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (git-fixes).\n- igc: Fix qbv tx latency by setting gtxoffset (git-fixes).\n- igc: Fix qbv_config_change_errors logics (git-fixes).\n- igc: Fix reset adapter logics when tx mode change (git-fixes).\n- igc: Unlock on error in igc_io_resume() (git-fixes).\n- iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (git-fixes).\n- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling (git-fixes).\n- iio: accel: kx022a: Fix raw read format (git-fixes).\n- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (git-fixes).\n- iio: adc: ad7606: Fix typo in the driver name (git-fixes).\n- iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer (git-fixes).\n- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (git-fixes).\n- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts: Fix uninitialized symbol 'ret' (git-fixes).\n- iio: gts: fix infinite loop for gain_to_scaletables() (git-fixes).\n- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (git-fixes).\n- iio: light: al3010: Fix an error handling path in al3010_probe() (git-fixes).\n- iio: light: opt3001: add missing full-scale range value (git-fixes).\n- iio: light: veml6030: fix ALS sensor resolution (git-fixes).\n- iio: light: veml6030: fix IIO device retrieval from embedded device (git-fixes).\n- iio: light: veml6030: fix microlux value calculation (git-fixes).\n- iio: magnetometer: ak8975: Convert enum-\u003epointer for data in the match tables (stable-fixes).\n- iio: magnetometer: ak8975: Fix 'Unexpected device' error (git-fixes).\n- iio: magnetometer: ak8975: drop incorrect AK09116 compatible (git-fixes).\n- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- ima: fix buffer overrun in ima_eventdigest_init_common (git-fixes).\n- initramfs: avoid filename buffer overrun (bsc#1232436).\n- intel_idle: add Granite Rapids Xeon support (bsc#1231630).\n- intel_idle: fix ACPI _CST matching for newer Xeon platforms (bsc#1231630).\n- io_uring/eventfd: move to more idiomatic RCU free usage (git-fixes).\n- io_uring/io-wq: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/io-wq: inherit cpuset of cgroup in io worker (git-fixes).\n- io_uring/net: harden multishot termination case for recv (git-fixes).\n- io_uring/rw: fix cflags posting for single issue multishot read (git-fixes).\n- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (git-fixes).\n- io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN (git-fixes).\n- io_uring/sqpoll: close race on waiting for sqring entries (git-fixes).\n- io_uring/sqpoll: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/sqpoll: do not put cpumask on stack (git-fixes).\n- io_uring/sqpoll: retain test for whether the CPU is valid (git-fixes).\n- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL (git-fixes).\n- iommu/amd: Allocate the page table root using GFP_KERNEL (git-fixes).\n- iommu/amd: Do not set the D bit on AMD v2 table entries (git-fixes).\n- iommu/amd: Fix typo of , instead of ; (git-fixes).\n- iommu/vt-d: Always reserve a domain ID for identity setup (git-fixes).\n- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (git-fixes).\n- iommufd: Check the domain owner of the parent before creating a nesting domain (git-fixes).\n- iommufd: Protect against overflow of ALIGN() during iova allocation (git-fixes).\n- irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (git-fixes).\n- jbd2: Move j_transaction_overhead_buffers into a hole (bsc#1234042).\n- jbd2: avoid infinite transaction commit loop (bsc#1234039).\n- jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (bsc#1234043).\n- jbd2: avoid mount failed when commit block is partial submitted (bsc#1234040).\n- jbd2: correct the printing of write_flags in jbd2_write_superblock() (bsc#1234045).\n- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit (bsc#1231638).\n- jbd2: fix kernel-doc for j_transaction_overhead_buffers (bsc#1234042).\n- jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (bsc#1234044).\n- jbd2: fix soft lockup in journal_finish_inode_data_buffers() (bsc#1234046).\n- jbd2: make jbd2_journal_get_max_txn_bufs() internal (bsc#1234041).\n- jbd2: precompute number of transaction descriptor blocks (bsc#1234042).\n- jfs: Fix sanity check in dbMount (git-fixes).\n- jfs: Fix uaf in dbFreeBits (git-fixes).\n- jfs: Fix uninit-value access of new_ea in ea_buffer (git-fixes).\n- jfs: UBSAN: shift-out-of-bounds in dbFindBits (git-fixes).\n- jfs: check if leafidx greater than num leaves per dmap tree (git-fixes).\n- jump_label: Fix static_key_slow_dec() yet again (git-fixes).\n- kABI fix of VM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- kABI: bpf: enum bpf_{type_flag,arg_type} kABI workaround (git-fixes).\n- kABI: bpf: struct bpf_insn_acces_aux kABI workaround (git-fixes).\n- kabi, mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes kabi).\n- kasan: Fix Software Tag-Based KASAN with GCC (git-fixes).\n- kasan: move checks to do_strncpy_from_user (git-fixes).\n- kbuild, bpf: Use test-ge check for v1.25-only pahole (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Add module-specific pahole flags for distilled base BTF (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later (bsc#1230414 bsc#1229450).\n- kbuild: avoid too many execution of scripts/pahole-flags.sh (bsc#1230414 bsc#1229450).\n- kbuild: bpf: Tell pahole to DECL_TAG kfuncs (bsc#1230414 bsc#1229450).\n- kconfig: qconf: fix buffer overflow in debug links (git-fixes).\n- kernel-binary: Enable livepatch package only when livepatch is enabled (bsc#1218644).\n- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y (git-fixes).\n- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry (git-fixes).\n- keys: Fix overwrite of key expiration on instantiation (git-fixes).\n- kthread: unpark only parked kthread (git-fixes).\n- leds: lp55xx: Remove redundant test for invalid channel number (git-fixes).\n- lib/xarray: introduce a new helper xas_get_order (bsc#1231617).\n- lib: string_helpers: silence snprintf() output truncation warning (git-fixes).\n- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (git-fixes).\n- macsec: do not increment counters for an unrelated SA (git-fixes).\n- mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (git-fixes).\n- maple_tree: correct tree corruption on spanning store (git-fixes).\n- maple_tree: fix alloc node fail issue (git-fixes).\n- maple_tree: refine mas_store_root() on storing NULL (git-fixes).\n- media: adv7604: prevent underflow condition when reporting colorspace (git-fixes).\n- media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: amphion: Set video drvdata before register video device (git-fixes).\n- media: ar0521: do not overflow when checking PLL values (git-fixes).\n- media: atomisp: Add check for rgby_data memory allocation failure (git-fixes).\n- media: bttv: use audio defaults for winfast2000 (git-fixes).\n- media: core: v4l2-ioctl: check if ioctl is known to avoid NULL name (git-fixes).\n- media: cx24116: prevent overflows on SNR calculus (git-fixes).\n- media: dvb_frontend: do not play tricks with underflow values (git-fixes).\n- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (stable-fixes).\n- media: dvbdev: prevent the risk of out of memory access (git-fixes).\n- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (git-fixes).\n- media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: i2c: imx335: Enable regulator supplies (stable-fixes).\n- media: i2c: tc358743: Fix crash in the probe error path when using polling (git-fixes).\n- media: imx-jpeg: Ensure power suppliers be suspended before detach them (git-fixes).\n- media: imx-jpeg: Set video drvdata before register video device (git-fixes).\n- media: imx335: Fix reset-gpio handling (git-fixes).\n- media: mantis: remove orphan mantis_core.h (git-fixes).\n- media: mtk-jpeg: Fix null-ptr-deref during unload module (git-fixes).\n- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (git-fixes).\n- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (git-fixes).\n- media: platform: exynos4-is: Fix an OF node reference leak in fimc_md_is_isp_available (git-fixes).\n- media: pulse8-cec: fix data timestamp at pulse8_setup() (git-fixes).\n- media: s5p-jpeg: prevent buffer overflows (git-fixes).\n- media: stb0899_algo: initialize cfr before using it (git-fixes).\n- media: ts2020: fix null-ptr-deref in ts2020_probe() (git-fixes).\n- media: uvcvideo: Require entities to have a non-zero unique ID (git-fixes).\n- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (git-fixes).\n- media: uvcvideo: Stop stream during unregister (git-fixes).\n- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (git-fixes).\n- media: v4l2-tpg: prevent the risk of a division by zero (git-fixes).\n- media: vb2: Fix comment (git-fixes).\n- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() (stable-fixes).\n- media: videobuf2: fix typo: vb2_dbuf -\u003e vb2_qbuf (git-fixes).\n- media: wl128x: Fix atomicity violation in fmc_send_cmd() (git-fixes).\n- mei: use kvmalloc for read buffer (git-fixes).\n- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).\n- mfd: rt5033: Fix missing regmap_del_irq_chip() (git-fixes).\n- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (git-fixes).\n- minmax: avoid overly complex min()/max() macro arguments in xen (git-fixes).\n- minmax: scsi: fix mis-use of 'clamp()' in sr.c (git-fixes).\n- misc: apds990x: Fix missing pm_runtime_disable() (git-fixes).\n- mlx5: avoid truncating error message (git-fixes).\n- mlx5: stop warning for 64KB pages (git-fixes).\n- mlxbf_gige: disable RX filters until RX path initialized (git-fixes).\n- mm/filemap: optimize filemap folio adding (bsc#1231617).\n- mm/filemap: return early if failed to allocate memory for split (bsc#1231617).\n- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (bsc#1234012).\n- mm: avoid unsafe VMA hook invocation when error arises on mmap hook (git-fixes).\n- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point (git-fixes).\n- mm: mmap: no need to call khugepaged_enter_vma() for stack (jsc#PED-10978).\n- mm: move dummy_vm_ops out of a header (git-fixes prerequisity).\n- mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes).\n- mm: refactor map_deny_write_exec() (git-fixes).\n- mm: resolve faulty mmap_region() error path behaviour (git-fixes).\n- mm: unconditionally close VMAs on error (git-fixes).\n- mmc: mmc_spi: drop buggy snprintf() (git-fixes).\n- mmc: sunxi-mmc: Fix A100 compatible description (git-fixes).\n- modpost: fix acpi MODULE_DEVICE_TABLE built with mismatched endianness (git-fixes).\n- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (git-fixes).\n- modpost: remove incorrect code in do_eisa_entry() (git-fixes).\n- module: abort module loading when sysfs setup suffer errors (git-fixes).\n- mtd: rawnand: atmel: Fix possible memory leak (git-fixes).\n- mtd: spi-nor: core: replace dummy buswidth from addr to data (git-fixes).\n- nbd: fix race between timeout and normal completion (bsc#1230918).\n- net/mlx5: Add missing masks and QoS bit masks for scheduling elements (git-fixes).\n- net/mlx5: Added cond_resched() to crdump collection (git-fixes).\n- net/mlx5: Check capability for fw_reset (git-fixes).\n- net/mlx5: Check for invalid vector index on EQ creation (git-fixes).\n- net/mlx5: Explicitly set scheduling element and TSAR type (git-fixes).\n- net/mlx5: Fix command bitmask initialization (git-fixes).\n- net/mlx5: Fix error handling in irq_pool_request_irq (git-fixes).\n- net/mlx5: Lag, do bond only if slaves agree on roce state (git-fixes).\n- net/mlx5: Lag, do not use the hardcoded value of the first port (git-fixes).\n- net/mlx5: Stop waiting for PCI if pci channel is offline (git-fixes).\n- net/mlx5: Unregister notifier on eswitch init failure (git-fixes).\n- net/mlx5: Update the list of the PCI supported devices (git-fixes).\n- net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (git-fixes).\n- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map (git-fixes).\n- net/mlx5e: Add missing link modes to ptys2ethtool_map (git-fixes).\n- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (git-fixes).\n- net/mlx5e: Correctly report errors for ethtool rx flows (git-fixes).\n- net/mlx5e: Do not call cleanup on profile rollback failure (git-fixes).\n- net/mlx5e: Fix IPsec tunnel mode offload feature check (git-fixes).\n- net/mlx5e: Fix UDP GSO for encapsulated packets (git-fixes).\n- net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (git-fixes).\n- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (git-fixes).\n- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (git-fixes).\n- net: mana: Implement get_ringparam/set_ringparam for mana (bsc#1229891).\n- net: mana: Improve mana_set_channels() in low mem conditions (bsc#1230289).\n- net: mdio-ipq4019: add missing error check (git-fixes).\n- net: phy: Remove LED entry from LEDs list on unregister (git-fixes).\n- net: phy: bcm84881: Fix some error handling paths (git-fixes).\n- net: phy: dp83822: Fix reset pin definitions (git-fixes).\n- net: phy: dp83869: fix memory corruption when enabling fiber (git-fixes).\n- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (git-fixes).\n- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (git-fixes).\n- net: qede: use return from qede_parse_actions() (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flow_spec (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flower (git-fixes).\n- net: relax socket state check at accept time (git-fixes).\n- net: stmmac: dwmac-tegra: Fix link bring-up sequence (git-fixes)\n- net: sysfs: Fix /sys/class/net/\u0026lt;iface\u003e path for statistics (git-fixes).\n- net: test for not too small csum_start in virtio_net_hdr_to_skb() (git-fixes).\n- net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (git-fixes).\n- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (git-fixes).\n- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (git-fixes).\n- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (stable-fixes).\n- net: usb: usbnet: fix name regression (get-fixes).\n- net: usb: usbnet: fix race in probe failure (git-fixes).\n- net: wwan: fix global oob in wwan_rtnl_policy (git-fixes).\n- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() (git-fixes).\n- net: xfrm: preserve kabi for xfrm_state (bsc#1233754).\n- netdevsim: use cond_resched() in nsim_dev_trap_report_work() (git-fixes).\n- netfilter: nf_tables: missing iterator type in lookup walk (git-fixes).\n- nfs: Fix KMSAN warning in decode_getfattr_attrs() (git-fixes).\n- nfs: avoid i_lock contention in nfs_clear_invalid_mapping (git-fixes).\n- nfs: fix memory leak in error path of nfs4_do_reclaim (git-fixes).\n- nfsd: call cache_put if xdr_reserve_space returns NULL (git-fixes).\n- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (git-fixes).\n- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (git-fixes).\n- nfsd: fix refcount leak when file is unhashed after being found (git-fixes).\n- nfsd: map the EBADMSG to nfserr_io to avoid warning (git-fixes).\n- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (git-fixes).\n- nfsd: remove unsafe BUG_ON from set_change_info (bsc#1234121).\n- nfsd: return -EINVAL when namelen is 0 (git-fixes).\n- nilfs2: fix kernel bug due to missing clearing of buffer delay flag (git-fixes).\n- nilfs2: fix potential deadlock with newly created symlinks (git-fixes).\n- nouveau/dmem: Fix privileged error in copy engine channel (git-fixes).\n- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (git-fixes).\n- nouveau/dp: handle retries for AUX CH transfers with GSP (git-fixes).\n- nouveau/gsp: Avoid addressing beyond end of rpc-\u003eentries (stable-fixes).\n- nouveau: fw: sync dma after setup is called (git-fixes).\n- nouveau: handle EBUSY and EAGAIN for GSP aux errors (git-fixes).\n- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- ntfs3: Add bounds checking to mi_enum_attr() (bsc#1233207)\n- nvme-fabrics: fix kernel crash while shutting down controller (git-fixes).\n- nvme-loop: flush off pending I/O while shutting down loop controller (git-fixes).\n- nvme-multipath: suppress partition scan until the disk is ready (bsc#1228244).\n- nvme-pci: fix freeing of the HMB descriptor table (git-fixes).\n- nvme-pci: fix race condition between reset and nvme_dev_disable() (git-fixes).\n- nvme-pci: qdepth 1 quirk (git-fixes).\n- nvme-pci: reverse request order in nvme_queue_rqs (git-fixes).\n- nvme-pci: set doorbell config before unquiescing (git-fixes).\n- nvme/host: Fix RCU list traversal to use SRCU primitive (git-fixes).\n- nvme: disable CC.CRIME (NVME_CC_CRIME) (jsc#PED-9901).\n- nvme: null terminate nvme_tls_attrs (git-fixes).\n- nvme: re-fix error-handling for io_uring nvme-passthrough (git-fixes).\n- nvme: tcp: avoid race between queue_lock lock and destroy (git-fixes).\n- nvmet-auth: assign dh_key to NULL after kfree_sensitive (git-fixes).\n- ocfs2: fix UBSAN warning in ocfs2_verify_volume() (git-fixes).\n- ocfs2: fix the la space leak when unmounting an ocfs2 volume (git-fixes).\n- ocfs2: fix uninit-value in ocfs2_get_block() (git-fixes).\n- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (git-fixes).\n- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (git-fixes).\n- ocfs2: uncache inode which has failed entering the group (git-fixes).\n- of: Add cleanup.h based auto release via __free(device_node) markings (bsc#1232386)\n- parport: Proper fix for array out-of-bounds access (git-fixes).\n- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check (git-fixes).\n- phy: qcom: qmp-combo: move driver data initialisation earlier (git-fixes).\n- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend (git-fixes).\n- phy: tegra: xusb: Add error pointer check in xusb.c (git-fixes).\n- phy: ti: phy-j721e-wiz: fix usxgmii configuration (git-fixes).\n- pinctrl: apple: check devm_kasprintf() returned value (git-fixes).\n- pinctrl: k210: Undef K210_PC_DEFAULT (git-fixes).\n- pinctrl: ocelot: fix system hang on level based interrupts (stable-fixes).\n- pinctrl: qcom: spmi: fix debugfs drive strength (git-fixes).\n- pinctrl: zynqmp: drop excess struct member description (git-fixes).\n- platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (git-fixes).\n- platform/x86/amd/pmc: Detect when STB is not available (git-fixes).\n- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug (git-fixes).\n- platform/x86: dell-sysman: add support for alienware products (stable-fixes).\n- platform/x86: dell-wmi: Ignore suspend notifications (stable-fixes).\n- platform/x86: lenovo-ymc: Ignore the 0x0 state (stable-fixes).\n- platform/x86: panasonic-laptop: Return errno correctly in show callback (git-fixes).\n- platform/x86: touchscreen_dmi: add nanote-next quirk (stable-fixes).\n- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (bsc#1234098).\n- power: reset: brcmstb: Do not go into infinite loop if reset fails (stable-fixes).\n- power: supply: bq27xxx: Fix registers of bq27426 (git-fixes).\n- power: supply: core: Remove might_sleep() from power_supply_put() (git-fixes).\n- power: supply: rt9471: Fix wrong WDT function regfield declaration (git-fixes).\n- power: supply: rt9471: Use IC status regfield to report real charger status (git-fixes).\n- powercap: intel_rapl: Fix off by one in get_rpi() (git-fixes).\n- powerpc/64: Convert patch_instruction() to patch_u32() (bsc#1194869).\n- powerpc/boot: Handle allocation failure in simple_realloc() (bsc#1194869).\n- powerpc/boot: Only free if realloc() succeeds (bsc#1194869).\n- powerpc/code-patching: Add generic memory patching (bsc#1194869).\n- powerpc/code-patching: Perform hwsync in __patch_instruction() in case of failure (bsc#1194869).\n- powerpc/crypto: do not build aes-gcm-p10 by default (bsc#1230501 ltc#208632).\n- powerpc/crypto: fix missing skcipher dependency for aes-gcm-p10 (bsc#1230501 ltc#208632).\n- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace (bsc#1194869).\n- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (bsc#1194869).\n- powerpc/xmon: Fix disassembly CPU feature checks (bsc#1065729).\n- printk: Add notation to console_srcu locking (bsc#1232183).\n- pwm: imx-tpm: Use correct MODULO value for EPWM mode (git-fixes).\n- qed: avoid truncating work queue length (git-fixes).\n- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (bsc#1226631).\n- rcu: Fix buffer overflow in print_cpu_stall_info() (bsc#1226623).\n- regmap: irq: Set lockdep class for hierarchical IRQ domains (git-fixes).\n- rpm/check-for-config-changes: add HAVE_RUST and RUSTC_SUPPORTS_ to IGNORED_CONFIGS_RE They depend on SHADOW_CALL_STACK.\n- rpm/release-projects: Add SLFO projects (bsc#1231293).\n- rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation. (bsc#1218644)\n- rpmsg: glink: Handle rejected intent request better (git-fixes).\n- rtc: ab-eoz9: do not fail temperature reads on undervoltage notification (git-fixes).\n- rtc: abx80x: Fix WDT bit position of the status register (git-fixes).\n- rtc: bbnsm: add remove hook (git-fixes).\n- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (git-fixes).\n- rtc: rzn1: fix BCD to rtc_time conversion errors (git-fixes).\n- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- runtime constants: add default dummy infrastructure (git-fixes).\n- runtime constants: add x86 architecture support (git-fixes).\n- s390/mm: Add cond_resched() to cmm_alloc/free_pages() (bsc#1228747).\n- s390/pci: Handle PCI error codes other than 0x3a (git-fixes bsc#1232629).\n- s390/sclp: Deactivate sclp after all its users (git-fixes bsc#1232628).\n- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (git-fixes bsc#1232627).\n- scsi: NCR5380: Check for phase match during PDMA fixup (git-fixes).\n- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers (git-fixes).\n- scsi: Remove scsi device no_start_on_resume flag (git-fixes).\n- scsi: aacraid: Rearrange order of struct aac_srb_unit (git-fixes).\n- scsi: cdrom: kABI: fix cdrom_dev_ops change (git-fixes).\n- scsi: core: Disable CDL by default (git-fixes).\n- scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING (git-fixes).\n- scsi: core: Fix the return value of scsi_logical_block_count() (git-fixes).\n- scsi: core: Handle devices which return an unusually large VPD page count (git-fixes).\n- scsi: core: alua: I/O errors for ALUA state transitions (git-fixes).\n- scsi: fnic: Move flush_work initialization out of if block (bsc#1230055).\n- scsi: hisi_sas: Handle the NCQ error returned by D2H frame (git-fixes).\n- scsi: hpsa: Fix allocation size for Scsi_Host private data (git-fixes).\n- scsi: kABI: restore no_start_on_resume to scsi_device (git-fixes).\n- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (git-fixes).\n- scsi: libsas: Fix the failure of adding phy with zero-address to port (git-fixes).\n- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd() (bsc#1232757).\n- scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Copyright updates for 14.4.0.6 patches (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (bsc#1232757).\n- scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (bsc#1232757).\n- scsi: lpfc: Modify CGN warning signal calculation based on EDC response (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Remove trailing space after \\n newline (bsc#1232757).\n- scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs (bsc#1232757 bsc#1228119).\n- scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to KERN_WARNING (bsc#1232757).\n- scsi: lpfc: Support loopback tests with VMID enabled (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.5 (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.6 (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE (bsc#1232757).\n- scsi: mac_scsi: Disallow bus errors during PDMA send (git-fixes).\n- scsi: mac_scsi: Refactor polling loop (git-fixes).\n- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages (git-fixes).\n- scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (git-fixes).\n- scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (git-fixes).\n- scsi: mpi3mr: Avoid possible run-time warning with long manufacturer strings (git-fixes).\n- scsi: mpi3mr: Fix ATA NCQ priority support (git-fixes).\n- scsi: mpi3mr: Validate SAS port assignments (git-fixes).\n- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (git-fixes).\n- scsi: pm8001: Do not overwrite PCI queue mapping (git-fixes).\n- scsi: pm80xx: Set phy-\u003eenable_completion only when we wait for it (git-fixes).\n- scsi: qedf: Set qed_slowpath_params to zero before use (git-fixes).\n- scsi: scsi_transport_fc: Allow setting rport state to current state (git-fixes).\n- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress (git-fixes).\n- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (git-fixes).\n- scsi: smartpqi: correct stream detection (git-fixes).\n- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly (git-fixes).\n- scsi: spi: Fix sshdr use (git-fixes).\n- scsi: sr: Fix unintentional arithmetic wraparound (git-fixes).\n- scsi: wd33c93: Do not use stale scsi_pointer value (git-fixes).\n- security/keys: fix slab-out-of-bounds in key_task_permission (git-fixes).\n- selftests/bpf: Add a test case to write mtu result into .rodata (git-fixes).\n- selftests/bpf: Add a test case to write strtol result into .rodata (git-fixes).\n- selftests/bpf: Add test for sign extension in coerce_subreg_to_size_sx() (git-fixes).\n- selftests/bpf: Add test for truncation after sign extension in coerce_reg_to_size_sx() (git-fixes).\n- selftests/bpf: Add tests for ldsx of pkt data/data_end/data_meta accesses (git-fixes).\n- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test (git-fixes).\n- selftests/bpf: Rename ARG_PTR_TO_LONG test description (git-fixes).\n- selftests/bpf: test for malformed BPF_CORE_TYPE_ID_LOCAL relocation (git-fixes).\n- serial: 8250: omap: Move pm_runtime_get_sync (git-fixes).\n- serial: imx: Update mctrl old_status on RTSD interrupt (git-fixes).\n- serial: protect uart_port_dtr_rts() in uart_shutdown() too (stable-fixes).\n- signal: Replace BUG_ON()s (bsc#1234093).\n- soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (git-fixes).\n- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (git-fixes).\n- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- soundwire: intel_bus_common: enable interrupts before exiting reset (stable-fixes).\n- spi: Fix acpi deferred irq probe (git-fixes).\n- spi: atmel-quadspi: Fix register name in verbose logging function (git-fixes).\n- spi: atmel-quadspi: Fix wrong register value written to MR (git-fixes).\n- spi: mtk-snfi: fix kerneldoc for mtk_snand_is_page_ops() (git-fixes).\n- spi: s3c64xx: fix timeout counters in flush_fifo (git-fixes).\n- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select (git-fixes).\n- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- spi: tegra210-quad: Avoid shift-out-of-bounds (git-fixes).\n- splice: always fsnotify_access(in), fsnotify_modify(out) on success (git-fixes).\n- splice: fsnotify_access(fd)/fsnotify_modify(fd) in vmsplice (git-fixes).\n- splice: fsnotify_access(in), fsnotify_modify(out) on success in tee (git-fixes).\n- srcu: Fix callbacks acceleration mishandling (git-fixes).\n- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (git-fixes).\n- sumversion: Fix a memory leak in get_src_version() (git-fixes).\n- supported.conf: mark nhpoly1305 module as supported (bsc#1231035).\n- supported.conf: mark ultravisor userspace access as supported (bsc#1232090).\n- task_work: add kerneldoc annotation for 'data' argument (git-fixes).\n- tcp: Fix refcnt handling in __inet_hash_connect() (git-fixes).\n- thermal: core: Initialize thermal zones before registering them (git-fixes).\n- thermal: int3400: Fix reading of current_uuid for active policy (git-fixes).\n- thermal: intel: int340x: processor: Fix warning during module unload (git-fixes).\n- thunderbolt: Honor TMU requirements in the domain when setting TMU mode (stable-fixes).\n- thunderbolt: Improve DisplayPort tunnel setup process to be more robust (stable-fixes).\n- tools/lib/thermal: Fix sampling handler context ptr (git-fixes).\n- tools/power turbostat: Fix trailing '\\n' parsing (git-fixes).\n- tools/power turbostat: Increase the limit for fd opened (bsc#1233119).\n- tools: hv: rm .*.cmd when make clean (git-fixes).\n- tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1082555 git-fixes).\n- tpm: fix signed/unsigned bug when checking event logs (git-fixes).\n- tracing/hwlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/osnoise: Fix build when timerlat is not enabled (git-fixes).\n- tracing/osnoise: Skip running osnoise if all instances are off (git-fixes).\n- tracing/osnoise: Switch from PF_NO_SETAFFINITY to migrate_disable (git-fixes).\n- tracing/osnoise: Use a cpumask to know what threads are kthreads (git-fixes).\n- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (git-fixes).\n- tracing/timerlat: Add user-space interface (git-fixes).\n- tracing/timerlat: Drop interface_lock in stop_kthread() (git-fixes).\n- tracing/timerlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (git-fixes).\n- tracing/timerlat: Move hrtimer_init to timerlat_fd open() (git-fixes).\n- tracing/timerlat: Only clear timer if a kthread exists (git-fixes).\n- tracing: Consider the NULL character when validating the event length (git-fixes).\n- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (git-fixes).\n- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (stable-fixes).\n- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (git-fixes).\n- ubifs: Fix adding orphan entry twice for the same inode (git-fixes).\n- ubifs: Fix unattached xattr inode if powercut happens after deleting (git-fixes).\n- ubifs: add check for crypto_shash_tfm_digest (git-fixes).\n- ubifs: dbg_orphan_check: Fix missed key type checking (git-fixes).\n- ucounts: fix counter leak in inc_rlimit_get_ucounts() (bsc#1233460).\n- unicode: Do not special case ignorable code points (stable-fixes).\n- unicode: Fix utf8_load() error path (git-fixes).\n- uprobe: avoid out-of-bounds memory access of fetching args (git-fixes).\n- uprobes: encapsulate preparation of uprobe args buffer (git-fixes).\n- uprobes: introduce the global struct vm_special_mapping xol_mapping (bsc#1231114).\n- uprobes: turn xol_area-\u003epages into xol_area-\u003epage (bsc#1231114).\n- usb: chipidea: udc: enable suspend interrupt after usb reset (stable-fixes).\n- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario (stable-fixes).\n- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG (git-fixes).\n- usb: dwc3: core: Stop processing of pending events if controller is halted (git-fixes).\n- usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (git-fixes).\n- usb: dwc3: gadget: Fix checking for number of TRBs left (git-fixes).\n- usb: dwc3: gadget: Fix looping of queued SG entries (git-fixes).\n- usb: ehci-spear: fix call balance of sehci clk handling routines (git-fixes).\n- usb: gadget: core: force synchronous registration (git-fixes).\n- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe (stable-fixes).\n- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler (stable-fixes).\n- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context (git-fixes).\n- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant (stable-fixes).\n- usb: gadget: f_uac2: fix non-newline-terminated function name (stable-fixes).\n- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store (git-fixes).\n- usb: musb: Fix hardware lockup on first Rx endpoint request (git-fixes).\n- usb: musb: sunxi: Fix accessing an released usb phy (git-fixes).\n- usb: phy: Fix API devm_usb_put_phy() can not release the phy (git-fixes).\n- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (stable-fixes).\n- usb: typec: altmode should keep reference to parent (git-fixes).\n- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (git-fixes).\n- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (git-fixes).\n- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (git-fixes).\n- usb: xhci: Fix TD invalidation under pending Set TR Dequeue (git-fixes).\n- usb: xhci: Fix problem with xhci resume from suspend (stable-fixes).\n- usb: xhci: fix loss of data on Cadence xHC (git-fixes).\n- usb: yurex: make waiting on yurex_write interruptible (git-fixes).\n- usbip: tools: Fix detach_port() invalid port error path (git-fixes).\n- usbnet: fix cyclical race on disconnect with work queue (git-fixes).\n- vdpa: Fix an error handling path in eni_vdpa_probe() (git-fixes).\n- vdpa_sim_blk: Fix the potential leak of mgmt_dev (git-fixes).\n- vdpa_sim_blk: allocate the buffer zeroed (git-fixes).\n- vduse: avoid using __GFP_NOFAIL (git-fixes).\n- vfs: dcache: move hashlen_hash() from callers into d_hash() (git-fixes).\n- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (git-fixes).\n- vhost_vdpa: assign irq bypass producer token correctly (git-fixes).\n- virtio_console: fix misc probe bugs (git-fixes).\n- vmalloc: modify the alloc_vmap_area() error message for better diagnostics (jsc#PED-10978).\n- vmxnet3: Add XDP support (bsc#1226498).\n- vmxnet3: Fix missing reserved tailroom (bsc#1226498).\n- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame (bsc#1226498).\n- vmxnet3: add command to allow disabling of offloads (bsc#1226498).\n- vmxnet3: add latency measurement support in vmxnet3 (bsc#1226498).\n- vmxnet3: prepare for version 9 changes (bsc#1226498).\n- vmxnet3: update to version 9 (bsc#1226498).\n- vsock: Update msg_count on read_skb() (git-fixes).\n- vt: prevent kernel-infoleak in con_font_get() (git-fixes).\n- wifi: ath10k: Fix memory leak in management tx (git-fixes).\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (git-fixes).\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (git-fixes).\n- wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (git-fixes).\n- wifi: ath11k: Fix invalid ring usage in full monitor mode (git-fixes).\n- wifi: ath11k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: Skip Rx TID cleanup for self peer (git-fixes).\n- wifi: ath12k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: fix crash when unbinding (git-fixes).\n- wifi: ath12k: fix warning when unbinding (git-fixes).\n- wifi: ath12k: remove msdu_end structure for WCN7850 (git-fixes).\n- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (git-fixes).\n- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (stable-fixes).\n- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (stable-fixes).\n- wifi: brcm80211: BRCM_TRACING should depend on TRACING (git-fixes).\n- wifi: brcmfmac: release 'root' node in all execution paths (git-fixes).\n- wifi: cfg80211: Set correct chandef when starting CAC (stable-fixes).\n- wifi: cfg80211: clear wdev-\u003ecqm_config pointer on free (git-fixes).\n- wifi: cw1200: Fix potential NULL dereference (git-fixes).\n- wifi: iwlegacy: Clear stale interrupts before resuming device (stable-fixes).\n- wifi: iwlegacy: Fix 'field-spanning write' warning in il_enqueue_hcmd() (git-fixes).\n- wifi: iwlwifi: allow only CN mcc from WRDD (stable-fixes).\n- wifi: iwlwifi: config: label 'gl' devices as discrete (git-fixes).\n- wifi: iwlwifi: mvm: Fix a race in scan abort flow (stable-fixes).\n- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (git-fixes).\n- wifi: iwlwifi: mvm: avoid NULL pointer dereference (stable-fixes).\n- wifi: iwlwifi: mvm: do not add default link in fw restart flow (git-fixes).\n- wifi: iwlwifi: mvm: do not leak a link on AP removal (git-fixes).\n- wifi: iwlwifi: mvm: drop wrong STA selection in TX (stable-fixes).\n- wifi: iwlwifi: mvm: use correct key iteration (stable-fixes).\n- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL (stable-fixes).\n- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (git-fixes).\n- wifi: mac80211: fix RCU list iterations (stable-fixes).\n- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (git-fixes).\n- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation (stable-fixes).\n- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable (stable-fixes).\n- wifi: mt76: mt7915: hold dev-\u003emt76.mutex while disabling tx worker (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (git-fixes).\n- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c (stable-fixes).\n- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons (git-fixes).\n- wifi: rtw88: select WANT_DEV_COREDUMP (stable-fixes).\n- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements (stable-fixes).\n- wifi: rtw89: avoid to add interface to list twice when SER (stable-fixes).\n- wifi: rtw89: correct base HT rate mask for firmware (stable-fixes).\n- wifi: wfx: Fix error handling in wfx_core_init() (git-fixes).\n- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (bsc#1233443).\n- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load (git-fixes).\n- x86/Documentation: Indent 'note::' directive for protocol version number note (git-fixes).\n- x86/PCI: Check pcie_find_root_port() return for NULL (git-fixes).\n- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h (git-fixes).\n- x86/apic: Always explicitly disarm TSC-deadline timer (git-fixes).\n- x86/apic: Make x2apic_disable() work correctly (git-fixes).\n- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (git-fixes).\n- x86/bugs: Skip RSB fill at VMEXIT (git-fixes).\n- x86/cpufeatures: Add a IBPB_NO_RET BUG flag (git-fixes).\n- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (git-fixes).\n- x86/e820: Add a new e820 table update helper (bsc#1234034).\n- x86/entry: Have entry_ibpb() invalidate return predictions (git-fixes).\n- x86/entry: Remove unwanted instrumentation in common_interrupt() (git-fixes).\n- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency (git-fixes).\n- x86/microcode/intel: Remove unnecessary cache writeback and invalidation (git-fixes).\n- x86/mm: Use IPIs to synchronize LAM enablement (git-fixes).\n- x86/resctrl: Annotate get_mem_config() functions as __init (git-fixes).\n- x86/resctrl: Avoid overflow in MB settings in bw_validate() (git-fixes).\n- x86/resctrl: Remove hard-coded memory bandwidth limit (git-fixes).\n- x86/sev: Add callback to apply RMP table fixups for kexec (bsc#1234034).\n- x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler (git-fixes).\n- x86/sev: Dump SEV_STATUS (bsc#1234034).\n- x86/sev: Ensure that RMP table fixups are reserved (bsc#1234034).\n- x86/sev: Move sev_guest.h into common SEV header (jsc#PED-5865).\n- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() (git-fixes).\n- x86/tdx: Dynamically disable SEPT violations from causing #VEs (git-fixes).\n- x86/tdx: Enable CPU topology enumeration (git-fixes).\n- x86/tdx: Introduce wrappers to read and write TD metadata (git-fixes).\n- x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup() (git-fixes).\n- x86/tdx: Warning with 32bit build shift-count-overflow (jsc#PED-6143).\n- x86/traps: move kmsan check after instrumentation_begin (git-fixes).\n- x86/virt/tdx: Export SEAMCALL functions (jsc#PED-6143).\n- x86/virt/tdx: Export TDX KeyID information (jsc#PED-6143).\n- x86/virt/tdx: Export global metadata read infrastructure (jsc#PED-6143).\n- x86/virt/tdx: Move TDMR metadata fields map table to local variable (jsc#PED-6143).\n- x86/virt/tdx: Rename _offset to _member for TD_SYSINFO_MAP() macro (jsc#PED-6143).\n- x86/virt/tdx: Support global metadata read for all element sizes (jsc#PED-6143).\n- x86/virt/tdx: Unbind global metadata read with 'struct tdx_tdmr_sysinfo' (jsc#PED-6143).\n- x86: Increase brk randomness entropy for 64-bit systems (git-fixes).\n- x86: do the user address masking outside the user access area (git-fixes).\n- x86: fix off-by-one in access_ok() (git-fixes).\n- x86: fix user address masking non-canonical speculation issue (git-fixes).\n- x86: make the masked_user_access_begin() macro use its argument only once (git-fixes).\n- x86: support user address masking instead of non-speculative conditional (git-fixes).\n- xfrm: Export symbol xfrm_dev_state_delete (bsc#1233754).\n- xfrm: Fix unregister netdevice hang on hardware offload (bsc#1233754).\n- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2 (git-fixes).\n- xfs: check shortform attr entry flags specifically (git-fixes).\n- xfs: convert delayed extents to unwritten when zeroing post eof blocks (git-fixes).\n- xfs: fix finding a last resort AG in xfs_filestream_pick_ag (git-fixes).\n- xfs: fix freeing speculative preallocations for preallocated files (git-fixes).\n- xfs: make sure sb_fdblocks is non-negative (git-fixes).\n- xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional (git-fixes).\n- xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset (git-fixes).\n- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent (git-fixes).\n- xfs: validate recovered name buffers when recovering xattr items (git-fixes).\n- xhci: Add a quirk for writing ERST in high-low order (git-fixes).\n- xhci: Fix Link TRB DMA in command ring stopped completion event (git-fixes).\n- xhci: Fix incorrect stream context type macro (git-fixes).\n- xhci: Mitigate failed set dequeue pointer commands (git-fixes).\n- xhci: Use pm_runtime_get to prevent RPM on unsupported systems (git-fixes).\n- xhci: tegra: fix checked USB2 port number (git-fixes).\n- zonefs: Improve error handling (git-fixes).\n","status":"published","published":"2024-12-19T15:39:02Z","modified":"2026-02-04T02:53:35.950266Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:20163-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).\n- CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).\n- CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).\n- CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).\n- CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).\n- CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).\n- CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).\n- CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb-\u003ehead (bsc#1224518).\n- CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).\n- CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).\n- CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).\n- CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).\n- CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).\n- CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).\n- CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).\n- CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).\n- CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).\n- CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).\n- CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).\n- CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).\n- CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command  (bsc#1228620).\n- CVE-2024-42102: Revert \"mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again\" (bsc#1233132).\n- CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).\n- CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).\n- CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).\n- CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).\n- CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).\n- CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).\n- CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).\n- CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)\n- CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).\n- CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).\n- CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).\n- CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).\n- CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).\n- CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).\n- CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).\n- CVE-2024-46813: drm/amd/display: Check link_index before accessing dc-\u003elinks (bsc#1231191).\n- CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).\n- CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).\n- CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).\n- CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).\n- CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).\n- CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).\n- CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100).\n- CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).\n- CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).\n- CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).\n- CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (bsc#1231435).\n- CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (bsc#1231436).\n- CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).\n- CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442).\n- CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).\n- CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()\u0026iput() (bsc#1231930).\n- CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).\n- CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).\n- CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003).\n- CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).\n- CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).\n- CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946).\n- CVE-2024-47704: drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944).\n- CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872).\n- CVE-2024-47706: block, bfq: fix possible UAF for bfqq-\u003ebic with merge chain (bsc#1231942).\n- CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).\n- CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049).\n- CVE-2024-47727: x86/tdx: Fix \"in-kernel MMIO\" check (bsc#1232116).\n- CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).\n- CVE-2024-47731: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (bsc#1232117).\n- CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).\n- CVE-2024-47741: btrfs: fix race setting file private on concurrent lseek using same fd (bsc#1231869).\n- CVE-2024-47745: mm: call the security_mmap_file() LSM hook in remap_file_pages() (bsc#1232135).\n- CVE-2024-47747: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (bsc#1232145).\n- CVE-2024-47752: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning (bsc#1232130).\n- CVE-2024-47753: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning (bsc#1231868).\n- CVE-2024-47754: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning (bsc#1232131).\n- CVE-2024-49852: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (bsc#1232819).\n- CVE-2024-49864: rxrpc: Fix a race between socket set up and I/O thread creation (bsc#1232256).\n- CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount (bsc#1232262).\n- CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).\n- CVE-2024-49881: ext4: update orig_path in ext4_find_extent() (bsc#1232201).\n- CVE-2024-49882: ext4: fix double brelse() the buffer of the extents path (bsc#1232200).\n- CVE-2024-49883: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199).\n- CVE-2024-49888: bpf: Fix a sdiv overflow issue (bsc#1232208).\n- CVE-2024-49890: drm/amd/pm: ensure the fw_info is not null before using it (bsc#1232217).\n- CVE-2024-49892: drm/amd/display: Initialize get_bytes_per_element's default to 1 (bsc#1232220).\n- CVE-2024-49894: drm/amd/display: Fix index out of bounds in degamma hardware format translation (bsc#1232354).\n- CVE-2024-49895: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (bsc#1232352).\n- CVE-2024-49896: drm/amd/display: Check stream before comparing them (bsc#1232221).\n- CVE-2024-49897: drm/amd/display: Check phantom_stream before it is used (bsc#1232355).\n- CVE-2024-49898: drm/amd/display: Check null-initialized variables (bsc#1232222).\n- CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).\n- CVE-2024-49901: drm/msm/adreno: Assign msm_gpu-\u003epdev earlier to avoid nullptrs (bsc#1232305).\n- CVE-2024-49906: drm/amd/display: Check null pointer before try to access it (bsc#1232332).\n- CVE-2024-49907: drm/amd/display: Check null pointers before using dc-\u003eclk_mgr (bsc#1232334).\n- CVE-2024-49909: drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func (bsc#1232337).\n- CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (bsc#1232366).\n- CVE-2024-49912: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (bsc#1232367).\n- CVE-2024-49913: drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (bsc#1232307).\n- CVE-2024-49914: drm/amd/display: Add null check for pipe_ctx-\u003eplane_state in (bsc#1232369).\n- CVE-2024-49917: drm/amd/display: Add NULL check for clk_mgr and clk_mgr-\u003efuncs in dcn30_init_hw (bsc#1231965).\n- CVE-2024-49918: drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer (bsc#1231967).\n- CVE-2024-49919: drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer (bsc#1231968).\n- CVE-2024-49920: drm/amd/display: Check null pointers before multiple uses (bsc#1232313).\n- CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).\n- CVE-2024-49922: drm/amd/display: Check null pointers before using them (bsc#1232374).\n- CVE-2024-49923: drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags (bsc#1232361).\n- CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)\n- CVE-2024-49933: blk_iocost: fix more out of bound shifts (bsc#1232368).\n- CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).\n- CVE-2024-49936: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424).\n- CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).\n- CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).\n- CVE-2024-49946: ppp: do not assume bh is held in ppp_channel_bridge_input() (bsc#1232164).\n- CVE-2024-49949: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (bsc#1232160).\n- CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).\n- CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).\n- CVE-2024-49953: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice (bsc#1232156).\n- CVE-2024-49954: static_call: Replace pointless WARN_ON() in static_call_module_notify() (bsc#1232155).\n- CVE-2024-49958: ocfs2: reserve space for inline xattr before attaching reflink tree (bsc#1232151).\n- CVE-2024-49959: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (bsc#1232149).\n- CVE-2024-49960: ext4: fix timer use-after-free on failed mount (bsc#1232395).\n- CVE-2024-49967: ext4: no need to continue when the number of entries is 1 (bsc#1232140).\n- CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).\n- CVE-2024-49969: drm/amd/display: Fix index out of bounds in DCN30 color transformation (bsc#1232519).\n- CVE-2024-49972: drm/amd/display: Deallocate DML memory if allocation fails (bsc#1232315).\n- CVE-2024-49973: r8169: add tally counter fields added with RTL8125 (bsc#1232105).\n- CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383).\n- CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).\n- CVE-2024-49986: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors (bsc#1232093).\n- CVE-2024-49987: bpftool: Fix undefined behavior in qsort(NULL, 0, ...) (bsc#1232258).\n- CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).\n- CVE-2024-49991: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer (bsc#1232282).\n- CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (bsc#1232316).\n- CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).\n- CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).\n- CVE-2024-50000: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (bsc#1232085).\n- CVE-2024-50001: net/mlx5: Fix error path in multi-packet WQE transmit (bsc#1232084).\n- CVE-2024-50002: static_call: Handle module init failure correctly in static_call_del_module() (bsc#1232083).\n- CVE-2024-50003: drm/amd/display: Fix system hang while resume with TBT monitor (bsc#1232385).\n- CVE-2024-50004: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 (bsc#1232396).\n- CVE-2024-50006: ext4: fix i_data_sem unlock order in ext4_ind_migrate() (bsc#1232442).\n- CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).\n- CVE-2024-50012: cpufreq: Avoid a bad reference count on CPU node (bsc#1232386).\n- CVE-2024-50014: ext4: fix access to uninitialised lock in fc replay path (bsc#1232446).\n- CVE-2024-50015: ext4: dax: fix overflowing extents beyond inode size when partially writing (bsc#1232079).\n- CVE-2024-50020: ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() (bsc#1231989).\n- CVE-2024-50021: ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() (bsc#1231957).\n- CVE-2024-50022: device-dax: correct pgoff align in dax_set_mapping() (bsc#1231956).\n- CVE-2024-50024: net: Fix an unsafe loop on the list (bsc#1231954).\n- CVE-2024-50027: thermal: core: Free tzp copy along with the thermal zone (bsc#1231951).\n- CVE-2024-50028: thermal: core: Reference count the zone in thermal_zone_get_by_id() (bsc#1231950).\n- CVE-2024-50033: slip: make slhc_remember() more robust against malicious packets (bsc#1231914).\n- CVE-2024-50035: ppp: fix ppp_async_encode() illegal access (bsc#1232392).\n- CVE-2024-50040: igb: Do not bring the device up after non-fatal error (bsc#1231908).\n- CVE-2024-50041: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash (bsc#1231907).\n- CVE-2024-50042: ice: Fix increasing MSI-X on VF (bsc#1231906).\n- CVE-2024-50045: netfilter: br_netfilter: fix panic with metadata_dst skb (bsc#1231903).\n- CVE-2024-50046: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (bsc#1231902).\n- CVE-2024-50047: smb: client: fix UAF in async decryption (bsc#1232418).\n- CVE-2024-50059: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (bsc#1232345).\n- CVE-2024-50060: io_uring: check if we need to reschedule during overflow flush (bsc#1232417).\n- CVE-2024-50063: bpf: Prevent tail call between progs attached to different hooks (bsc#1232435).\n- CVE-2024-50064: zram: free secondary algorithms names (bsc#1231901).\n- CVE-2024-50080: ublk: do not allow user copy for unprivileged device (bsc#1232502).\n- CVE-2024-50081: blk-mq: setup queue -\u003etag_set before initializing hctx (bsc#1232501).\n- CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).\n- CVE-2024-50084: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() (bsc#1232494).\n- CVE-2024-50087: btrfs: fix uninitialized pointer free on read_alloc_one_name() error (bsc#1232499).\n- CVE-2024-50088: btrfs: fix uninitialized pointer free in add_inode_ref() (bsc#1232498).\n- CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).\n- CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).\n- CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).\n- CVE-2024-50124: Bluetooth: ISO: Fix UAF on iso_sock_timeout (bsc#1232926).\n- CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).\n- CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).\n- CVE-2024-50128: net: wwan: fix global oob in wwan_rtnl_policy (bsc#1232905).\n- CVE-2024-50130: netfilter: bpf: must hold reference on net namespace (bsc#1232894).\n- CVE-2024-50138: bpf: Use raw_spinlock_t in ringbuf (bsc#1232935).\n- CVE-2024-50139: KVM: arm64: Fix shift-out-of-bounds bug (bsc#1233062).\n- CVE-2024-50145: octeon_ep: add SKB allocation failures handling in __octep_oq_process_rx() (bsc#1233044).\n- CVE-2024-50153: scsi: target: core: Fix null-ptr-deref in target_alloc_device() (bsc#1233061).\n- CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070).\n- CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050).\n- CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049).\n- CVE-2024-50169: vsock: Update rx_bytes on read_skb() (bsc#1233320).\n- CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057).\n- CVE-2024-50177: drm/amd/display: fix a UBSAN warning in DML2.1 (bsc#1233115).\n- CVE-2024-50182: secretmem: disable memfd_secret() if arch cannot set direct map (bsc#1233129).\n- CVE-2024-50184: virtio_pmem: Check device status before requesting flush (bsc#1233135).\n- CVE-2024-50186: net: explicitly clear the sk pointer, when pf-\u003ecreate fails (bsc#1233110).\n- CVE-2024-50192: irqchip/gic-v4: Do not allow a VMOVP on a dying VPE (bsc#1233106).\n- CVE-2024-50225: btrfs: fix error propagation of split bios (bsc#1233193).\n- CVE-2024-50228: mm: shmem: fix data-race in shmem_getattr() (bsc#1233204).\n- CVE-2024-50230: nilfs2: fix kernel bug due to missing clearing of checked flag (bsc#1233206).\n- CVE-2024-50245: fs/ntfs3: Fix possible deadlock in mi_read (bsc#1233203).\n- CVE-2024-50246: fs/ntfs3: Add rough attr alloc_size check (bsc#1233207).\n- CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233226).\n- CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).\n- CVE-2024-50257: netfilter: Fix use-after-free in get_info() (bsc#1233244).\n- CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (bsc#1233253).\n- CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-\u003etrans (bsc#1233453).\n- CVE-2024-50271: signal: restore the override_rlimit logic (bsc#1233460).\n- CVE-2024-50273: btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1233462).\n- CVE-2024-50274: idpf: avoid vport access in idpf_get_link_ksettings (bsc#1233463).\n- CVE-2024-50275: arm64/sve: Discard stale CPU state when handling SVE traps (bsc#1233464).\n- CVE-2024-50276: net: vertexcom: mse102x: Fix possible double free of TX skb (bsc#1233465).\n- CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).\n- CVE-2024-50289: media: av7110: fix a spectre vulnerability (bsc#1233478).\n- CVE-2024-50295: net: arc: fix the device for dma_map_single/dma_unmap_single (bsc#1233484).\n- CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).\n- CVE-2024-50298: net: enetc: allocate vf_state during PF probes (bsc#1233487).\n- CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233540).\n- CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).\n- CVE-2024-53048: ice: fix crash on probe for DPLL enabled E810 LOM (bsc#1233721).\n- CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).\n- CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).\n- CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).\n- CVE-2024-53058: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (bsc#1233552).\n- CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (bsc#1233570).\n- CVE-2024-53082: virtio_net: Add hash_key_length check (bsc#1233573).\n- CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).\n- CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (bsc#1234085).\n- CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (bsc#1234078).\n- CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1234223).\n\nThe following non-security bugs were fixed:\n\n- 9p: explicitly deny setlease attempts (git-fixes).\n- ACPI: CPPC: Add support for setting EPP register in FFH (stable-fixes).\n- ACPI: CPPC: Fix _CPC register setting issue (git-fixes).\n- ACPI: CPPC: Make rmw_lock a raw_spin_lock (git-fixes).\n- ACPI: EC: Do not release locks during operation region accesses (stable-fixes).\n- ACPI: PAD: fix crash in exit_round_robin() (stable-fixes).\n- ACPI: PRM: Clean up guid type in struct prm_handler_info (git-fixes).\n- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (git-fixes).\n- ACPI: battery: Fix possible crash when unregistering a battery hook (git-fixes).\n- ACPI: battery: Simplify battery hook locking (stable-fixes).\n- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (stable-fixes).\n- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add another DMI match for the TongFang GMxXGxx (stable-fixes).\n- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (stable-fixes).\n- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (stable-fixes).\n- ACPICA: iasl: handle empty connection_node (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: cleanup sdw_intel_scan_controller (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: fetch fwnode once in sdw_intel_scan_controller() (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: simplify sdw-master-count property read (stable-fixes).\n- ALSA: 6fire: Release resources at card release (git-fixes).\n- ALSA: Reorganize kerneldoc parameter names (stable-fixes).\n- ALSA: ac97: bus: Fix the mistake in the comment (git-fixes).\n- ALSA: asihpi: Fix potential OOB array access (stable-fixes).\n- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ALSA: core: add isascii() check to card ID generator (stable-fixes).\n- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (git-fixes).\n- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (git-fixes).\n- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (stable-fixes).\n- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (git-fixes).\n- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (git-fixes).\n- ALSA: hda/conexant: fix Z60MR100 startup pop issue (stable-fixes).\n- ALSA: hda/conexant: fix some typos (stable-fixes).\n- ALSA: hda/cs8409: Fix possible NULL dereference (git-fixes).\n- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs (bsc#1219803).\n- ALSA: hda/realtek - Fixed Clevo platform headset Mic issue (stable-fixes).\n- ALSA: hda/realtek - update set GPIO3 to default for Thinkpad with ALC1318 (git-fixes).\n- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (stable-fixes).\n- ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (stable-fixes).\n- ALSA: hda/realtek: Apply quirk for Medion E15433 (bsc#1233298).\n- ALSA: hda/realtek: Enable mic on Vaio VJFH52 (stable-fixes).\n- ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (stable-fixes).\n- ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform (bsc#1233298).\n- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (bsc#1233298).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 (stable-fixes).\n- ALSA: hda/realtek: Fix the push button function for the ALC257 (git-fixes).\n- ALSA: hda/realtek: Limit internal Mic boost on Dell platform (stable-fixes).\n- ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init (stable-fixes).\n- ALSA: hda/realtek: Set PCBeep to default value for ALC274 (stable-fixes).\n- ALSA: hda/realtek: Update ALC225 depop procedure (git-fixes).\n- ALSA: hda/realtek: Update ALC256 depop procedure (git-fixes).\n- ALSA: hda/realtek: Update default depop procedure (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8 (stable-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10 (stable-fixes).\n- ALSA: hda/realtek: tas2781: Fix ROG ALLY X audio (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects (stable-fixes).\n- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE (git-fixes).\n- ALSA: hda: Poll jack events for LS7A HD-Audio (stable-fixes).\n- ALSA: hda: Show the codec quirk info at probing (stable-fixes).\n- ALSA: hda: Sound support for HP Spectre x360 16 inch model 2024 (stable-fixes).\n- ALSA: hda: tas2781: Fix missing setup at runtime PM (bsc#1230132).\n- ALSA: hdsp: Break infinite MIDI input flush loop (stable-fixes).\n- ALSA: ice1712: Remove redundant code in stac9460_dac_vol_put (stable-fixes).\n- ALSA: line6: add hw monitor volume control to POD HD500X (stable-fixes).\n- ALSA: line6: update contact information (stable-fixes).\n- ALSA: mixer_oss: Remove some incorrect kfree_const() usages (git-fixes).\n- ALSA: pcm: Add sanity NULL check for the default mmap fault handler (stable-fixes).\n- ALSA: silence integer wrapping warning (stable-fixes).\n- ALSA: ump: Fix evaluation of MIDI 1.0 FB info (git-fixes).\n- ALSA: us122l: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ALSA: usb-audio: Add Pioneer DJ/AlphaTheta DJM-A9 Mixer (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET (stable-fixes).\n- ALSA: usb-audio: Add input value sanity checks for standard types (stable-fixes).\n- ALSA: usb-audio: Add logitech Audio profile quirk (stable-fixes).\n- ALSA: usb-audio: Add native DSD support for Luxman D-08u (stable-fixes).\n- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1232768).\n- ALSA: usb-audio: Add quirks for Dell WD19 dock (stable-fixes).\n- ALSA: usb-audio: Define macros for quirk table entries (stable-fixes).\n- ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (stable-fixes).\n- ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).\n- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (stable-fixes).\n- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (git-fixes).\n- ALSA: usb-audio: Make mic volume workarounds globally applicable (stable-fixes).\n- ALSA: usb-audio: Replace complex quirk lines with macros (stable-fixes).\n- ALSA: usb-audio: Use snprintf instead of sprintf in build_mixer_unit_ctl (stable-fixes).\n- ALSA: usb-audio: add mixer mapping for Corsair HS80 (stable-fixes).\n- ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ASoC: Intel: avs: da7219: Remove suspend_pre() and resume_post() (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (stable-fixes).\n- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (git-fixes).\n- ASoC: Intel: sst: Support LPE0F28 ACPI HID (stable-fixes).\n- ASoC: SOF: Add i2s bt dai configuration support for AMD platforms (bsc#1233305).\n- ASoC: SOF: Add support for configuring PDM interface from topology (bsc#1233305).\n- ASoC: SOF: Deprecate invalid enums in IPC3 (bsc#1233305).\n- ASoC: SOF: IPC4: get pipeline priority from topology (bsc#1233305).\n- ASoC: SOF: IPC4: synchronize fw_config_params with fw definitions (bsc#1233305).\n- ASoC: SOF: Refactor sof_i2s_tokens reading to update acpbt dai (bsc#1233305).\n- ASoC: SOF: Rename amd_bt sof_dai_type (bsc#1233305).\n- ASoC: SOF: Wire up buffer flags (bsc#1233305).\n- ASoC: SOF: add alignment for topology header file struct definition (bsc#1233305).\n- ASoC: SOF: align topology header file with sof topology header (bsc#1233305).\n- ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index (git-fixes).\n- ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai() (git-fixes).\n- ASoC: SOF: ipc4-control: Add support for ALSA enum control (bsc#1233305).\n- ASoC: SOF: ipc4-control: Add support for ALSA switch control (bsc#1233305).\n- ASoC: SOF: ipc4-mtrace: move debug slot related definitions to header.h (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add deep buffer size to debug prints (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add module ID print during module set up (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Helper to find an swidget by module/instance id (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (bsc#1233305).\n- ASoC: SOF: ipc4-topology: change chain_dma handling in dai_config (bsc#1233305).\n- ASoC: SOF: ipc4-topology: export sof_ipc4_copier_is_single_format (bsc#1233305).\n- ASoC: SOF: ipc4-topology: set config_length based on device_count (bsc#1233305).\n- ASoC: SOF: ipc4: Add data struct for module notification message from firmware (bsc#1233305).\n- ASoC: SOF: ipc4: Add new message type: SOF_IPC4_GLB_LOAD_LIBRARY_PREPARE (bsc#1233305).\n- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits (git-fixes).\n- ASoC: SOF: topology: Parse DAI type token for dspless mode (bsc#1233305).\n- ASoC: SOF: topology: dynamically allocate and store DAI widget-\u003eprivate (bsc#1233305).\n- ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA (stable-fixes).\n- ASoC: amd: yc: Add quirk for HP Dragonfly pro one (stable-fixes).\n- ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (git-fixes).\n- ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA (stable-fixes).\n- ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6 (stable-fixes).\n- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022 (stable-fixes).\n- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized (git-fixes).\n- ASoC: audio-graph-card2: Purge absent supplies for device tree nodes (stable-fixes).\n- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (git-fixes).\n- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (stable-fixes).\n- ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work() (stable-fixes).\n- ASoC: codecs: wsa883x: Handle reading version failure (stable-fixes).\n- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (git-fixes).\n- ASoC: dapm: fix bounds checker error in dapm_widget_list_create (git-fixes).\n- ASoC: fsl_micfil: Add sample rate constraint (stable-fixes).\n- ASoC: fsl_micfil: fix regmap_write_bits usage (git-fixes).\n- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (stable-fixes).\n- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m (git-fixes).\n- ASoC: max98388: Fix missing increment of variable slot_found (git-fixes).\n- ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec (git-fixes).\n- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (git-fixes).\n- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (stable-fixes).\n- ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c (git-fixes).\n- ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue (stable-fixes).\n- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (git-fixes).\n- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (stable-fixes).\n- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (stable-fixes).\n- ASoC: tas2781: Add new driver version for tas2563 \u0026 tas2781 qfn chip (stable-fixes).\n- ASoC: tas2781: Use of_property_read_reg() (stable-fixes).\n- Bluetooth: Call iso_exit() on module unload (git-fixes).\n- Bluetooth: ISO: Fix multiple init when debugfs is disabled (git-fixes).\n- Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (git-fixes).\n- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (git-fixes).\n- Bluetooth: Remove debugfs directory on module init failure (git-fixes).\n- Bluetooth: bnep: fix wild-memory-access in proto_unregister (git-fixes).\n- Bluetooth: btintel: Direct exception event to bluetooth stack (git-fixes).\n- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test (bsc#1230557)\n- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 (stable-fixes).\n- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (git-fixes).\n- Bluetooth: fix use-after-free in device_for_each_child() (git-fixes).\n- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (git-fixes).\n- Bluetooth: hci_core: Fix calling mgmt_device_connected (git-fixes).\n- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (git-fixes).\n- Documentation: kgdb: Correct parameter error (git-fixes).\n- HID: Ignore battery for all ELAN I2C-HID devices (stable-fixes).\n- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (git-fixes).\n- HID: core: zero-initialize the report buffer (git-fixes).\n- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk (stable-fixes).\n- HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (stable-fixes).\n- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (stable-fixes).\n- HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (stable-fixes).\n- HID: multitouch: Add support for B2402FVA track point (stable-fixes).\n- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (stable-fixes).\n- HID: multitouch: Add support for lenovo Y9000P Touchpad (stable-fixes).\n- HID: plantronics: Workaround for an unexcepted opposite volume key (stable-fixes).\n- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (git-fixes).\n- HID: wacom: fix when get product name maybe null pointer (git-fixes).\n- Input: adp5589-keys - fix NULL pointer dereference (git-fixes).\n- Input: adp5589-keys - fix adp5589_gpio_get_value() (git-fixes).\n- Input: edt-ft5x06 - fix regmap leak when probe fails (git-fixes).\n- Input: hideep - add missing dependency on REGMAP_I2C (git-fixes).\n- Input: hycon-hy46xx - add missing dependency on REGMAP_I2C (git-fixes).\n- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (stable-fixes).\n- Input: xpad - add GameSir T4 Kaleid Controller support (git-fixes).\n- Input: xpad - add GameSir VID for Xbox One controllers (git-fixes).\n- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller (git-fixes).\n- Input: xpad - add support for MSI Claw A1M (git-fixes).\n- Input: xpad - add support for Machenike G5 Pro Controller (git-fixes).\n- Input: xpad - fix support for some third-party controllers (git-fixes).\n- Input: xpad - sort xpad_device by vendor and product ID (git-fixes).\n- Input: xpad - spelling fixes for \"Xbox\" (git-fixes).\n- KVM: Fix coalesced_mmio_has_room() to avoid premature userspace exit (git-fixes).\n- KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending doorbells (bsc#1215199).\n- KVM: PPC: Book3S HV: Stop using vc-\u003edpdes for nested KVM guests (bsc#1215199).\n- KVM: PPC: Book3S HV: remove unused varible (bsc#1194869).\n- KVM: SEV-ES: Fix svm_get_msr()/svm_set_msr() for KVM_SEV_ES_INIT guests (bsc#1232207).\n- KVM: SEV-ES: Prevent MSR access post VMSA encryption (bsc#1232207).\n- KVM: SVM: Disallow guest from changing userspace's MSR_AMD64_DE_CFG value (git-fixes).\n- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock (git-fixes).\n- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled (git-fixes).\n- KVM: VMX: Set PFERR_GUEST_{FINAL,PAGE}_MASK if and only if the GVA is valid (git-fixes).\n- KVM: Write the per-page \"segment\" when clearing (part of) a guest page (git-fixes).\n- KVM: s390: Change virtual to physical address access in diag 0x258 handler (git-fixes bsc#1232626).\n- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (git-fixes bsc#1231276).\n- KVM: s390: gaccess: Check if guest address is in memslot (git-fixes bsc#1232623).\n- KVM: x86/mmu: Skip emulation on page fault iff 1+ SPs were unprotected (git-fixes).\n- KVM: x86/mmu: Trigger unprotect logic only on write-protection page faults (git-fixes).\n- KVM: x86: Dedup fastpath MSR post-handling logic (git-fixes).\n- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits (git-fixes).\n- KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (git-fixes).\n- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode() (git-fixes).\n- KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (git-fixes).\n- KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- NFS: Avoid unnecessary rescanning of the per-server delegation list (git-fixes).\n- NFS: remove revoked delegation from server's delegation list (git-fixes).\n- NFSD: Fix NFSv4's PUTPUBFH operation (git-fixes).\n- NFSD: Mark filecache \"down\" if init fails (git-fixes).\n- NFSv3: only use NFS timeout for MOUNT when protocols are compatible (bsc#1231016).\n- NFSv4: Fix clearing of layout segments in layoutreturn (git-fixes).\n- PCI: Add ACS quirk for Qualcomm SA8775P (stable-fixes).\n- PCI: Add T_PVPERL macro (git-fixes).\n- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip (stable-fixes).\n- PCI: Fix pci_enable_acs() support for the ACS quirks (bsc#1229019).\n- PCI: Fix reset_method_store() memory leak (git-fixes).\n- PCI: Mark Creative Labs EMU20k2 INTx masking as broken (stable-fixes).\n- PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf() (git-fixes).\n- PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds (git-fixes).\n- PCI: keystone: Add link up check to ks_pcie_other_map_bus() (git-fixes).\n- PCI: keystone: Set mode as Root Complex for \"ti,keystone-pcie\" compatible (git-fixes).\n- PCI: rockchip-ep: Fix address translation unit programming (git-fixes).\n- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix (jsc#PED-10559).\n- RAS/AMD/ATL: Expand helpers for adding and removing base and hole (jsc#PED-10559).\n- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization (jsc#PED-10559).\n- RAS/AMD/ATL: Read DRAM hole base early (jsc#PED-10559).\n- RAS/AMD/ATL: Validate address map when information is gathered (jsc#PED-10559).\n- RDMA/bnxt_re: Add a check for memory allocation (git-fixes)\n- RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (git-fixes)\n- RDMA/bnxt_re: Change the sequence of updating the CQ toggle value (git-fixes)\n- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (git-fixes)\n- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (git-fixes)\n- RDMA/bnxt_re: Fix a possible memory leak (git-fixes)\n- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (git-fixes)\n- RDMA/bnxt_re: Fix incorrect dereference of srq in async event (git-fixes)\n- RDMA/bnxt_re: Fix out of bound check (git-fixes)\n- RDMA/bnxt_re: Fix the GID table length (git-fixes)\n- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters (git-fixes)\n- RDMA/bnxt_re: Fix the usage of control path spin locks (git-fixes)\n- RDMA/bnxt_re: Return more meaningful error (git-fixes)\n- RDMA/bnxt_re: synchronize the qp-handle table array (git-fixes)\n- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)\n- RDMA/cxgb4: Dump vendor specific QP details (git-fixes)\n- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (git-fixes)\n- RDMA/hns: Add mutex_destroy() (git-fixes)\n- RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset (git-fixes)\n- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (git-fixes)\n- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci (git-fixes)\n- RDMA/hns: Fix cpu stuck caused by printings during reset (git-fixes)\n- RDMA/hns: Fix different dgids mapping to the same dip_idx (git-fixes)\n- RDMA/hns: Fix flush cqe error when racing with destroy qp (git-fixes)\n- RDMA/hns: Fix out-of-order issue of requester when setting FENCE (git-fixes)\n- RDMA/hns: Use dev_* printings in hem code instead of ibdev_* (git-fixes)\n- RDMA/hns: Use macro instead of magic number (git-fixes)\n- RDMA/irdma: Fix misspelling of \"accept*\" (git-fixes)\n- RDMA/mad: Improve handling of timed out WRs of mad agent (git-fixes)\n- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (git-fixes).\n- RDMA/mana_ib: use the correct page table index based on hardware page size (git-fixes).\n- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults (git-fixes)\n- RDMA/mlx5: Move events notifier registration to be after device registration (git-fixes)\n- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (git-fixes)\n- RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled (git-fixes).\n- RDMA/rtrs-srv: Avoid null pointer deref during path establishment (git-fixes)\n- RDMA/rxe: Fix the qp flush warnings in req (git-fixes)\n- RDMA/rxe: Set queue pair cur_qp_state when being queried (git-fixes)\n- RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES (git-fixes)\n- RDMA/srpt: Make slab cache names unique (git-fixes)\n- Revert \"ALSA: hda/conexant: Mute speakers at suspend / shutdown\" (bsc#1228269).\n- Revert \"ALSA: hda: Conditionally use snooping for AMD HDMI\" (stable-fixes).\n- Revert \"KEYS: encrypted: Add check for strsep\" (git-fixes).\n- Revert \"KVM: PPC: Book3S HV Nested: Stop forwarding all HFUs to L1\" (bsc#1215199).\n- Revert \"RDMA/core: Fix ENODEV error for iWARP test over vlan\" (git-fixes)\n- Revert \"cgroup: Fix memory leak caused by missing cgroup_bpf_offline\" (bsc#1234108).\n- Revert \"cpufreq: brcmstb-avs-cpufreq: Fix initial command check\" (stable-fixes).\n- Revert \"driver core: Fix uevent_show() vs driver detach race\" (git-fixes).\n- Revert \"ixgbe: Manual AN-37 for troublesome link partners for X550 SFI\" (git-fixes).\n- Revert \"mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K\" (git-fixes).\n- Revert \"ubifs: ubifs_symlink: Fix memleak of inode-\u003ei_link in error path\" (git-fixes).\n- Revert \"usb: gadget: composite: fix OS descriptors w_value logic\" (git-fixes).\n- Revert \"wifi: iwlwifi: remove retry loops in start\" (git-fixes).\n- SUNRPC: Fix integer overflow in decode_rc_list() (git-fixes).\n- SUNRPC: Fixup gss_status tracepoint error output (git-fixes).\n- SUNRPC: Remove BUG_ON call sites (git-fixes).\n- SUNRPC: clnt.c: Remove misleading comment (git-fixes).\n- USB: appledisplay: close race between probe and completion handler (git-fixes).\n- USB: chaoskey: Fix possible deadlock chaoskey_list_lock (git-fixes).\n- USB: chaoskey: fail open after removal (git-fixes).\n- USB: gadget: dummy-hcd: Fix \"task hung\" problem (git-fixes).\n- USB: misc: cypress_cy7c63: check for short transfer (git-fixes).\n- USB: misc: yurex: fix race between read and write (git-fixes).\n- USB: serial: ftdi_sio: Fix atomicity violation in get_serial_info() (git-fixes).\n- USB: serial: io_edgeport: fix use after free in debug printk (git-fixes).\n- USB: serial: option: add Fibocom FG132 0x0112 composition (stable-fixes).\n- USB: serial: option: add Quectel RG650V (stable-fixes).\n- USB: serial: option: add Telit FN920C04 MBIM compositions (stable-fixes).\n- USB: serial: option: add support for Quectel EG916Q-GL (stable-fixes).\n- USB: serial: qcserial: add support for Sierra Wireless EM86xx (stable-fixes).\n- accel/qaic: Fix the for loop used to walk SG table (git-fixes).\n- accel: Use XArray instead of IDR for minors (jsc#PED-11580).\n- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (git-fixes).\n- ad7780: fix division by zero in ad7780_write_raw() (git-fixes).\n- aes-gcm-p10: Use the correct bit to test for P10 (bsc#1232704).\n- amd-pstate: Set min_perf to nominal_perf for active mode performance gov (git-fixes).\n- apparmor: fix 'Do simple duplicate message elimination' (git-fixes).\n- apparmor: test: Fix memory leak for aa_unpack_strdup() (git-fixes).\n- apparmor: use kvfree_sensitive to free data-\u003edata (git-fixes).\n- arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (git-fixes)\n- arm64: cputype: Add Neoverse-N3 definitions (git-fixes)\n- arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (git-fixes)\n- arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay (git-fixes)\n- arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay (git-fixes)\n- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (git-fixes)\n- arm64: dts: imx8qxp: Add VPU subsystem file (git-fixes)\n- arm64: dts: imx93: add nvmem property for eqos (git-fixes)\n- arm64: dts: imx93: add nvmem property for fec1 (git-fixes)\n- arm64: dts: imx93: add ocotp node (git-fixes)\n- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus (git-fixes)\n- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes (git-fixes)\n- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (git-fixes)\n- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (git-fixes)\n- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo (git-fixes)\n- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes (git-fixes)\n- arm64: dts: rockchip: Fix rt5651 compatible value on (git-fixes)\n- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610 (git-fixes)\n- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node (git-fixes)\n- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma (git-fixes)\n- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (git-fixes)\n- arm64: dts: rockchip: Remove undocumented supports-emmc property (git-fixes)\n- arm64: dts: rockchip: fix i2c2 pinctrl-names property on (git-fixes)\n- arm64: dts: rockchip: remove num-slots property from (git-fixes)\n- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone (git-fixes)\n- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (git-fixes).\n- arm64: errata: Expand speculative SSBS workaround once more (git-fixes)\n- arm64: esr: Define ESR_ELx_EC_* constants as UL (git-fixes)\n- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (git-fixes)\n- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS (git-fixes).\n- arm64: probes: Fix simulate_ldr*_literal() (git-fixes)\n- arm64: probes: Fix uprobes for big-endian kernels (git-fixes)\n- arm64: probes: Remove broken LDR (literal) uprobe support (git-fixes)\n- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (git-fixes)\n- arm64: smccc: replace custom COUNT_ARGS() \u0026 CONCATENATE() (git-fixes)\n- arm64: tegra: Move AGX Orin nodes to correct location (git-fixes)\n- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (git-fixes)\n- ata: libata: Set DID_TIME_OUT for commands that actually timed out (git-fixes).\n- ata: libata: avoid superfluous disk spin down + spin up during hibernation (git-fixes).\n- audit: do not WARN_ON_ONCE(!current-\u003emm) in audit_exe_compare() (git-fixes).\n- audit: do not take task_lock() in audit_exe_compare() code path (git-fixes).\n- block: print symbolic error name instead of error code (bsc#1231872).\n- block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (bsc#1229677).\n- bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response (git-fixes).\n- bnxt_en: Fix error recovery for 5760X (P7) chips (git-fixes).\n- bnxt_en: Fix the PCI-AER routines (git-fixes).\n- bnxt_en: Restore PTP tx_avail count in case of skb_pad() error (git-fixes).\n- bnxt_en: refactor reset close code (git-fixes).\n- bpf, arm64: Fix address emission with tag-based KASAN enabled (git-fixes)\n- bpf, arm64: Remove garbage frame for struct_ops trampoline (git-fixes)\n- bpf, lsm: Add disabled BPF LSM hook list (git-fixes).\n- bpf, net: Fix a potential race in do_sock_getsockopt() (git-fixes).\n- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock (git-fixes).\n- bpf, verifier: Correct tail_call_reachable for bpf prog (git-fixes).\n- bpf, vsock: Drop static vsock_bpf_prot initialization (git-fixes).\n- bpf, x64: Remove tail call detection (git-fixes).\n- bpf,perf: Fix perf_event_detach_bpf_prog error handling (git-fixes).\n- bpf: Fail verification for sign-extension of packet data/data_end/data_meta (git-fixes).\n- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (git-fixes).\n- bpf: Fix error message on kfunc arg type mismatch (git-fixes).\n- bpf: Fix helper writes to read-only maps (git-fixes).\n- bpf: Fix tailcall cases in test_bpf (git-fixes).\n- bpf: Fix truncation bug in coerce_reg_to_size_sx() (git-fixes).\n- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types (git-fixes).\n- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers (git-fixes).\n- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (git-fixes).\n- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos (git-fixes).\n- btf, scripts: rust: drop is_rust_module.sh (bsc#1230414 bsc#1229450).\n- btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() (bsc#1233193)\n- btrfs: send: fix invalid clone operation for file that got its size decreased (git-fixes).\n- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (git-fixes).\n- can: c_can: fix {rx,tx}_errors statistics (git-fixes).\n- can: dev: can_set_termination(): allow sleeping GPIOs (git-fixes).\n- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: hi311x: hi3110_can_ist(): fix potential use-after-free (git-fixes).\n- can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics (git-fixes).\n- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: j1939: j1939_session_new(): fix skb reference counting (git-fixes).\n- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation (git-fixes).\n- can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6 (git-fixes).\n- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes (git-fixes).\n- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode (stable-fixes).\n- can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (git-fixes).\n- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (git-fixes).\n- ceph: fix cap ref leak via netfs init_request (bsc#1231384).\n- cgroup/bpf: only cgroup v2 can be attached by bpf programs (bsc#1234108).\n- clk: bcm: bcm53573: fix OF node leak in init (stable-fixes).\n- clk: clk-apple-nco: Add NULL check in applnco_probe (git-fixes).\n- clk: clk-axi-clkgen: make sure to enable the AXI bus clock (git-fixes).\n- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (stable-fixes).\n- clk: imx: clk-scu: fix clk enable state save and restore (git-fixes).\n- clk: imx: fracn-gppll: correct PLL initialization flow (git-fixes).\n- clk: imx: fracn-gppll: fix pll power up (git-fixes).\n- clk: imx: lpcg-scu: SW workaround for errata (e10858) (git-fixes).\n- clk: qcom: clk-alpha-pll: drop lucid-evo pll enabled warning (git-fixes).\n- clk: qcom: clk-alpha-pll: fix lucid 5lpe pll enabled check (git-fixes).\n- clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (git-fixes).\n- clk: renesas: rzg2l: Fix FOUTPOSTDIV clk (git-fixes).\n- clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset (git-fixes).\n- comedi: Flush partial mappings in error case (git-fixes).\n- comedi: ni_routing: tools: Check when the file could not be opened (stable-fixes).\n- config s390x: build ultravisor userspace access into the kernel (bsc#1232090).\n- config.sh: Remove Arm build project, we do not build armv7 configs\n- config: Disable LAM on x86 (bsc#1217845).\n- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems (git-fixes).\n- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (git-fixes).\n- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (git-fixes).\n- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() (git-fixes).\n- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() (git-fixes).\n- cpufreq: loongson2: Unregister platform_driver on failure (git-fixes).\n- cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (git-fixes).\n- crypto: aes-gcm-p10 - Use the correct bit to test for P10 (bsc#1232704).\n- crypto: api - Fix liveliness check in crypto_alg_tested (stable-fixes).\n- crypto: bcm - add error check in the ahash_hmac_init function (git-fixes).\n- crypto: caam - Fix the pointer passed to caam_qi_shutdown() (git-fixes).\n- crypto: caam - add error check to caam_rsa_set_priv_key_form (git-fixes).\n- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (git-fixes).\n- crypto: cavium - Fix the if condition to exit loop after timeout (git-fixes).\n- crypto: hisilicon/qm - flush all work before driver removed (bsc#1232075)\n- crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() (git-fixes).\n- crypto: octeontx - Fix authenc setkey (stable-fixes).\n- crypto: octeontx* - Select CRYPTO_AUTHENC (git-fixes).\n- crypto: octeontx2 - Fix authenc setkey (stable-fixes).\n- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (git-fixes).\n- crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTO_SIMD and re-enable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Register modules as SIMD (bsc#1230501 ltc#208632).\n- crypto: qat - remove check after debugfs_create_dir() (git-fixes).\n- crypto: qat - remove faulty arbiter config reset (git-fixes).\n- crypto: qat/qat_4xxx - fix off by one in uof_get_name() (git-fixes).\n- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (git-fixes).\n- cxgb4: Properly lock TX queue for the selftest (git-fixes).\n- cxgb4: add forgotten u64 ivlan cast before shift (git-fixes).\n- cxgb4: unnecessary check for 0 in the free_sge_txq_uld() function (git-fixes).\n- cxl: downgrade a warning message to debug level in cxl_probe_component_regs() (bsc#1229165).\n- dcache: keep dentry_hashtable or d_hash_shift even when not used (git-fixes).\n- debugfs: fix automount d_fsdata usage (git-fixes).\n- devlink: Fix command annotation documentation (git-fixes).\n- dma-fence: Fix reference leak on fence merge failure path (git-fixes).\n- dma-fence: Use kernel's sort for merging fences (git-fixes).\n- dmaengine: sh: rz-dmac: handle configs where one address is zero (git-fixes).\n- dmaengine: ti: k3-udma: Set EOP for all TRs in cyclic BCDMA transfer (git-fixes).\n- doc: rcu: update printed dynticks counter bits (git-fixes).\n- driver core: bus: Fix double free in driver API bus_register() (stable-fixes).\n- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (stable-fixes).\n- drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() (git-fixes).\n- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring (git-fixes).\n- drm/amd/display: Add HDMI DSC native YCbCr422 support (stable-fixes).\n- drm/amd/display: Add disable timeout option (bsc#1231435)\n- drm/amd/display: Adjust VSDB parser for replay feature (stable-fixes).\n- drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944)\n- drm/amd/display: Check null pointer before dereferencing se (stable-fixes).\n- drm/amd/display: Clean up dsc blocks in accelerated mode (stable-fixes).\n- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (stable-fixes).\n- drm/amd/display: Fix brightness level not retained over reboot (git-fixes).\n- drm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe (git-fixes).\n- drm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in hwss_setup_dpp (git-fixes).\n- drm/amd/display: Remove a redundant check in authenticated_dp (stable-fixes).\n- drm/amd/display: Revert \"Check HDCP returned status\" (stable-fixes).\n- drm/amd/display: Round calculated vtotal (stable-fixes).\n- drm/amd/display: Skip to enable dsc if it has been off (stable-fixes).\n- drm/amd/display: Validate backlight caps are sane (stable-fixes).\n- drm/amd/pm: Vangogh: Fix kernel memory out of bounds write (git-fixes).\n- drm/amd: Add some missing straps from NBIO 7.11.0 (git-fixes).\n- drm/amd: Fix initialization mistake for NBIO 7.7.0 (stable-fixes).\n- drm/amd: Guard against bad data for ATIF ACPI method (git-fixes).\n- drm/amdgpu/swsmu: Only force workload setup on init (git-fixes).\n- drm/amdgpu/vcn: enable AV1 on both instances (stable-fixes).\n- drm/amdgpu: Adjust debugfs eviction and IB access permissions (stable-fixes).\n- drm/amdgpu: Adjust debugfs register access permissions (stable-fixes).\n- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (git-fixes).\n- drm/amdgpu: Fix JPEG v4.0.3 register write (git-fixes).\n- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (stable-fixes).\n- drm/amdgpu: fix check in gmc_v9_0_get_vm_pte() (git-fixes).\n- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (git-fixes).\n- drm/amdkfd: Accounting pdd vram_usage for svm (stable-fixes).\n- drm/amdkfd: Fix wrong usage of INIT_WORK() (git-fixes).\n- drm/bridge: anx7625: Drop EDID cache on bridge power off (git-fixes).\n- drm/bridge: it6505: Drop EDID cache on bridge power off (git-fixes).\n- drm/bridge: tc358767: Fix link properties discovery (git-fixes).\n- drm/bridge: tc358768: Fix DSI command tx (git-fixes).\n- drm/etnaviv: Request pages from DMA32 zone on addressing_limited (git-fixes).\n- drm/etnaviv: hold GPU lock across perfmon sampling (git-fixes).\n- drm/i915/gem: fix bitwise and logical AND mixup (git-fixes).\n- drm/i915/hdcp: fix connector refcounting (git-fixes).\n- drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/mediatek: Fix child node refcount handling in early exit (git-fixes).\n- drm/mediatek: Fix get efuse issue for MT8188 DPTX (git-fixes).\n- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (git-fixes).\n- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (git-fixes).\n- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds() (git-fixes).\n- drm/msm/dpu: do not always program merge_3d block (git-fixes).\n- drm/msm/dpu: drop LM_3 / LM_4 on MSM8998 (git-fixes).\n- drm/msm/dpu: drop LM_3 / LM_4 on SDM845 (git-fixes).\n- drm/msm/dpu: make sure phys resources are properly initialized (git-fixes).\n- drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check (git-fixes).\n- drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block (git-fixes).\n- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (git-fixes).\n- drm/msm/dsi: improve/fix dsc pclk calculation (git-fixes).\n- drm/msm/gpu: Check the status of registration to PM QoS (git-fixes).\n- drm/msm: Allocate memory for disp snapshot with kvzalloc() (git-fixes).\n- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (git-fixes).\n- drm/msm: Fix some typos in comment (git-fixes).\n- drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() (git-fixes).\n- drm/omap: Fix locking in omap_gem_new_dmabuf() (git-fixes).\n- drm/omap: Fix possible NULL dereference (git-fixes).\n- drm/panfrost: Add missing OPP table refcnt decremental (git-fixes).\n- drm/panfrost: Remove unused id_mask from struct panfrost_model (git-fixes).\n- drm/radeon: Fix encoder-\u003epossible_clones (git-fixes).\n- drm/rockchip: vop: Fix a dereferenced before check warning (git-fixes).\n- drm/sched: Add locking to drm_sched_entity_modify_sched (git-fixes).\n- drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job (git-fixes).\n- drm/sti: Add __iomem for mixer_dbg_mxn's parameter (git-fixes).\n- drm/sti: avoid potential dereference of error pointers (git-fixes).\n- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (git-fixes).\n- drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (git-fixes).\n- drm/v3d: Address race-condition in MMU flush (git-fixes).\n- drm/v3d: Enable Performance Counters before clearing them (git-fixes).\n- drm/v3d: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (stable-fixes).\n- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush (git-fixes).\n- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load (git-fixes).\n- drm/vc4: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vc4: hdmi: Avoid hang with debug registers when suspended (git-fixes).\n- drm/vc4: hvs: Correct logic on stopping an HVS channel (git-fixes).\n- drm/vc4: hvs: Do not write gamma luts on 2711 (git-fixes).\n- drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer (git-fixes).\n- drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function (git-fixes).\n- drm/vkms: Drop unnecessary call to drm_crtc_cleanup() (git-fixes).\n- drm/vmwgfx: Handle surface check failure correctly (git-fixes).\n- drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (stable-fixes).\n- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS (git-fixes).\n- drm: Expand max DRM device number to full MINORBITS (jsc#PED-11580).\n- drm: Use XArray instead of IDR for minors (jsc#PED-11580).\n- drm: use ATOMIC64_INIT() for atomic64_t (git-fixes).\n- drm: xlnx: zynqmp_dpsub: fix hotplug detection (git-fixes).\n- drm: zynqmp_kms: Unplug DRM device before removal (git-fixes).\n- dwc2: Drop USB dwc2 patch that caused a regression on RPi3 (bsc#1232342)\n- e1000e: Fix S0ix residency on corporate systems (git-fixes).\n- e1000e: Remove Meteor Lake SMBUS workarounds (git-fixes).\n- e1000e: change I219 (19) devices to ADP (git-fixes).\n- e1000e: fix force smbus during suspend flow (git-fixes).\n- e1000e: move force SMBUS near the end of enable_ulp function (git-fixes).\n- efi/libstub: Free correct pointer on failure (git-fixes).\n- efi/libstub: fix efi_parse_options() ignoring the default command line (git-fixes).\n- efi/libstub: zboot.lds: Discard .discard sections (stable-fixes).\n- efi/memattr: Ignore table if the size is clearly bogus (bsc#1231465).\n- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (stable-fixes).\n- eth: bnxt: fix counting packets discarded due to OOM and netpoll (git-fixes).\n- ext4: do not track ranges in fast_commit if inode has inlined data (bsc#1231635).\n- ext4: fix fast commit inode enqueueing during a full journal commit (bsc#1231636).\n- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible() (bsc#1231637).\n- ext4: fix possible tid_t sequence overflows (bsc#1231634).\n- ext4: fix slab-use-after-free in ext4_split_extent_at() (bsc#1232201)\n- ext4: fix unttached inode after power cut with orphan file feature enabled (bsc#1234009).\n- ext4: mark fc as ineligible using an handle in ext4_xattr_set() (bsc#1231640).\n- ext4: use handle to mark fc as ineligible in __track_dentry_update() (bsc#1231639).\n- f2fs: get out of a repeat loop when getting a locked data page (bsc#1234011).\n- fat: fix uninitialized variable (git-fixes).\n- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (stable-fixes).\n- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (git-fixes).\n- fbdev: sisfb: Fix strbuf array overflow (stable-fixes).\n- fgraph: Change the name of cpuhp state to \"fgraph:online\" (git-fixes).\n- fgraph: Fix missing unlock in register_ftrace_graph() (git-fixes).\n- fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks (git-fixes).\n- filemap: remove use of wait bookmarks (bsc#1224088).\n- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (git-fixes).\n- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (git-fixes).\n- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (git-fixes).\n- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (git-fixes).\n- firmware: google: Unregister driver_info on failure (git-fixes).\n- firmware_loader: Fix possible resource leak in fw_log_firmware_info() (git-fixes).\n- fs/9p: drop inodes immediately on non-.L too (git-fixes).\n- fs/9p: fix the cache always being enabled on files with qid flags (git-fixes).\n- fs/ntfs3: Add more attributes checks in mi_enum_attr() (bsc#1233207)\n- fs/ntfs3: Fixed overflow check in mi_enum_attr() (bsc#1233207)\n- fs/ntfs3: Sequential field availability check in mi_enum_attr() (bsc#1233207)\n- fs: Fix uninitialized value issue in from_kuid and from_kgid (git-fixes).\n- genirq/msi: Fix off-by-one error in msi_domain_alloc() (git-fixes).\n- goldfish: Fix unused const variable 'goldfish_pipe_acpi_match' (git-fixes).\n- gpio: aspeed: Add the flush write to ensure the write complete (git-fixes).\n- gpio: aspeed: Use devm_clk api to manage clock source (git-fixes).\n- gpio: davinci: fix lazy disable (git-fixes).\n- gpio: exar: set value when external pull-up or pull-down is present (git-fixes).\n- gpio: zevio: Add missed label initialisation (git-fixes).\n- gve: Fix XDP TX completion handling when counters overflow (git-fixes).\n- gve: Fix an edge case for TSO skb validity check (git-fixes).\n- gve: ignore nonrelevant GSO type bits when processing TSO headers (git-fixes).\n- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (git-fixes).\n- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (git-fixes).\n- hv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer (git-fixes).\n- hwmon: (adm9240) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (adt7470) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (max16065) Fix alarm attributes (git-fixes).\n- hwmon: (max16065) Remove use of i2c_match_id() (stable-fixes).\n- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list (stable-fixes).\n- hwmon: (nct6775-core) Fix overflows seen when writing limit attributes (git-fixes).\n- hwmon: (tmp513) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (tps23861) Fix reporting of negative temperatures (git-fixes).\n- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature (git-fixes).\n- i2c: core: Setup i2c_adapter runtime-pm before calling device_add() (git-fixes).\n- i2c: core: fix lockdep warning for sparsely nested adapter chain (git-fixes).\n- i2c: cpm: Remove linux,i2c-index conversion from be32 (git-fixes).\n- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set (git-fixes).\n- i2c: exynos5: Calculate t_scl_l, t_scl_h according to i2c spec (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell Precision 3540 (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell XPS 15 7590 (git-fixes).\n- i2c: i801: Use a different adapter-name for IDF adapters (stable-fixes).\n- i2c: i801: add helper i801_restore_regs (git-fixes).\n- i2c: ismt: kill transaction in hardware on timeout (git-fixes).\n- i2c: ocores: Move system PM hooks to the NOIRQ phase (git-fixes).\n- i2c: ocores: Remove #ifdef guards for PM related functions (git-fixes).\n- i2c: omap: switch to NOIRQ_SYSTEM_SLEEP_PM_OPS() and RUNTIME_PM_OPS() (git-fixes).\n- i2c: omap: wakeup the controller during suspend() callback (git-fixes).\n- i2c: rcar: properly format a debug output (git-fixes).\n- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume (git-fixes).\n- i2c: stm32f7: perform most of irq job in threaded handler (git-fixes).\n- i2c: synquacer: Deal with optional PCLK correctly (git-fixes).\n- i2c: synquacer: Remove a clk reference from struct synquacer_i2c (stable-fixes).\n- i2c: xiic: Try re-initialization on bus busy timeout (git-fixes).\n- i2c: xiic: improve error message when transfer fails to start (stable-fixes).\n- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (git-fixes).\n- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition (stable-fixes).\n- i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- i40e: Fix XDP program unloading while removing the driver (git-fixes).\n- i40e: Report MFS in decimal base instead of hex (git-fixes).\n- i40e: fix race condition by adding filter's intermediate sync state (git-fixes).\n- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (git-fixes).\n- iavf: Fix TC config comparison with existing adapter TC config (git-fixes).\n- ice: Fix VSI list rule with ICE_SW_LKUP_LAST type (git-fixes).\n- ice: Fix checking for unsupported keys on non-tunnel device (git-fixes).\n- ice: Fix lldp packets dropping after changing the number of channels (git-fixes).\n- ice: Fix netif_is_ice() in Safe Mode (git-fixes).\n- ice: Fix package download algorithm (git-fixes).\n- ice: Fix recipe read procedure (git-fixes).\n- ice: Fix reset handler (git-fixes).\n- ice: Flush FDB entries before reset (git-fixes).\n- ice: Interpret .set_channels() input differently (git-fixes).\n- ice: Rebuild TC queues on VSI queue reconfiguration (git-fixes).\n- ice: Reject pin requests with unsupported flags (git-fixes).\n- ice: add flag to distinguish reset from .ndo_bpf in XDP rings config (git-fixes).\n- ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (git-fixes).\n- ice: avoid IRQ collision to fix init failure on ACPI S3 resume (git-fixes).\n- ice: clear port vlan config during reset (git-fixes).\n- ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins (git-fixes).\n- ice: do not bring the VSI up, if it was down before the XDP setup (git-fixes).\n- ice: do not busy wait for Rx queue disable in ice_qp_dis() (git-fixes).\n- ice: fix 200G PHY types to link speed mapping (git-fixes).\n- ice: fix 200G link speed message log (git-fixes).\n- ice: fix ICE_LAST_OFFSET formula (git-fixes).\n- ice: fix VLAN replay after reset (git-fixes).\n- ice: fix VSI lists confusion when adding VLANs (git-fixes).\n- ice: fix accounting for filters shared by multiple VSIs (git-fixes).\n- ice: fix accounting if a VLAN already exists (git-fixes).\n- ice: fix iteration of TLVs in Preserved Fields Area (git-fixes).\n- ice: fix page reuse when PAGE_SIZE is over 8k (git-fixes).\n- ice: fix reads from NVM Shadow RAM on E830 and E825-C devices (git-fixes).\n- ice: fix truesize operations for PAGE_SIZE \u003e= 8192 (git-fixes).\n- ice: implement AQ download pkg retry (git-fixes).\n- ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors() (git-fixes).\n- ice: remove af_xdp_zc_qps bitmap (git-fixes).\n- ice: replace synchronize_rcu with synchronize_net (git-fixes).\n- ice: respect netif readiness in AF_XDP ZC related ndo's (git-fixes).\n- ice: set correct dst VSI in only LAN filters (git-fixes).\n- ice: tc: allow zero flags in parsing tc flower (git-fixes).\n- ice: tc: check src_vsi in case of traffic from VF (git-fixes).\n- ice: use proper macro for testing bit (git-fixes).\n- idpf: Interpret .set_channels() input differently (git-fixes).\n- idpf: avoid bloating \u0026idpf_q_vector with big %NR_CPUS (git-fixes).\n- idpf: do not enable NAPI and interrupts prior to allocating Rx buffers (git-fixes).\n- idpf: do not skip over ethtool tcp-data-split setting (git-fixes).\n- idpf: fix UAFs when destroying the queues (git-fixes).\n- idpf: fix memleak in vport interrupt configuration (git-fixes).\n- idpf: fix memory leaks and crashes while performing a soft reset (git-fixes).\n- ieee802154: Fix build error (git-fixes).\n- igb: Always call igb_xdp_ring_update_tail() under Tx lock (git-fixes).\n- igb: Disable threaded IRQ for igb_msix_other (git-fixes).\n- igb: Fix not clearing TimeSync interrupts for 82580 (git-fixes).\n- igc: Fix double reset adapter triggered from a single taprio cmd (git-fixes).\n- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (git-fixes).\n- igc: Fix qbv tx latency by setting gtxoffset (git-fixes).\n- igc: Fix qbv_config_change_errors logics (git-fixes).\n- igc: Fix reset adapter logics when tx mode change (git-fixes).\n- igc: Unlock on error in igc_io_resume() (git-fixes).\n- iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (git-fixes).\n- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling (git-fixes).\n- iio: accel: kx022a: Fix raw read format (git-fixes).\n- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (git-fixes).\n- iio: adc: ad7606: Fix typo in the driver name (git-fixes).\n- iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer (git-fixes).\n- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (git-fixes).\n- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts: Fix uninitialized symbol 'ret' (git-fixes).\n- iio: gts: fix infinite loop for gain_to_scaletables() (git-fixes).\n- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (git-fixes).\n- iio: light: al3010: Fix an error handling path in al3010_probe() (git-fixes).\n- iio: light: opt3001: add missing full-scale range value (git-fixes).\n- iio: light: veml6030: fix ALS sensor resolution (git-fixes).\n- iio: light: veml6030: fix IIO device retrieval from embedded device (git-fixes).\n- iio: light: veml6030: fix microlux value calculation (git-fixes).\n- iio: magnetometer: ak8975: Convert enum-\u003epointer for data in the match tables (stable-fixes).\n- iio: magnetometer: ak8975: Fix 'Unexpected device' error (git-fixes).\n- iio: magnetometer: ak8975: drop incorrect AK09116 compatible (git-fixes).\n- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- ima: fix buffer overrun in ima_eventdigest_init_common (git-fixes).\n- initramfs: avoid filename buffer overrun (bsc#1232436).\n- intel_idle: add Granite Rapids Xeon support (bsc#1231630).\n- intel_idle: fix ACPI _CST matching for newer Xeon platforms (bsc#1231630).\n- io_uring/eventfd: move to more idiomatic RCU free usage (git-fixes).\n- io_uring/io-wq: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/io-wq: inherit cpuset of cgroup in io worker (git-fixes).\n- io_uring/net: harden multishot termination case for recv (git-fixes).\n- io_uring/rw: fix cflags posting for single issue multishot read (git-fixes).\n- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (git-fixes).\n- io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN (git-fixes).\n- io_uring/sqpoll: close race on waiting for sqring entries (git-fixes).\n- io_uring/sqpoll: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/sqpoll: do not put cpumask on stack (git-fixes).\n- io_uring/sqpoll: retain test for whether the CPU is valid (git-fixes).\n- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL (git-fixes).\n- iommu/amd: Allocate the page table root using GFP_KERNEL (git-fixes).\n- iommu/amd: Do not set the D bit on AMD v2 table entries (git-fixes).\n- iommu/amd: Fix typo of , instead of ; (git-fixes).\n- iommu/vt-d: Always reserve a domain ID for identity setup (git-fixes).\n- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (git-fixes).\n- iommufd: Check the domain owner of the parent before creating a nesting domain (git-fixes).\n- iommufd: Protect against overflow of ALIGN() during iova allocation (git-fixes).\n- irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (git-fixes).\n- jbd2: Move j_transaction_overhead_buffers into a hole (bsc#1234042).\n- jbd2: avoid infinite transaction commit loop (bsc#1234039).\n- jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (bsc#1234043).\n- jbd2: avoid mount failed when commit block is partial submitted (bsc#1234040).\n- jbd2: correct the printing of write_flags in jbd2_write_superblock() (bsc#1234045).\n- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit (bsc#1231638).\n- jbd2: fix kernel-doc for j_transaction_overhead_buffers (bsc#1234042).\n- jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (bsc#1234044).\n- jbd2: fix soft lockup in journal_finish_inode_data_buffers() (bsc#1234046).\n- jbd2: make jbd2_journal_get_max_txn_bufs() internal (bsc#1234041).\n- jbd2: precompute number of transaction descriptor blocks (bsc#1234042).\n- jfs: Fix sanity check in dbMount (git-fixes).\n- jfs: Fix uaf in dbFreeBits (git-fixes).\n- jfs: Fix uninit-value access of new_ea in ea_buffer (git-fixes).\n- jfs: UBSAN: shift-out-of-bounds in dbFindBits (git-fixes).\n- jfs: check if leafidx greater than num leaves per dmap tree (git-fixes).\n- jump_label: Fix static_key_slow_dec() yet again (git-fixes).\n- kABI fix of VM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- kABI workaround for ASoC SOF (bsc#1233305).\n- kABI: Restore exported __arm_smccc_sve_check (git-fixes)\n- kABI: bpf: enum bpf_{type_flag,arg_type} kABI workaround (git-fixes).\n- kABI: bpf: struct bpf_insn_acces_aux kABI workaround (git-fixes).\n- kabi, mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes kabi).\n- kasan: Fix Software Tag-Based KASAN with GCC (git-fixes).\n- kasan: move checks to do_strncpy_from_user (git-fixes).\n- kbuild, bpf: Use test-ge check for v1.25-only pahole (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Add module-specific pahole flags for distilled base BTF (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later (bsc#1230414 bsc#1229450).\n- kbuild: avoid too many execution of scripts/pahole-flags.sh (bsc#1230414 bsc#1229450).\n- kbuild: bpf: Tell pahole to DECL_TAG kfuncs (bsc#1230414 bsc#1229450).\n- kconfig: qconf: fix buffer overflow in debug links (git-fixes).\n- kernel-binary: Enable livepatch package only when livepatch is enabled Otherwise the filelist may be empty failing the build (bsc#1218644).\n- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y (git-fixes).\n- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry (git-fixes).\n- keys: Fix overwrite of key expiration on instantiation (git-fixes).\n- kthread: unpark only parked kthread (git-fixes).\n- leds: lp55xx: Remove redundant test for invalid channel number (git-fixes).\n- lib/xarray: introduce a new helper xas_get_order (bsc#1231617).\n- lib: string_helpers: silence snprintf() output truncation warning (git-fixes).\n- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (git-fixes).\n- macsec: do not increment counters for an unrelated SA (git-fixes).\n- mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (git-fixes).\n- maple_tree: correct tree corruption on spanning store (git-fixes).\n- maple_tree: fix alloc node fail issue (git-fixes).\n- maple_tree: refine mas_store_root() on storing NULL (git-fixes).\n- media: Drop the previous HD-audio TAS2781 fix (bsc#1230132)\n- media: adv7604: prevent underflow condition when reporting colorspace (git-fixes).\n- media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: amphion: Set video drvdata before register video device (git-fixes).\n- media: ar0521: do not overflow when checking PLL values (git-fixes).\n- media: atomisp: Add check for rgby_data memory allocation failure (git-fixes).\n- media: bttv: use audio defaults for winfast2000 (git-fixes).\n- media: core: v4l2-ioctl: check if ioctl is known to avoid NULL name (git-fixes).\n- media: cx24116: prevent overflows on SNR calculus (git-fixes).\n- media: dvb_frontend: do not play tricks with underflow values (git-fixes).\n- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (stable-fixes).\n- media: dvbdev: prevent the risk of out of memory access (git-fixes).\n- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (git-fixes).\n- media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: i2c: imx335: Enable regulator supplies (stable-fixes).\n- media: i2c: tc358743: Fix crash in the probe error path when using polling (git-fixes).\n- media: imx-jpeg: Ensure power suppliers be suspended before detach them (git-fixes).\n- media: imx-jpeg: Set video drvdata before register video device (git-fixes).\n- media: imx335: Fix reset-gpio handling (git-fixes).\n- media: mantis: remove orphan mantis_core.h (git-fixes).\n- media: mtk-jpeg: Fix null-ptr-deref during unload module (git-fixes).\n- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (git-fixes).\n- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (git-fixes).\n- media: platform: exynos4-is: Fix an OF node reference leak in fimc_md_is_isp_available (git-fixes).\n- media: pulse8-cec: fix data timestamp at pulse8_setup() (git-fixes).\n- media: s5p-jpeg: prevent buffer overflows (git-fixes).\n- media: stb0899_algo: initialize cfr before using it (git-fixes).\n- media: ts2020: fix null-ptr-deref in ts2020_probe() (git-fixes).\n- media: uvcvideo: Require entities to have a non-zero unique ID (git-fixes).\n- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (git-fixes).\n- media: uvcvideo: Stop stream during unregister (git-fixes).\n- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (git-fixes).\n- media: v4l2-tpg: prevent the risk of a division by zero (git-fixes).\n- media: vb2: Fix comment (git-fixes).\n- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() (stable-fixes).\n- media: videobuf2: fix typo: vb2_dbuf -\u003e vb2_qbuf (git-fixes).\n- media: wl128x: Fix atomicity violation in fmc_send_cmd() (git-fixes).\n- mei: use kvmalloc for read buffer (git-fixes).\n- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).\n- mfd: rt5033: Fix missing regmap_del_irq_chip() (git-fixes).\n- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (git-fixes).\n- minmax: avoid overly complex min()/max() macro arguments in xen (git-fixes).\n- minmax: scsi: fix mis-use of 'clamp()' in sr.c (git-fixes).\n- misc: apds990x: Fix missing pm_runtime_disable() (git-fixes).\n- mlx5: avoid truncating error message (git-fixes).\n- mlx5: stop warning for 64KB pages (git-fixes).\n- mlxbf_gige: disable RX filters until RX path initialized (git-fixes).\n- mm/filemap: optimize filemap folio adding (bsc#1231617).\n- mm/filemap: return early if failed to allocate memory for split (bsc#1231617).\n- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (bsc#1234012).\n- mm: avoid unsafe VMA hook invocation when error arises on mmap hook (git-fixes).\n- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point (git-fixes).\n- mm: mmap: no need to call khugepaged_enter_vma() for stack (jsc#PED-10978).\n- mm: move dummy_vm_ops out of a header (git-fixes prerequisity).\n- mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes).\n- mm: refactor map_deny_write_exec() (git-fixes).\n- mm: resolve faulty mmap_region() error path behaviour (git-fixes).\n- mm: unconditionally close VMAs on error (git-fixes).\n- mmc: core: Further prevent card detect during shutdown (git-fixes).\n- mmc: mmc_spi: drop buggy snprintf() (git-fixes).\n- mmc: sunxi-mmc: Fix A100 compatible description (git-fixes).\n- modpost: fix acpi MODULE_DEVICE_TABLE built with mismatched endianness (git-fixes).\n- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (git-fixes).\n- modpost: remove incorrect code in do_eisa_entry() (git-fixes).\n- module: abort module loading when sysfs setup suffer errors (git-fixes).\n- mtd: rawnand: atmel: Fix possible memory leak (git-fixes).\n- mtd: spi-nor: core: replace dummy buswidth from addr to data (git-fixes).\n- nbd: fix race between timeout and normal completion (bsc#1230918).\n- net/mlx5: Add missing masks and QoS bit masks for scheduling elements (git-fixes).\n- net/mlx5: Added cond_resched() to crdump collection (git-fixes).\n- net/mlx5: Check capability for fw_reset (git-fixes).\n- net/mlx5: Check for invalid vector index on EQ creation (git-fixes).\n- net/mlx5: Explicitly set scheduling element and TSAR type (git-fixes).\n- net/mlx5: Fix command bitmask initialization (git-fixes).\n- net/mlx5: Fix error handling in irq_pool_request_irq (git-fixes).\n- net/mlx5: Lag, do bond only if slaves agree on roce state (git-fixes).\n- net/mlx5: Lag, do not use the hardcoded value of the first port (git-fixes).\n- net/mlx5: Stop waiting for PCI if pci channel is offline (git-fixes).\n- net/mlx5: Unregister notifier on eswitch init failure (git-fixes).\n- net/mlx5: Update the list of the PCI supported devices (git-fixes).\n- net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (git-fixes).\n- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map (git-fixes).\n- net/mlx5e: Add missing link modes to ptys2ethtool_map (git-fixes).\n- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (git-fixes).\n- net/mlx5e: Correctly report errors for ethtool rx flows (git-fixes).\n- net/mlx5e: Do not call cleanup on profile rollback failure (git-fixes).\n- net/mlx5e: Fix IPsec tunnel mode offload feature check (git-fixes).\n- net/mlx5e: Fix UDP GSO for encapsulated packets (git-fixes).\n- net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (git-fixes).\n- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (git-fixes).\n- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (git-fixes).\n- net: mana: Implement get_ringparam/set_ringparam for mana (bsc#1229891).\n- net: mana: Improve mana_set_channels() in low mem conditions (bsc#1230289).\n- net: mdio-ipq4019: add missing error check (git-fixes).\n- net: phy: Remove LED entry from LEDs list on unregister (git-fixes).\n- net: phy: bcm84881: Fix some error handling paths (git-fixes).\n- net: phy: dp83822: Fix reset pin definitions (git-fixes).\n- net: phy: dp83869: fix memory corruption when enabling fiber (git-fixes).\n- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (git-fixes).\n- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (git-fixes).\n- net: qede: use return from qede_parse_actions() (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flow_spec (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flower (git-fixes).\n- net: relax socket state check at accept time (git-fixes).\n- net: stmmac: dwmac-tegra: Fix link bring-up sequence (git-fixes)\n- net: sysfs: Fix /sys/class/net/\u0026lt;iface\u003e path for statistics (git-fixes).\n- net: test for not too small csum_start in virtio_net_hdr_to_skb() (git-fixes).\n- net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (git-fixes).\n- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (git-fixes).\n- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (git-fixes).\n- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (stable-fixes).\n- net: usb: usbnet: fix name regression (get-fixes).\n- net: usb: usbnet: fix race in probe failure (git-fixes).\n- net: wwan: fix global oob in wwan_rtnl_policy (git-fixes).\n- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() (git-fixes).\n- net: xfrm: preserve kabi for xfrm_state (bsc#1233754).\n- netdevsim: copy addresses for both in and out paths (git-fixes).\n- netdevsim: use cond_resched() in nsim_dev_trap_report_work() (git-fixes).\n- netfilter: nf_tables: missing iterator type in lookup walk (git-fixes).\n- nfs: Fix KMSAN warning in decode_getfattr_attrs() (git-fixes).\n- nfs: avoid i_lock contention in nfs_clear_invalid_mapping (git-fixes).\n- nfs: fix memory leak in error path of nfs4_do_reclaim (git-fixes).\n- nfsd: call cache_put if xdr_reserve_space returns NULL (git-fixes).\n- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (git-fixes).\n- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (git-fixes).\n- nfsd: fix refcount leak when file is unhashed after being found (git-fixes).\n- nfsd: map the EBADMSG to nfserr_io to avoid warning (git-fixes).\n- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (git-fixes).\n- nfsd: remove unsafe BUG_ON from set_change_info (bsc#1234121).\n- nfsd: return -EINVAL when namelen is 0 (git-fixes).\n- nilfs2: fix kernel bug due to missing clearing of buffer delay flag (git-fixes).\n- nilfs2: fix potential deadlock with newly created symlinks (git-fixes).\n- nouveau/dmem: Fix privileged error in copy engine channel (git-fixes).\n- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (git-fixes).\n- nouveau/dp: handle retries for AUX CH transfers with GSP (git-fixes).\n- nouveau/gsp: Avoid addressing beyond end of rpc-\u003eentries (stable-fixes).\n- nouveau: fw: sync dma after setup is called (git-fixes).\n- nouveau: handle EBUSY and EAGAIN for GSP aux errors (git-fixes).\n- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- ntfs3: Add bounds checking to mi_enum_attr() (bsc#1233207)\n- nvme-fabrics: fix kernel crash while shutting down controller (git-fixes).\n- nvme-loop: flush off pending I/O while shutting down loop controller (git-fixes).\n- nvme-multipath: suppress partition scan until the disk is ready (bsc#1228244).\n- nvme-pci: fix freeing of the HMB descriptor table (git-fixes).\n- nvme-pci: fix race condition between reset and nvme_dev_disable() (git-fixes).\n- nvme-pci: qdepth 1 quirk (git-fixes).\n- nvme-pci: reverse request order in nvme_queue_rqs (git-fixes).\n- nvme-pci: set doorbell config before unquiescing (git-fixes).\n- nvme/host: Fix RCU list traversal to use SRCU primitive (git-fixes).\n- nvme: disable CC.CRIME (NVME_CC_CRIME) (jsc#PED-9901).\n- nvme: null terminate nvme_tls_attrs (git-fixes).\n- nvme: re-fix error-handling for io_uring nvme-passthrough (git-fixes).\n- nvme: tcp: avoid race between queue_lock lock and destroy (git-fixes).\n- nvmet-auth: assign dh_key to NULL after kfree_sensitive (git-fixes).\n- ocfs2: Drop OCFS2 patch causing a regression (bsc#1233255)\n- ocfs2: fix UBSAN warning in ocfs2_verify_volume() (git-fixes).\n- ocfs2: fix the la space leak when unmounting an ocfs2 volume (git-fixes).\n- ocfs2: fix uninit-value in ocfs2_get_block() (git-fixes).\n- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (git-fixes).\n- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (git-fixes).\n- ocfs2: uncache inode which has failed entering the group (git-fixes).\n- of: Add cleanup.h based auto release via __free(device_node) markings (bsc#1232386)\n- parport: Proper fix for array out-of-bounds access (git-fixes).\n- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check (git-fixes).\n- phy: qcom: qmp-combo: move driver data initialisation earlier (git-fixes).\n- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend (git-fixes).\n- phy: tegra: xusb: Add error pointer check in xusb.c (git-fixes).\n- phy: ti: phy-j721e-wiz: fix usxgmii configuration (git-fixes).\n- pinctrl: apple: check devm_kasprintf() returned value (git-fixes).\n- pinctrl: k210: Undef K210_PC_DEFAULT (git-fixes).\n- pinctrl: ocelot: fix system hang on level based interrupts (stable-fixes).\n- pinctrl: qcom: spmi: fix debugfs drive strength (git-fixes).\n- pinctrl: zynqmp: drop excess struct member description (git-fixes).\n- platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (git-fixes).\n- platform/x86/amd/pmc: Detect when STB is not available (git-fixes).\n- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug (git-fixes).\n- platform/x86: dell-sysman: add support for alienware products (stable-fixes).\n- platform/x86: dell-wmi: Ignore suspend notifications (stable-fixes).\n- platform/x86: lenovo-ymc: Ignore the 0x0 state (stable-fixes).\n- platform/x86: panasonic-laptop: Return errno correctly in show callback (git-fixes).\n- platform/x86: touchscreen_dmi: add nanote-next quirk (stable-fixes).\n- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (bsc#1234098).\n- power: reset: brcmstb: Do not go into infinite loop if reset fails (stable-fixes).\n- power: supply: bq27xxx: Fix registers of bq27426 (git-fixes).\n- power: supply: core: Remove might_sleep() from power_supply_put() (git-fixes).\n- power: supply: rt9471: Fix wrong WDT function regfield declaration (git-fixes).\n- power: supply: rt9471: Use IC status regfield to report real charger status (git-fixes).\n- powercap: intel_rapl: Fix off by one in get_rpi() (git-fixes).\n- powerpc/64: Convert patch_instruction() to patch_u32() (bsc#1194869).\n- powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0 (bsc#1215199).\n- powerpc/atomic: Use YZ constraints for DS-form instructions (bsc#1194869).\n- powerpc/boot: Handle allocation failure in simple_realloc() (bsc#1194869).\n- powerpc/boot: Only free if realloc() succeeds (bsc#1194869).\n- powerpc/code-patching: Add generic memory patching (bsc#1194869).\n- powerpc/code-patching: Perform hwsync in __patch_instruction() in case of failure (bsc#1194869).\n- powerpc/crypto: do not build aes-gcm-p10 by default (bsc#1230501 ltc#208632).\n- powerpc/crypto: fix missing skcipher dependency for aes-gcm-p10 (bsc#1230501 ltc#208632).\n- powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (bsc#1215199).\n- powerpc/fadump: Refactor and prepare fadump_cma_init for late init (bsc#1215199).\n- powerpc/kexec: Fix return of uninitialized variable (bsc#1194869).\n- powerpc/mm/fault: Fix kfence page fault reporting (bsc#1194869).\n- powerpc/mm: Fix boot crash with FLATMEM (bsc#1194869).\n- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL (bsc#1194869).\n- powerpc/powernv: Free name on error in opal_event_init() (bsc#1194869).\n- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (bsc#1194869).\n- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (bsc#1194869).\n- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct (bsc#1215199).\n- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace (bsc#1194869).\n- powerpc/vdso: Inconditionally use CFUNC macro (bsc#1215199).\n- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (bsc#1194869).\n- powerpc/xmon: Fix disassembly CPU feature checks (bsc#1065729).\n- printk: Add notation to console_srcu locking (bsc#1232183).\n- pwm: imx-tpm: Use correct MODULO value for EPWM mode (git-fixes).\n- qed: avoid truncating work queue length (git-fixes).\n- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (bsc#1226631).\n- rcu: Fix buffer overflow in print_cpu_stall_info() (bsc#1226623).\n- regmap: detach regmap from dev on regmap_exit (git-fixes).\n- regmap: irq: Set lockdep class for hierarchical IRQ domains (git-fixes).\n- rpm/check-for-config-changes: add HAVE_RUST and RUSTC_SUPPORTS_ to IGNORED_CONFIGS_RE They depend on SHADOW_CALL_STACK.\n- rpm/release-projects: Add SLFO projects (bsc#1231293).\n- rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation. (bsc#1218644)\n- rpmsg: glink: Handle rejected intent request better (git-fixes).\n- rtc: ab-eoz9: do not fail temperature reads on undervoltage notification (git-fixes).\n- rtc: abx80x: Fix WDT bit position of the status register (git-fixes).\n- rtc: bbnsm: add remove hook (git-fixes).\n- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (git-fixes).\n- rtc: rzn1: fix BCD to rtc_time conversion errors (git-fixes).\n- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- runtime constants: add default dummy infrastructure (git-fixes).\n- runtime constants: add x86 architecture support (git-fixes).\n- s390/mm: Add cond_resched() to cmm_alloc/free_pages() (bsc#1228747).\n- s390/pci: Handle PCI error codes other than 0x3a (git-fixes bsc#1232629).\n- s390/sclp: Deactivate sclp after all its users (git-fixes bsc#1232628).\n- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (git-fixes bsc#1232627).\n- scsi: NCR5380: Check for phase match during PDMA fixup (git-fixes).\n- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers (git-fixes).\n- scsi: Remove scsi device no_start_on_resume flag (git-fixes).\n- scsi: aacraid: Rearrange order of struct aac_srb_unit (git-fixes).\n- scsi: cdrom: kABI: fix cdrom_dev_ops change (git-fixes).\n- scsi: core: Disable CDL by default (git-fixes).\n- scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING (git-fixes).\n- scsi: core: Fix the return value of scsi_logical_block_count() (git-fixes).\n- scsi: core: Handle devices which return an unusually large VPD page count (git-fixes).\n- scsi: core: alua: I/O errors for ALUA state transitions (git-fixes).\n- scsi: fnic: Move flush_work initialization out of if block (bsc#1230055).\n- scsi: hisi_sas: Handle the NCQ error returned by D2H frame (git-fixes).\n- scsi: hpsa: Fix allocation size for Scsi_Host private data (git-fixes).\n- scsi: kABI: restore no_start_on_resume to scsi_device (git-fixes).\n- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (git-fixes).\n- scsi: libsas: Fix the failure of adding phy with zero-address to port (git-fixes).\n- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd() (bsc#1232757).\n- scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Copyright updates for 14.4.0.6 patches (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (bsc#1232757).\n- scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (bsc#1232757).\n- scsi: lpfc: Modify CGN warning signal calculation based on EDC response (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Remove trailing space after \\n newline (bsc#1232757).\n- scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs (bsc#1232757 bsc#1228119).\n- scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to KERN_WARNING (bsc#1232757).\n- scsi: lpfc: Support loopback tests with VMID enabled (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.5 (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.6 (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE (bsc#1232757).\n- scsi: mac_scsi: Disallow bus errors during PDMA send (git-fixes).\n- scsi: mac_scsi: Refactor polling loop (git-fixes).\n- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages (git-fixes).\n- scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (git-fixes).\n- scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (git-fixes).\n- scsi: mpi3mr: Avoid possible run-time warning with long manufacturer strings (git-fixes).\n- scsi: mpi3mr: Fix ATA NCQ priority support (git-fixes).\n- scsi: mpi3mr: Validate SAS port assignments (git-fixes).\n- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (git-fixes).\n- scsi: pm8001: Do not overwrite PCI queue mapping (git-fixes).\n- scsi: pm80xx: Set phy-\u003eenable_completion only when we wait for it (git-fixes).\n- scsi: qedf: Set qed_slowpath_params to zero before use (git-fixes).\n- scsi: scsi_transport_fc: Allow setting rport state to current state (git-fixes).\n- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress (git-fixes).\n- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (git-fixes).\n- scsi: smartpqi: correct stream detection (git-fixes).\n- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly (git-fixes).\n- scsi: spi: Fix sshdr use (git-fixes).\n- scsi: sr: Fix unintentional arithmetic wraparound (git-fixes).\n- scsi: wd33c93: Do not use stale scsi_pointer value (git-fixes).\n- security/keys: fix slab-out-of-bounds in key_task_permission (git-fixes).\n- selftests/bpf: Add a test case to write mtu result into .rodata (git-fixes).\n- selftests/bpf: Add a test case to write strtol result into .rodata (git-fixes).\n- selftests/bpf: Add test for sign extension in coerce_subreg_to_size_sx() (git-fixes).\n- selftests/bpf: Add test for truncation after sign extension in coerce_reg_to_size_sx() (git-fixes).\n- selftests/bpf: Add tests for ldsx of pkt data/data_end/data_meta accesses (git-fixes).\n- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test (git-fixes).\n- selftests/bpf: Rename ARG_PTR_TO_LONG test description (git-fixes).\n- selftests/bpf: test for malformed BPF_CORE_TYPE_ID_LOCAL relocation (git-fixes).\n- serial: 8250: omap: Move pm_runtime_get_sync (git-fixes).\n- serial: imx: Update mctrl old_status on RTSD interrupt (git-fixes).\n- serial: protect uart_port_dtr_rts() in uart_shutdown() too (stable-fixes).\n- signal: Replace BUG_ON()s (bsc#1234093).\n- soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (git-fixes).\n- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (git-fixes).\n- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- soundwire: intel_bus_common: enable interrupts before exiting reset (stable-fixes).\n- spi: Fix acpi deferred irq probe (git-fixes).\n- spi: atmel-quadspi: Fix register name in verbose logging function (git-fixes).\n- spi: atmel-quadspi: Fix wrong register value written to MR (git-fixes).\n- spi: mpc52xx: Add cancel_work_sync before module remove (git-fixes).\n- spi: mtk-snfi: fix kerneldoc for mtk_snand_is_page_ops() (git-fixes).\n- spi: s3c64xx: fix timeout counters in flush_fifo (git-fixes).\n- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select (git-fixes).\n- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- spi: tegra210-quad: Avoid shift-out-of-bounds (git-fixes).\n- splice: always fsnotify_access(in), fsnotify_modify(out) on success (git-fixes).\n- splice: fsnotify_access(fd)/fsnotify_modify(fd) in vmsplice (git-fixes).\n- splice: fsnotify_access(in), fsnotify_modify(out) on success in tee (git-fixes).\n- srcu: Fix callbacks acceleration mishandling (git-fixes).\n- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (git-fixes).\n- sumversion: Fix a memory leak in get_src_version() (git-fixes).\n- supported.conf: mark nhpoly1305 module as supported (bsc#1231035).\n- supported.conf: mark ultravisor userspace access as supported (bsc#1232090).\n- task_work: add kerneldoc annotation for 'data' argument (git-fixes).\n- tcp: Fix refcnt handling in __inet_hash_connect() (git-fixes).\n- thermal: core: Initialize thermal zones before registering them (git-fixes).\n- thermal: int3400: Fix reading of current_uuid for active policy (git-fixes).\n- thermal: intel: int340x: processor: Fix warning during module unload (git-fixes).\n- thunderbolt: Honor TMU requirements in the domain when setting TMU mode (stable-fixes).\n- thunderbolt: Improve DisplayPort tunnel setup process to be more robust (stable-fixes).\n- tools/lib/thermal: Fix sampling handler context ptr (git-fixes).\n- tools/power turbostat: Fix trailing '\\n' parsing (git-fixes).\n- tools/power turbostat: Increase the limit for fd opened (bsc#1233119).\n- tools: hv: rm .*.cmd when make clean (git-fixes).\n- tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1082555 git-fixes).\n- tpm: fix signed/unsigned bug when checking event logs (git-fixes).\n- tracing/hwlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/osnoise: Fix build when timerlat is not enabled (git-fixes).\n- tracing/osnoise: Skip running osnoise if all instances are off (git-fixes).\n- tracing/osnoise: Switch from PF_NO_SETAFFINITY to migrate_disable (git-fixes).\n- tracing/osnoise: Use a cpumask to know what threads are kthreads (git-fixes).\n- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (git-fixes).\n- tracing/timerlat: Add user-space interface (git-fixes).\n- tracing/timerlat: Drop interface_lock in stop_kthread() (git-fixes).\n- tracing/timerlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (git-fixes).\n- tracing/timerlat: Move hrtimer_init to timerlat_fd open() (git-fixes).\n- tracing/timerlat: Only clear timer if a kthread exists (git-fixes).\n- tracing: Consider the NULL character when validating the event length (git-fixes).\n- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (git-fixes).\n- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (stable-fixes).\n- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (git-fixes).\n- ubifs: Fix adding orphan entry twice for the same inode (git-fixes).\n- ubifs: Fix unattached xattr inode if powercut happens after deleting (git-fixes).\n- ubifs: add check for crypto_shash_tfm_digest (git-fixes).\n- ubifs: dbg_orphan_check: Fix missed key type checking (git-fixes).\n- ucounts: fix counter leak in inc_rlimit_get_ucounts() (bsc#1233460).\n- unicode: Do not special case ignorable code points (stable-fixes).\n- unicode: Fix utf8_load() error path (git-fixes).\n- uprobe: avoid out-of-bounds memory access of fetching args (git-fixes).\n- uprobes: encapsulate preparation of uprobe args buffer (git-fixes).\n- uprobes: introduce the global struct vm_special_mapping xol_mapping (bsc#1231114).\n- uprobes: turn xol_area-\u003epages into xol_area-\u003epage (bsc#1231114).\n- usb: chipidea: udc: enable suspend interrupt after usb reset (stable-fixes).\n- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario (stable-fixes).\n- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG (git-fixes).\n- usb: dwc3: core: Stop processing of pending events if controller is halted (git-fixes).\n- usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (git-fixes).\n- usb: dwc3: gadget: Fix checking for number of TRBs left (git-fixes).\n- usb: dwc3: gadget: Fix looping of queued SG entries (git-fixes).\n- usb: ehci-spear: fix call balance of sehci clk handling routines (git-fixes).\n- usb: gadget: core: force synchronous registration (git-fixes).\n- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe (stable-fixes).\n- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler (stable-fixes).\n- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context (git-fixes).\n- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant (stable-fixes).\n- usb: gadget: f_uac2: fix non-newline-terminated function name (stable-fixes).\n- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store (git-fixes).\n- usb: musb: Fix hardware lockup on first Rx endpoint request (git-fixes).\n- usb: musb: sunxi: Fix accessing an released usb phy (git-fixes).\n- usb: phy: Fix API devm_usb_put_phy() can not release the phy (git-fixes).\n- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (stable-fixes).\n- usb: typec: altmode should keep reference to parent (git-fixes).\n- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (git-fixes).\n- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (git-fixes).\n- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (git-fixes).\n- usb: xhci: Fix TD invalidation under pending Set TR Dequeue (git-fixes).\n- usb: xhci: Fix problem with xhci resume from suspend (stable-fixes).\n- usb: xhci: fix loss of data on Cadence xHC (git-fixes).\n- usb: yurex: make waiting on yurex_write interruptible (git-fixes).\n- usbip: tools: Fix detach_port() invalid port error path (git-fixes).\n- usbnet: fix cyclical race on disconnect with work queue (git-fixes).\n- vdpa: Fix an error handling path in eni_vdpa_probe() (git-fixes).\n- vdpa_sim_blk: Fix the potential leak of mgmt_dev (git-fixes).\n- vdpa_sim_blk: allocate the buffer zeroed (git-fixes).\n- vduse: avoid using __GFP_NOFAIL (git-fixes).\n- vfs: dcache: move hashlen_hash() from callers into d_hash() (git-fixes).\n- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (git-fixes).\n- vhost_vdpa: assign irq bypass producer token correctly (git-fixes).\n- virtio_console: fix misc probe bugs (git-fixes).\n- vmalloc: modify the alloc_vmap_area() error message for better diagnostics (jsc#PED-10978).\n- vmxnet3: Add XDP support (bsc#1226498).\n- vmxnet3: Fix missing reserved tailroom (bsc#1226498).\n- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame (bsc#1226498).\n- vmxnet3: add command to allow disabling of offloads (bsc#1226498).\n- vmxnet3: add latency measurement support in vmxnet3 (bsc#1226498).\n- vmxnet3: prepare for version 9 changes (bsc#1226498).\n- vmxnet3: update to version 9 (bsc#1226498).\n- vsock: Update msg_count on read_skb() (git-fixes).\n- vt: prevent kernel-infoleak in con_font_get() (git-fixes).\n- watchdog: apple: Actually flush writes after requesting watchdog restart (git-fixes).\n- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (git-fixes).\n- watchdog: rti: of: honor timeout-sec property (git-fixes).\n- wifi: ath10k: Fix memory leak in management tx (git-fixes).\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (git-fixes).\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (git-fixes).\n- wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (git-fixes).\n- wifi: ath11k: Fix invalid ring usage in full monitor mode (git-fixes).\n- wifi: ath11k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: Skip Rx TID cleanup for self peer (git-fixes).\n- wifi: ath12k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: fix crash when unbinding (git-fixes).\n- wifi: ath12k: fix warning when unbinding (git-fixes).\n- wifi: ath12k: remove msdu_end structure for WCN7850 (git-fixes).\n- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (git-fixes).\n- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (stable-fixes).\n- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (stable-fixes).\n- wifi: brcm80211: BRCM_TRACING should depend on TRACING (git-fixes).\n- wifi: brcmfmac: release 'root' node in all execution paths (git-fixes).\n- wifi: cfg80211: Set correct chandef when starting CAC (stable-fixes).\n- wifi: cfg80211: clear wdev-\u003ecqm_config pointer on free (git-fixes).\n- wifi: cw1200: Fix potential NULL dereference (git-fixes).\n- wifi: iwlegacy: Clear stale interrupts before resuming device (stable-fixes).\n- wifi: iwlegacy: Fix \"field-spanning write\" warning in il_enqueue_hcmd() (git-fixes).\n- wifi: iwlwifi: allow only CN mcc from WRDD (stable-fixes).\n- wifi: iwlwifi: config: label 'gl' devices as discrete (git-fixes).\n- wifi: iwlwifi: mvm: Fix a race in scan abort flow (stable-fixes).\n- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (git-fixes).\n- wifi: iwlwifi: mvm: avoid NULL pointer dereference (stable-fixes).\n- wifi: iwlwifi: mvm: do not add default link in fw restart flow (git-fixes).\n- wifi: iwlwifi: mvm: do not leak a link on AP removal (git-fixes).\n- wifi: iwlwifi: mvm: drop wrong STA selection in TX (stable-fixes).\n- wifi: iwlwifi: mvm: use correct key iteration (stable-fixes).\n- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL (stable-fixes).\n- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (git-fixes).\n- wifi: mac80211: fix RCU list iterations (stable-fixes).\n- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (git-fixes).\n- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation (stable-fixes).\n- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable (stable-fixes).\n- wifi: mt76: mt7915: hold dev-\u003emt76.mutex while disabling tx worker (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (git-fixes).\n- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c (stable-fixes).\n- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons (git-fixes).\n- wifi: rtw88: select WANT_DEV_COREDUMP (stable-fixes).\n- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements (stable-fixes).\n- wifi: rtw89: avoid to add interface to list twice when SER (stable-fixes).\n- wifi: rtw89: correct base HT rate mask for firmware (stable-fixes).\n- wifi: wfx: Fix error handling in wfx_core_init() (git-fixes).\n- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (bsc#1233443).\n- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load (git-fixes).\n- x86/Documentation: Indent 'note::' directive for protocol version number note (git-fixes).\n- x86/PCI: Check pcie_find_root_port() return for NULL (git-fixes).\n- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h (git-fixes).\n- x86/apic: Always explicitly disarm TSC-deadline timer (git-fixes).\n- x86/apic: Make x2apic_disable() work correctly (git-fixes).\n- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (git-fixes).\n- x86/bugs: Skip RSB fill at VMEXIT (git-fixes).\n- x86/cpufeatures: Add a IBPB_NO_RET BUG flag (git-fixes).\n- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (git-fixes).\n- x86/entry: Have entry_ibpb() invalidate return predictions (git-fixes).\n- x86/entry: Remove unwanted instrumentation in common_interrupt() (git-fixes).\n- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency (git-fixes).\n- x86/microcode/intel: Remove unnecessary cache writeback and invalidation (git-fixes).\n- x86/mm: Use IPIs to synchronize LAM enablement (git-fixes).\n- x86/resctrl: Annotate get_mem_config() functions as __init (git-fixes).\n- x86/resctrl: Avoid overflow in MB settings in bw_validate() (git-fixes).\n- x86/resctrl: Remove hard-coded memory bandwidth limit (git-fixes).\n- x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler (git-fixes).\n- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() (git-fixes).\n- x86/tdx: Dynamically disable SEPT violations from causing #VEs (git-fixes).\n- x86/tdx: Enable CPU topology enumeration (git-fixes).\n- x86/tdx: Introduce wrappers to read and write TD metadata (git-fixes).\n- x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup() (git-fixes).\n- x86/traps: move kmsan check after instrumentation_begin (git-fixes).\n- x86: Increase brk randomness entropy for 64-bit systems (git-fixes).\n- x86: do the user address masking outside the user access area (git-fixes).\n- x86: fix off-by-one in access_ok() (git-fixes).\n- x86: fix user address masking non-canonical speculation issue (git-fixes).\n- x86: make the masked_user_access_begin() macro use its argument only once (git-fixes).\n- x86: support user address masking instead of non-speculative conditional (git-fixes).\n- xfrm: Export symbol xfrm_dev_state_delete (bsc#1233754).\n- xfrm: Fix unregister netdevice hang on hardware offload (bsc#1233754).\n- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2 (git-fixes).\n- xfs: check shortform attr entry flags specifically (git-fixes).\n- xfs: convert delayed extents to unwritten when zeroing post eof blocks (git-fixes).\n- xfs: fix finding a last resort AG in xfs_filestream_pick_ag (git-fixes).\n- xfs: fix freeing speculative preallocations for preallocated files (git-fixes).\n- xfs: make sure sb_fdblocks is non-negative (git-fixes).\n- xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional (git-fixes).\n- xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset (git-fixes).\n- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent (git-fixes).\n- xfs: validate recovered name buffers when recovering xattr items (git-fixes).\n- xhci: Add a quirk for writing ERST in high-low order (git-fixes).\n- xhci: Fix Link TRB DMA in command ring stopped completion event (git-fixes).\n- xhci: Fix incorrect stream context type macro (git-fixes).\n- xhci: Mitigate failed set dequeue pointer commands (git-fixes).\n- xhci: Use pm_runtime_get to prevent RPM on unsupported systems (git-fixes).\n- xhci: tegra: fix checked USB2 port number (git-fixes).\n- zonefs: Improve error handling (git-fixes).\n","status":"published","published":"2025-03-27T12:56:22Z","modified":"2026-03-23T04:50:43.51293Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20164-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).\n- CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).\n- CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).\n- CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).\n- CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).\n- CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).\n- CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).\n- CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb-\u003ehead (bsc#1224518).\n- CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).\n- CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).\n- CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).\n- CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).\n- CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).\n- CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).\n- CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).\n- CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).\n- CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).\n- CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).\n- CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).\n- CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).\n- CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command  (bsc#1228620).\n- CVE-2024-42102: Revert \"mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again\" (bsc#1233132).\n- CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).\n- CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).\n- CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).\n- CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).\n- CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).\n- CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).\n- CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).\n- CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)\n- CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).\n- CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).\n- CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).\n- CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).\n- CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).\n- CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).\n- CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).\n- CVE-2024-46813: drm/amd/display: Check link_index before accessing dc-\u003elinks (bsc#1231191).\n- CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).\n- CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).\n- CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).\n- CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).\n- CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).\n- CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).\n- CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100).\n- CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).\n- CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).\n- CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).\n- CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (bsc#1231435).\n- CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (bsc#1231436).\n- CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).\n- CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442).\n- CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).\n- CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode() and iput() (bsc#1231930).\n- CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).\n- CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).\n- CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003).\n- CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).\n- CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).\n- CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946).\n- CVE-2024-47704: drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944).\n- CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872).\n- CVE-2024-47706: block, bfq: fix possible UAF for bfqq-\u003ebic with merge chain (bsc#1231942).\n- CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).\n- CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049).\n- CVE-2024-47727: x86/tdx: Fix \"in-kernel MMIO\" check (bsc#1232116).\n- CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).\n- CVE-2024-47731: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (bsc#1232117).\n- CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).\n- CVE-2024-47741: btrfs: fix race setting file private on concurrent lseek using same fd (bsc#1231869).\n- CVE-2024-47745: mm: call the security_mmap_file() LSM hook in remap_file_pages() (bsc#1232135).\n- CVE-2024-47747: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (bsc#1232145).\n- CVE-2024-47752: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning (bsc#1232130).\n- CVE-2024-47753: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning (bsc#1231868).\n- CVE-2024-47754: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning (bsc#1232131).\n- CVE-2024-49852: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (bsc#1232819).\n- CVE-2024-49864: rxrpc: Fix a race between socket set up and I/O thread creation (bsc#1232256).\n- CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount (bsc#1232262).\n- CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).\n- CVE-2024-49881: ext4: update orig_path in ext4_find_extent() (bsc#1232201).\n- CVE-2024-49882: ext4: fix double brelse() the buffer of the extents path (bsc#1232200).\n- CVE-2024-49883: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199).\n- CVE-2024-49888: bpf: Fix a sdiv overflow issue (bsc#1232208).\n- CVE-2024-49890: drm/amd/pm: ensure the fw_info is not null before using it (bsc#1232217).\n- CVE-2024-49892: drm/amd/display: Initialize get_bytes_per_element's default to 1 (bsc#1232220).\n- CVE-2024-49894: drm/amd/display: Fix index out of bounds in degamma hardware format translation (bsc#1232354).\n- CVE-2024-49895: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (bsc#1232352).\n- CVE-2024-49896: drm/amd/display: Check stream before comparing them (bsc#1232221).\n- CVE-2024-49897: drm/amd/display: Check phantom_stream before it is used (bsc#1232355).\n- CVE-2024-49898: drm/amd/display: Check null-initialized variables (bsc#1232222).\n- CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).\n- CVE-2024-49901: drm/msm/adreno: Assign msm_gpu-\u003epdev earlier to avoid nullptrs (bsc#1232305).\n- CVE-2024-49906: drm/amd/display: Check null pointer before try to access it (bsc#1232332).\n- CVE-2024-49907: drm/amd/display: Check null pointers before using dc-\u003eclk_mgr (bsc#1232334).\n- CVE-2024-49909: drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func (bsc#1232337).\n- CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (bsc#1232366).\n- CVE-2024-49912: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (bsc#1232367).\n- CVE-2024-49913: drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (bsc#1232307).\n- CVE-2024-49914: drm/amd/display: Add null check for pipe_ctx-\u003eplane_state in (bsc#1232369).\n- CVE-2024-49917: drm/amd/display: Add NULL check for clk_mgr and clk_mgr-\u003efuncs in dcn30_init_hw (bsc#1231965).\n- CVE-2024-49918: drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer (bsc#1231967).\n- CVE-2024-49919: drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer (bsc#1231968).\n- CVE-2024-49920: drm/amd/display: Check null pointers before multiple uses (bsc#1232313).\n- CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).\n- CVE-2024-49922: drm/amd/display: Check null pointers before using them (bsc#1232374).\n- CVE-2024-49923: drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags (bsc#1232361).\n- CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)\n- CVE-2024-49933: blk_iocost: fix more out of bound shifts (bsc#1232368).\n- CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).\n- CVE-2024-49936: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424).\n- CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).\n- CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).\n- CVE-2024-49946: ppp: do not assume bh is held in ppp_channel_bridge_input() (bsc#1232164).\n- CVE-2024-49949: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (bsc#1232160).\n- CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).\n- CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).\n- CVE-2024-49953: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice (bsc#1232156).\n- CVE-2024-49954: static_call: Replace pointless WARN_ON() in static_call_module_notify() (bsc#1232155).\n- CVE-2024-49958: ocfs2: reserve space for inline xattr before attaching reflink tree (bsc#1232151).\n- CVE-2024-49959: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (bsc#1232149).\n- CVE-2024-49960: ext4: fix timer use-after-free on failed mount (bsc#1232395).\n- CVE-2024-49967: ext4: no need to continue when the number of entries is 1 (bsc#1232140).\n- CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).\n- CVE-2024-49969: drm/amd/display: Fix index out of bounds in DCN30 color transformation (bsc#1232519).\n- CVE-2024-49972: drm/amd/display: Deallocate DML memory if allocation fails (bsc#1232315).\n- CVE-2024-49973: r8169: add tally counter fields added with RTL8125 (bsc#1232105).\n- CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383).\n- CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).\n- CVE-2024-49986: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors (bsc#1232093).\n- CVE-2024-49987: bpftool: Fix undefined behavior in qsort(NULL, 0, ...) (bsc#1232258).\n- CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).\n- CVE-2024-49991: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer (bsc#1232282).\n- CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (bsc#1232316).\n- CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).\n- CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).\n- CVE-2024-50000: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (bsc#1232085).\n- CVE-2024-50001: net/mlx5: Fix error path in multi-packet WQE transmit (bsc#1232084).\n- CVE-2024-50002: static_call: Handle module init failure correctly in static_call_del_module() (bsc#1232083).\n- CVE-2024-50003: drm/amd/display: Fix system hang while resume with TBT monitor (bsc#1232385).\n- CVE-2024-50004: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 (bsc#1232396).\n- CVE-2024-50006: ext4: fix i_data_sem unlock order in ext4_ind_migrate() (bsc#1232442).\n- CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).\n- CVE-2024-50012: cpufreq: Avoid a bad reference count on CPU node (bsc#1232386).\n- CVE-2024-50014: ext4: fix access to uninitialised lock in fc replay path (bsc#1232446).\n- CVE-2024-50015: ext4: dax: fix overflowing extents beyond inode size when partially writing (bsc#1232079).\n- CVE-2024-50020: ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() (bsc#1231989).\n- CVE-2024-50021: ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() (bsc#1231957).\n- CVE-2024-50022: device-dax: correct pgoff align in dax_set_mapping() (bsc#1231956).\n- CVE-2024-50024: net: Fix an unsafe loop on the list (bsc#1231954).\n- CVE-2024-50027: thermal: core: Free tzp copy along with the thermal zone (bsc#1231951).\n- CVE-2024-50028: thermal: core: Reference count the zone in thermal_zone_get_by_id() (bsc#1231950).\n- CVE-2024-50033: slip: make slhc_remember() more robust against malicious packets (bsc#1231914).\n- CVE-2024-50035: ppp: fix ppp_async_encode() illegal access (bsc#1232392).\n- CVE-2024-50040: igb: Do not bring the device up after non-fatal error (bsc#1231908).\n- CVE-2024-50041: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash (bsc#1231907).\n- CVE-2024-50042: ice: Fix increasing MSI-X on VF (bsc#1231906).\n- CVE-2024-50045: netfilter: br_netfilter: fix panic with metadata_dst skb (bsc#1231903).\n- CVE-2024-50046: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (bsc#1231902).\n- CVE-2024-50047: smb: client: fix UAF in async decryption (bsc#1232418).\n- CVE-2024-50059: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (bsc#1232345).\n- CVE-2024-50060: io_uring: check if we need to reschedule during overflow flush (bsc#1232417).\n- CVE-2024-50063: bpf: Prevent tail call between progs attached to different hooks (bsc#1232435).\n- CVE-2024-50064: zram: free secondary algorithms names (bsc#1231901).\n- CVE-2024-50080: ublk: do not allow user copy for unprivileged device (bsc#1232502).\n- CVE-2024-50081: blk-mq: setup queue -\u003etag_set before initializing hctx (bsc#1232501).\n- CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).\n- CVE-2024-50084: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() (bsc#1232494).\n- CVE-2024-50087: btrfs: fix uninitialized pointer free on read_alloc_one_name() error (bsc#1232499).\n- CVE-2024-50088: btrfs: fix uninitialized pointer free in add_inode_ref() (bsc#1232498).\n- CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).\n- CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).\n- CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).\n- CVE-2024-50124: Bluetooth: ISO: Fix UAF on iso_sock_timeout (bsc#1232926).\n- CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).\n- CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).\n- CVE-2024-50128: net: wwan: fix global oob in wwan_rtnl_policy (bsc#1232905).\n- CVE-2024-50130: netfilter: bpf: must hold reference on net namespace (bsc#1232894).\n- CVE-2024-50138: bpf: Use raw_spinlock_t in ringbuf (bsc#1232935).\n- CVE-2024-50139: KVM: arm64: Fix shift-out-of-bounds bug (bsc#1233062).\n- CVE-2024-50145: octeon_ep: add SKB allocation failures handling in __octep_oq_process_rx() (bsc#1233044).\n- CVE-2024-50153: scsi: target: core: Fix null-ptr-deref in target_alloc_device() (bsc#1233061).\n- CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070).\n- CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050).\n- CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049).\n- CVE-2024-50169: vsock: Update rx_bytes on read_skb() (bsc#1233320).\n- CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057).\n- CVE-2024-50177: drm/amd/display: fix a UBSAN warning in DML2.1 (bsc#1233115).\n- CVE-2024-50182: secretmem: disable memfd_secret() if arch cannot set direct map (bsc#1233129).\n- CVE-2024-50184: virtio_pmem: Check device status before requesting flush (bsc#1233135).\n- CVE-2024-50186: net: explicitly clear the sk pointer, when pf-\u003ecreate fails (bsc#1233110).\n- CVE-2024-50192: irqchip/gic-v4: Do not allow a VMOVP on a dying VPE (bsc#1233106).\n- CVE-2024-50225: btrfs: fix error propagation of split bios (bsc#1233193).\n- CVE-2024-50228: mm: shmem: fix data-race in shmem_getattr() (bsc#1233204).\n- CVE-2024-50230: nilfs2: fix kernel bug due to missing clearing of checked flag (bsc#1233206).\n- CVE-2024-50245: fs/ntfs3: Fix possible deadlock in mi_read (bsc#1233203).\n- CVE-2024-50246: fs/ntfs3: Add rough attr alloc_size check (bsc#1233207).\n- CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233226).\n- CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).\n- CVE-2024-50257: netfilter: Fix use-after-free in get_info() (bsc#1233244).\n- CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (bsc#1233253).\n- CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-\u003etrans (bsc#1233453).\n- CVE-2024-50271: signal: restore the override_rlimit logic (bsc#1233460).\n- CVE-2024-50273: btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1233462).\n- CVE-2024-50274: idpf: avoid vport access in idpf_get_link_ksettings (bsc#1233463).\n- CVE-2024-50275: arm64/sve: Discard stale CPU state when handling SVE traps (bsc#1233464).\n- CVE-2024-50276: net: vertexcom: mse102x: Fix possible double free of TX skb (bsc#1233465).\n- CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).\n- CVE-2024-50289: media: av7110: fix a spectre vulnerability (bsc#1233478).\n- CVE-2024-50295: net: arc: fix the device for dma_map_single/dma_unmap_single (bsc#1233484).\n- CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).\n- CVE-2024-50298: net: enetc: allocate vf_state during PF probes (bsc#1233487).\n- CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233540).\n- CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).\n- CVE-2024-53048: ice: fix crash on probe for DPLL enabled E810 LOM (bsc#1233721).\n- CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).\n- CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).\n- CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).\n- CVE-2024-53058: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (bsc#1233552).\n- CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (bsc#1233570).\n- CVE-2024-53082: virtio_net: Add hash_key_length check (bsc#1233573).\n- CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).\n- CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (bsc#1234085).\n- CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (bsc#1234078).\n- CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1234223).\n\nThe following non-security bugs were fixed:\n\n- 9p: explicitly deny setlease attempts (git-fixes).\n- ACPI: CPPC: Add support for setting EPP register in FFH (stable-fixes).\n- ACPI: CPPC: Fix _CPC register setting issue (git-fixes).\n- ACPI: CPPC: Make rmw_lock a raw_spin_lock (git-fixes).\n- ACPI: EC: Do not release locks during operation region accesses (stable-fixes).\n- ACPI: PAD: fix crash in exit_round_robin() (stable-fixes).\n- ACPI: PRM: Clean up guid type in struct prm_handler_info (git-fixes).\n- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (git-fixes).\n- ACPI: battery: Fix possible crash when unregistering a battery hook (git-fixes).\n- ACPI: battery: Simplify battery hook locking (stable-fixes).\n- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (stable-fixes).\n- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add another DMI match for the TongFang GMxXGxx (stable-fixes).\n- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (stable-fixes).\n- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (stable-fixes).\n- ACPICA: iasl: handle empty connection_node (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: cleanup sdw_intel_scan_controller (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: fetch fwnode once in sdw_intel_scan_controller() (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: simplify sdw-master-count property read (stable-fixes).\n- ALSA: 6fire: Release resources at card release (git-fixes).\n- ALSA: Reorganize kerneldoc parameter names (stable-fixes).\n- ALSA: ac97: bus: Fix the mistake in the comment (git-fixes).\n- ALSA: asihpi: Fix potential OOB array access (stable-fixes).\n- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ALSA: core: add isascii() check to card ID generator (stable-fixes).\n- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (git-fixes).\n- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (git-fixes).\n- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (stable-fixes).\n- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (git-fixes).\n- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (git-fixes).\n- ALSA: hda/conexant: fix Z60MR100 startup pop issue (stable-fixes).\n- ALSA: hda/conexant: fix some typos (stable-fixes).\n- ALSA: hda/cs8409: Fix possible NULL dereference (git-fixes).\n- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs (bsc#1219803).\n- ALSA: hda/realtek - Fixed Clevo platform headset Mic issue (stable-fixes).\n- ALSA: hda/realtek - update set GPIO3 to default for Thinkpad with ALC1318 (git-fixes).\n- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (stable-fixes).\n- ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (stable-fixes).\n- ALSA: hda/realtek: Apply quirk for Medion E15433 (bsc#1233298).\n- ALSA: hda/realtek: Enable mic on Vaio VJFH52 (stable-fixes).\n- ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (stable-fixes).\n- ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform (bsc#1233298).\n- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (bsc#1233298).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 (stable-fixes).\n- ALSA: hda/realtek: Fix the push button function for the ALC257 (git-fixes).\n- ALSA: hda/realtek: Limit internal Mic boost on Dell platform (stable-fixes).\n- ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init (stable-fixes).\n- ALSA: hda/realtek: Set PCBeep to default value for ALC274 (stable-fixes).\n- ALSA: hda/realtek: Update ALC225 depop procedure (git-fixes).\n- ALSA: hda/realtek: Update ALC256 depop procedure (git-fixes).\n- ALSA: hda/realtek: Update default depop procedure (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8 (stable-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10 (stable-fixes).\n- ALSA: hda/realtek: tas2781: Fix ROG ALLY X audio (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects (stable-fixes).\n- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE (git-fixes).\n- ALSA: hda: Poll jack events for LS7A HD-Audio (stable-fixes).\n- ALSA: hda: Show the codec quirk info at probing (stable-fixes).\n- ALSA: hda: Sound support for HP Spectre x360 16 inch model 2024 (stable-fixes).\n- ALSA: hda: tas2781: Fix missing setup at runtime PM (bsc#1230132).\n- ALSA: hdsp: Break infinite MIDI input flush loop (stable-fixes).\n- ALSA: ice1712: Remove redundant code in stac9460_dac_vol_put (stable-fixes).\n- ALSA: line6: add hw monitor volume control to POD HD500X (stable-fixes).\n- ALSA: line6: update contact information (stable-fixes).\n- ALSA: mixer_oss: Remove some incorrect kfree_const() usages (git-fixes).\n- ALSA: pcm: Add sanity NULL check for the default mmap fault handler (stable-fixes).\n- ALSA: silence integer wrapping warning (stable-fixes).\n- ALSA: ump: Fix evaluation of MIDI 1.0 FB info (git-fixes).\n- ALSA: us122l: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ALSA: usb-audio: Add Pioneer DJ/AlphaTheta DJM-A9 Mixer (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET (stable-fixes).\n- ALSA: usb-audio: Add input value sanity checks for standard types (stable-fixes).\n- ALSA: usb-audio: Add logitech Audio profile quirk (stable-fixes).\n- ALSA: usb-audio: Add native DSD support for Luxman D-08u (stable-fixes).\n- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1232768).\n- ALSA: usb-audio: Add quirks for Dell WD19 dock (stable-fixes).\n- ALSA: usb-audio: Define macros for quirk table entries (stable-fixes).\n- ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (stable-fixes).\n- ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).\n- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (stable-fixes).\n- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (git-fixes).\n- ALSA: usb-audio: Make mic volume workarounds globally applicable (stable-fixes).\n- ALSA: usb-audio: Replace complex quirk lines with macros (stable-fixes).\n- ALSA: usb-audio: Use snprintf instead of sprintf in build_mixer_unit_ctl (stable-fixes).\n- ALSA: usb-audio: add mixer mapping for Corsair HS80 (stable-fixes).\n- ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ASoC: Intel: avs: da7219: Remove suspend_pre() and resume_post() (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (stable-fixes).\n- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (git-fixes).\n- ASoC: Intel: sst: Support LPE0F28 ACPI HID (stable-fixes).\n- ASoC: SOF: Add i2s bt dai configuration support for AMD platforms (bsc#1233305).\n- ASoC: SOF: Add support for configuring PDM interface from topology (bsc#1233305).\n- ASoC: SOF: Deprecate invalid enums in IPC3 (bsc#1233305).\n- ASoC: SOF: IPC4: get pipeline priority from topology (bsc#1233305).\n- ASoC: SOF: IPC4: synchronize fw_config_params with fw definitions (bsc#1233305).\n- ASoC: SOF: Refactor sof_i2s_tokens reading to update acpbt dai (bsc#1233305).\n- ASoC: SOF: Rename amd_bt sof_dai_type (bsc#1233305).\n- ASoC: SOF: Wire up buffer flags (bsc#1233305).\n- ASoC: SOF: add alignment for topology header file struct definition (bsc#1233305).\n- ASoC: SOF: align topology header file with sof topology header (bsc#1233305).\n- ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index (git-fixes).\n- ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai() (git-fixes).\n- ASoC: SOF: ipc4-control: Add support for ALSA enum control (bsc#1233305).\n- ASoC: SOF: ipc4-control: Add support for ALSA switch control (bsc#1233305).\n- ASoC: SOF: ipc4-mtrace: move debug slot related definitions to header.h (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add deep buffer size to debug prints (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add module ID print during module set up (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Helper to find an swidget by module/instance id (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (bsc#1233305).\n- ASoC: SOF: ipc4-topology: change chain_dma handling in dai_config (bsc#1233305).\n- ASoC: SOF: ipc4-topology: export sof_ipc4_copier_is_single_format (bsc#1233305).\n- ASoC: SOF: ipc4-topology: set config_length based on device_count (bsc#1233305).\n- ASoC: SOF: ipc4: Add data struct for module notification message from firmware (bsc#1233305).\n- ASoC: SOF: ipc4: Add new message type: SOF_IPC4_GLB_LOAD_LIBRARY_PREPARE (bsc#1233305).\n- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits (git-fixes).\n- ASoC: SOF: topology: Parse DAI type token for dspless mode (bsc#1233305).\n- ASoC: SOF: topology: dynamically allocate and store DAI widget-\u003eprivate (bsc#1233305).\n- ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA (stable-fixes).\n- ASoC: amd: yc: Add quirk for HP Dragonfly pro one (stable-fixes).\n- ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (git-fixes).\n- ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA (stable-fixes).\n- ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6 (stable-fixes).\n- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022 (stable-fixes).\n- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized (git-fixes).\n- ASoC: audio-graph-card2: Purge absent supplies for device tree nodes (stable-fixes).\n- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (git-fixes).\n- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (stable-fixes).\n- ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work() (stable-fixes).\n- ASoC: codecs: wsa883x: Handle reading version failure (stable-fixes).\n- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (git-fixes).\n- ASoC: dapm: fix bounds checker error in dapm_widget_list_create (git-fixes).\n- ASoC: fsl_micfil: Add sample rate constraint (stable-fixes).\n- ASoC: fsl_micfil: fix regmap_write_bits usage (git-fixes).\n- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (stable-fixes).\n- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m (git-fixes).\n- ASoC: max98388: Fix missing increment of variable slot_found (git-fixes).\n- ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec (git-fixes).\n- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (git-fixes).\n- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (stable-fixes).\n- ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c (git-fixes).\n- ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue (stable-fixes).\n- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (git-fixes).\n- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (stable-fixes).\n- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (stable-fixes).\n- ASoC: tas2781: Add new driver version for tas2563 \u0026 tas2781 qfn chip (stable-fixes).\n- ASoC: tas2781: Use of_property_read_reg() (stable-fixes).\n- Bluetooth: Call iso_exit() on module unload (git-fixes).\n- Bluetooth: ISO: Fix multiple init when debugfs is disabled (git-fixes).\n- Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (git-fixes).\n- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (git-fixes).\n- Bluetooth: Remove debugfs directory on module init failure (git-fixes).\n- Bluetooth: bnep: fix wild-memory-access in proto_unregister (git-fixes).\n- Bluetooth: btintel: Direct exception event to bluetooth stack (git-fixes).\n- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test (bsc#1230557)\n- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 (stable-fixes).\n- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (git-fixes).\n- Bluetooth: fix use-after-free in device_for_each_child() (git-fixes).\n- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (git-fixes).\n- Bluetooth: hci_core: Fix calling mgmt_device_connected (git-fixes).\n- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (git-fixes).\n- Documentation: kgdb: Correct parameter error (git-fixes).\n- HID: Ignore battery for all ELAN I2C-HID devices (stable-fixes).\n- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (git-fixes).\n- HID: core: zero-initialize the report buffer (git-fixes).\n- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk (stable-fixes).\n- HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (stable-fixes).\n- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (stable-fixes).\n- HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (stable-fixes).\n- HID: multitouch: Add support for B2402FVA track point (stable-fixes).\n- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (stable-fixes).\n- HID: multitouch: Add support for lenovo Y9000P Touchpad (stable-fixes).\n- HID: plantronics: Workaround for an unexcepted opposite volume key (stable-fixes).\n- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (git-fixes).\n- HID: wacom: fix when get product name maybe null pointer (git-fixes).\n- Input: adp5589-keys - fix NULL pointer dereference (git-fixes).\n- Input: adp5589-keys - fix adp5589_gpio_get_value() (git-fixes).\n- Input: edt-ft5x06 - fix regmap leak when probe fails (git-fixes).\n- Input: hideep - add missing dependency on REGMAP_I2C (git-fixes).\n- Input: hycon-hy46xx - add missing dependency on REGMAP_I2C (git-fixes).\n- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (stable-fixes).\n- Input: xpad - add GameSir T4 Kaleid Controller support (git-fixes).\n- Input: xpad - add GameSir VID for Xbox One controllers (git-fixes).\n- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller (git-fixes).\n- Input: xpad - add support for MSI Claw A1M (git-fixes).\n- Input: xpad - add support for Machenike G5 Pro Controller (git-fixes).\n- Input: xpad - fix support for some third-party controllers (git-fixes).\n- Input: xpad - sort xpad_device by vendor and product ID (git-fixes).\n- Input: xpad - spelling fixes for \"Xbox\" (git-fixes).\n- KVM: Fix coalesced_mmio_has_room() to avoid premature userspace exit (git-fixes).\n- KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending doorbells (bsc#1215199).\n- KVM: PPC: Book3S HV: Stop using vc-\u003edpdes for nested KVM guests (bsc#1215199).\n- KVM: PPC: Book3S HV: remove unused varible (bsc#1194869).\n- KVM: SEV-ES: Fix svm_get_msr()/svm_set_msr() for KVM_SEV_ES_INIT guests (bsc#1232207).\n- KVM: SEV-ES: Prevent MSR access post VMSA encryption (bsc#1232207).\n- KVM: SVM: Disallow guest from changing userspace's MSR_AMD64_DE_CFG value (git-fixes).\n- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock (git-fixes).\n- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled (git-fixes).\n- KVM: VMX: Set PFERR_GUEST_{FINAL,PAGE}_MASK if and only if the GVA is valid (git-fixes).\n- KVM: Write the per-page \"segment\" when clearing (part of) a guest page (git-fixes).\n- KVM: s390: Change virtual to physical address access in diag 0x258 handler (git-fixes bsc#1232626).\n- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (git-fixes bsc#1231276).\n- KVM: s390: gaccess: Check if guest address is in memslot (git-fixes bsc#1232623).\n- KVM: x86/mmu: Skip emulation on page fault iff 1+ SPs were unprotected (git-fixes).\n- KVM: x86/mmu: Trigger unprotect logic only on write-protection page faults (git-fixes).\n- KVM: x86: Dedup fastpath MSR post-handling logic (git-fixes).\n- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits (git-fixes).\n- KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (git-fixes).\n- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode() (git-fixes).\n- KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (git-fixes).\n- KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- NFS: Avoid unnecessary rescanning of the per-server delegation list (git-fixes).\n- NFS: remove revoked delegation from server's delegation list (git-fixes).\n- NFSD: Fix NFSv4's PUTPUBFH operation (git-fixes).\n- NFSD: Mark filecache \"down\" if init fails (git-fixes).\n- NFSv3: only use NFS timeout for MOUNT when protocols are compatible (bsc#1231016).\n- NFSv4: Fix clearing of layout segments in layoutreturn (git-fixes).\n- PCI: Add ACS quirk for Qualcomm SA8775P (stable-fixes).\n- PCI: Add T_PVPERL macro (git-fixes).\n- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip (stable-fixes).\n- PCI: Fix pci_enable_acs() support for the ACS quirks (bsc#1229019).\n- PCI: Fix reset_method_store() memory leak (git-fixes).\n- PCI: Mark Creative Labs EMU20k2 INTx masking as broken (stable-fixes).\n- PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf() (git-fixes).\n- PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds (git-fixes).\n- PCI: keystone: Add link up check to ks_pcie_other_map_bus() (git-fixes).\n- PCI: keystone: Set mode as Root Complex for \"ti,keystone-pcie\" compatible (git-fixes).\n- PCI: rockchip-ep: Fix address translation unit programming (git-fixes).\n- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix (jsc#PED-10559).\n- RAS/AMD/ATL: Expand helpers for adding and removing base and hole (jsc#PED-10559).\n- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization (jsc#PED-10559).\n- RAS/AMD/ATL: Read DRAM hole base early (jsc#PED-10559).\n- RAS/AMD/ATL: Validate address map when information is gathered (jsc#PED-10559).\n- RDMA/bnxt_re: Add a check for memory allocation (git-fixes)\n- RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (git-fixes)\n- RDMA/bnxt_re: Change the sequence of updating the CQ toggle value (git-fixes)\n- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (git-fixes)\n- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (git-fixes)\n- RDMA/bnxt_re: Fix a possible memory leak (git-fixes)\n- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (git-fixes)\n- RDMA/bnxt_re: Fix incorrect dereference of srq in async event (git-fixes)\n- RDMA/bnxt_re: Fix out of bound check (git-fixes)\n- RDMA/bnxt_re: Fix the GID table length (git-fixes)\n- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters (git-fixes)\n- RDMA/bnxt_re: Fix the usage of control path spin locks (git-fixes)\n- RDMA/bnxt_re: Return more meaningful error (git-fixes)\n- RDMA/bnxt_re: synchronize the qp-handle table array (git-fixes)\n- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)\n- RDMA/cxgb4: Dump vendor specific QP details (git-fixes)\n- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (git-fixes)\n- RDMA/hns: Add mutex_destroy() (git-fixes)\n- RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset (git-fixes)\n- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (git-fixes)\n- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci (git-fixes)\n- RDMA/hns: Fix cpu stuck caused by printings during reset (git-fixes)\n- RDMA/hns: Fix different dgids mapping to the same dip_idx (git-fixes)\n- RDMA/hns: Fix flush cqe error when racing with destroy qp (git-fixes)\n- RDMA/hns: Fix out-of-order issue of requester when setting FENCE (git-fixes)\n- RDMA/hns: Use dev_* printings in hem code instead of ibdev_* (git-fixes)\n- RDMA/hns: Use macro instead of magic number (git-fixes)\n- RDMA/irdma: Fix misspelling of \"accept*\" (git-fixes)\n- RDMA/mad: Improve handling of timed out WRs of mad agent (git-fixes)\n- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (git-fixes).\n- RDMA/mana_ib: use the correct page table index based on hardware page size (git-fixes).\n- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults (git-fixes)\n- RDMA/mlx5: Move events notifier registration to be after device registration (git-fixes)\n- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (git-fixes)\n- RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled (git-fixes).\n- RDMA/rtrs-srv: Avoid null pointer deref during path establishment (git-fixes)\n- RDMA/rxe: Fix the qp flush warnings in req (git-fixes)\n- RDMA/rxe: Set queue pair cur_qp_state when being queried (git-fixes)\n- RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES (git-fixes)\n- RDMA/srpt: Make slab cache names unique (git-fixes)\n- SUNRPC: Fix integer overflow in decode_rc_list() (git-fixes).\n- SUNRPC: Fixup gss_status tracepoint error output (git-fixes).\n- SUNRPC: Remove BUG_ON call sites (git-fixes).\n- SUNRPC: clnt.c: Remove misleading comment (git-fixes).\n- USB: appledisplay: close race between probe and completion handler (git-fixes).\n- USB: chaoskey: Fix possible deadlock chaoskey_list_lock (git-fixes).\n- USB: chaoskey: fail open after removal (git-fixes).\n- USB: gadget: dummy-hcd: Fix \"task hung\" problem (git-fixes).\n- USB: misc: cypress_cy7c63: check for short transfer (git-fixes).\n- USB: misc: yurex: fix race between read and write (git-fixes).\n- USB: serial: ftdi_sio: Fix atomicity violation in get_serial_info() (git-fixes).\n- USB: serial: io_edgeport: fix use after free in debug printk (git-fixes).\n- USB: serial: option: add Fibocom FG132 0x0112 composition (stable-fixes).\n- USB: serial: option: add Quectel RG650V (stable-fixes).\n- USB: serial: option: add Telit FN920C04 MBIM compositions (stable-fixes).\n- USB: serial: option: add support for Quectel EG916Q-GL (stable-fixes).\n- USB: serial: qcserial: add support for Sierra Wireless EM86xx (stable-fixes).\n- Use pahole -j1 option for reproducible builds (bsc#1230414 bsc#1229450).\n- accel/qaic: Fix the for loop used to walk SG table (git-fixes).\n- accel: Use XArray instead of IDR for minors (jsc#PED-11580).\n- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (git-fixes).\n- ad7780: fix division by zero in ad7780_write_raw() (git-fixes).\n- aes-gcm-p10: Use the correct bit to test for P10 (bsc#1232704).\n- amd-pstate: Set min_perf to nominal_perf for active mode performance gov (git-fixes).\n- apparmor: fix 'Do simple duplicate message elimination' (git-fixes).\n- apparmor: test: Fix memory leak for aa_unpack_strdup() (git-fixes).\n- apparmor: use kvfree_sensitive to free data-\u003edata (git-fixes).\n- arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (git-fixes)\n- arm64: cputype: Add Neoverse-N3 definitions (git-fixes)\n- arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (git-fixes)\n- arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay (git-fixes)\n- arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay (git-fixes)\n- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (git-fixes)\n- arm64: dts: imx8qxp: Add VPU subsystem file (git-fixes)\n- arm64: dts: imx93: add nvmem property for eqos (git-fixes)\n- arm64: dts: imx93: add nvmem property for fec1 (git-fixes)\n- arm64: dts: imx93: add ocotp node (git-fixes)\n- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus (git-fixes)\n- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes (git-fixes)\n- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (git-fixes)\n- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (git-fixes)\n- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo (git-fixes)\n- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes (git-fixes)\n- arm64: dts: rockchip: Fix rt5651 compatible value on (git-fixes)\n- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610 (git-fixes)\n- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node (git-fixes)\n- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma (git-fixes)\n- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (git-fixes)\n- arm64: dts: rockchip: Remove undocumented supports-emmc property (git-fixes)\n- arm64: dts: rockchip: fix i2c2 pinctrl-names property on (git-fixes)\n- arm64: dts: rockchip: remove num-slots property from (git-fixes)\n- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone (git-fixes)\n- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (git-fixes).\n- arm64: errata: Expand speculative SSBS workaround once more (git-fixes)\n- arm64: esr: Define ESR_ELx_EC_* constants as UL (git-fixes)\n- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (git-fixes)\n- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS (git-fixes).\n- arm64: probes: Fix simulate_ldr*_literal() (git-fixes)\n- arm64: probes: Fix uprobes for big-endian kernels (git-fixes)\n- arm64: probes: Remove broken LDR (literal) uprobe support (git-fixes)\n- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (git-fixes)\n- arm64: smccc: replace custom COUNT_ARGS() \u0026 CONCATENATE() (git-fixes)\n- arm64: tegra: Move AGX Orin nodes to correct location (git-fixes)\n- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (git-fixes)\n- ata: libata: Set DID_TIME_OUT for commands that actually timed out (git-fixes).\n- ata: libata: avoid superfluous disk spin down + spin up during hibernation (git-fixes).\n- audit: do not WARN_ON_ONCE(!current-\u003emm) in audit_exe_compare() (git-fixes).\n- audit: do not take task_lock() in audit_exe_compare() code path (git-fixes).\n- block: print symbolic error name instead of error code (bsc#1231872).\n- block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (bsc#1229677).\n- bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response (git-fixes).\n- bnxt_en: Fix error recovery for 5760X (P7) chips (git-fixes).\n- bnxt_en: Fix the PCI-AER routines (git-fixes).\n- bnxt_en: Restore PTP tx_avail count in case of skb_pad() error (git-fixes).\n- bnxt_en: refactor reset close code (git-fixes).\n- bpf, arm64: Fix address emission with tag-based KASAN enabled (git-fixes)\n- bpf, arm64: Remove garbage frame for struct_ops trampoline (git-fixes)\n- bpf, lsm: Add disabled BPF LSM hook list (git-fixes).\n- bpf, net: Fix a potential race in do_sock_getsockopt() (git-fixes).\n- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock (git-fixes).\n- bpf, verifier: Correct tail_call_reachable for bpf prog (git-fixes).\n- bpf, vsock: Drop static vsock_bpf_prot initialization (git-fixes).\n- bpf, x64: Remove tail call detection (git-fixes).\n- bpf,perf: Fix perf_event_detach_bpf_prog error handling (git-fixes).\n- bpf: Fail verification for sign-extension of packet data/data_end/data_meta (git-fixes).\n- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (git-fixes).\n- bpf: Fix error message on kfunc arg type mismatch (git-fixes).\n- bpf: Fix helper writes to read-only maps (git-fixes).\n- bpf: Fix tailcall cases in test_bpf (git-fixes).\n- bpf: Fix truncation bug in coerce_reg_to_size_sx() (git-fixes).\n- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types (git-fixes).\n- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers (git-fixes).\n- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (git-fixes).\n- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos (git-fixes).\n- btf, scripts: rust: drop is_rust_module.sh (bsc#1230414 bsc#1229450).\n- btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() (bsc#1233193)\n- btrfs: send: fix invalid clone operation for file that got its size decreased (git-fixes).\n- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (git-fixes).\n- can: c_can: fix {rx,tx}_errors statistics (git-fixes).\n- can: dev: can_set_termination(): allow sleeping GPIOs (git-fixes).\n- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: hi311x: hi3110_can_ist(): fix potential use-after-free (git-fixes).\n- can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics (git-fixes).\n- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: j1939: j1939_session_new(): fix skb reference counting (git-fixes).\n- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation (git-fixes).\n- can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6 (git-fixes).\n- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes (git-fixes).\n- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode (stable-fixes).\n- can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (git-fixes).\n- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (git-fixes).\n- ceph: fix cap ref leak via netfs init_request (bsc#1231384).\n- cgroup/bpf: only cgroup v2 can be attached by bpf programs (bsc#1234108).\n- clk: bcm: bcm53573: fix OF node leak in init (stable-fixes).\n- clk: clk-apple-nco: Add NULL check in applnco_probe (git-fixes).\n- clk: clk-axi-clkgen: make sure to enable the AXI bus clock (git-fixes).\n- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (stable-fixes).\n- clk: imx: clk-scu: fix clk enable state save and restore (git-fixes).\n- clk: imx: fracn-gppll: correct PLL initialization flow (git-fixes).\n- clk: imx: fracn-gppll: fix pll power up (git-fixes).\n- clk: imx: lpcg-scu: SW workaround for errata (e10858) (git-fixes).\n- clk: qcom: clk-alpha-pll: drop lucid-evo pll enabled warning (git-fixes).\n- clk: qcom: clk-alpha-pll: fix lucid 5lpe pll enabled check (git-fixes).\n- clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (git-fixes).\n- clk: renesas: rzg2l: Fix FOUTPOSTDIV clk (git-fixes).\n- clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset (git-fixes).\n- comedi: Flush partial mappings in error case (git-fixes).\n- comedi: ni_routing: tools: Check when the file could not be opened (stable-fixes).\n- config s390x: build ultravisor userspace access into the kernel (bsc#1232090)\n- config.sh: Remove Arm build project, we do not build armv7 configs\n- config: Disable LAM on x86 (bsc#1217845)\n- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems (git-fixes).\n- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (git-fixes).\n- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (git-fixes).\n- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() (git-fixes).\n- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() (git-fixes).\n- cpufreq: loongson2: Unregister platform_driver on failure (git-fixes).\n- cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (git-fixes).\n- crypto: aes-gcm-p10 - Use the correct bit to test for P10 (bsc#1232704).\n- crypto: api - Fix liveliness check in crypto_alg_tested (stable-fixes).\n- crypto: bcm - add error check in the ahash_hmac_init function (git-fixes).\n- crypto: caam - Fix the pointer passed to caam_qi_shutdown() (git-fixes).\n- crypto: caam - add error check to caam_rsa_set_priv_key_form (git-fixes).\n- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (git-fixes).\n- crypto: cavium - Fix the if condition to exit loop after timeout (git-fixes).\n- crypto: hisilicon/qm - flush all work before driver removed (bsc#1232075)\n- crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() (git-fixes).\n- crypto: octeontx - Fix authenc setkey (stable-fixes).\n- crypto: octeontx* - Select CRYPTO_AUTHENC (git-fixes).\n- crypto: octeontx2 - Fix authenc setkey (stable-fixes).\n- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (git-fixes).\n- crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTO_SIMD and re-enable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Register modules as SIMD (bsc#1230501 ltc#208632).\n- crypto: qat - remove check after debugfs_create_dir() (git-fixes).\n- crypto: qat - remove faulty arbiter config reset (git-fixes).\n- crypto: qat/qat_4xxx - fix off by one in uof_get_name() (git-fixes).\n- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (git-fixes).\n- cxgb4: Properly lock TX queue for the selftest (git-fixes).\n- cxgb4: add forgotten u64 ivlan cast before shift (git-fixes).\n- cxgb4: unnecessary check for 0 in the free_sge_txq_uld() function (git-fixes).\n- cxl: downgrade a warning message to debug level in cxl_probe_component_regs() (bsc#1229165).\n- dcache: keep dentry_hashtable or d_hash_shift even when not used (git-fixes).\n- debugfs: fix automount d_fsdata usage (git-fixes).\n- devlink: Fix command annotation documentation (git-fixes).\n- dma-fence: Fix reference leak on fence merge failure path (git-fixes).\n- dma-fence: Use kernel's sort for merging fences (git-fixes).\n- dmaengine: sh: rz-dmac: handle configs where one address is zero (git-fixes).\n- dmaengine: ti: k3-udma: Set EOP for all TRs in cyclic BCDMA transfer (git-fixes).\n- doc: rcu: update printed dynticks counter bits (git-fixes).\n- driver core: bus: Fix double free in driver API bus_register() (stable-fixes).\n- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (stable-fixes).\n- drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() (git-fixes).\n- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring (git-fixes).\n- drm/amd/display: Add HDMI DSC native YCbCr422 support (stable-fixes).\n- drm/amd/display: Add disable timeout option (bsc#1231435)\n- drm/amd/display: Adjust VSDB parser for replay feature (stable-fixes).\n- drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944)\n- drm/amd/display: Check null pointer before dereferencing se (stable-fixes).\n- drm/amd/display: Clean up dsc blocks in accelerated mode (stable-fixes).\n- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (stable-fixes).\n- drm/amd/display: Fix brightness level not retained over reboot (git-fixes).\n- drm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe (git-fixes).\n- drm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in hwss_setup_dpp (git-fixes).\n- drm/amd/display: Remove a redundant check in authenticated_dp (stable-fixes).\n- drm/amd/display: Revert \"Check HDCP returned status\" (stable-fixes).\n- drm/amd/display: Round calculated vtotal (stable-fixes).\n- drm/amd/display: Skip to enable dsc if it has been off (stable-fixes).\n- drm/amd/display: Validate backlight caps are sane (stable-fixes).\n- drm/amd/pm: Vangogh: Fix kernel memory out of bounds write (git-fixes).\n- drm/amd: Add some missing straps from NBIO 7.11.0 (git-fixes).\n- drm/amd: Fix initialization mistake for NBIO 7.7.0 (stable-fixes).\n- drm/amd: Guard against bad data for ATIF ACPI method (git-fixes).\n- drm/amdgpu/swsmu: Only force workload setup on init (git-fixes).\n- drm/amdgpu/vcn: enable AV1 on both instances (stable-fixes).\n- drm/amdgpu: Adjust debugfs eviction and IB access permissions (stable-fixes).\n- drm/amdgpu: Adjust debugfs register access permissions (stable-fixes).\n- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (git-fixes).\n- drm/amdgpu: Fix JPEG v4.0.3 register write (git-fixes).\n- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (stable-fixes).\n- drm/amdgpu: fix check in gmc_v9_0_get_vm_pte() (git-fixes).\n- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (git-fixes).\n- drm/amdkfd: Accounting pdd vram_usage for svm (stable-fixes).\n- drm/amdkfd: Fix wrong usage of INIT_WORK() (git-fixes).\n- drm/bridge: anx7625: Drop EDID cache on bridge power off (git-fixes).\n- drm/bridge: it6505: Drop EDID cache on bridge power off (git-fixes).\n- drm/bridge: tc358767: Fix link properties discovery (git-fixes).\n- drm/bridge: tc358768: Fix DSI command tx (git-fixes).\n- drm/etnaviv: Request pages from DMA32 zone on addressing_limited (git-fixes).\n- drm/etnaviv: hold GPU lock across perfmon sampling (git-fixes).\n- drm/i915/gem: fix bitwise and logical AND mixup (git-fixes).\n- drm/i915/hdcp: fix connector refcounting (git-fixes).\n- drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/mediatek: Fix child node refcount handling in early exit (git-fixes).\n- drm/mediatek: Fix get efuse issue for MT8188 DPTX (git-fixes).\n- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (git-fixes).\n- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (git-fixes).\n- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds() (git-fixes).\n- drm/msm/dpu: do not always program merge_3d block (git-fixes).\n- drm/msm/dpu: drop LM_3 / LM_4 on MSM8998 (git-fixes).\n- drm/msm/dpu: drop LM_3 / LM_4 on SDM845 (git-fixes).\n- drm/msm/dpu: make sure phys resources are properly initialized (git-fixes).\n- drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check (git-fixes).\n- drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block (git-fixes).\n- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (git-fixes).\n- drm/msm/dsi: improve/fix dsc pclk calculation (git-fixes).\n- drm/msm/gpu: Check the status of registration to PM QoS (git-fixes).\n- drm/msm: Allocate memory for disp snapshot with kvzalloc() (git-fixes).\n- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (git-fixes).\n- drm/msm: Fix some typos in comment (git-fixes).\n- drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() (git-fixes).\n- drm/omap: Fix locking in omap_gem_new_dmabuf() (git-fixes).\n- drm/omap: Fix possible NULL dereference (git-fixes).\n- drm/panfrost: Add missing OPP table refcnt decremental (git-fixes).\n- drm/panfrost: Remove unused id_mask from struct panfrost_model (git-fixes).\n- drm/radeon: Fix encoder-\u003epossible_clones (git-fixes).\n- drm/rockchip: vop: Fix a dereferenced before check warning (git-fixes).\n- drm/sched: Add locking to drm_sched_entity_modify_sched (git-fixes).\n- drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job (git-fixes).\n- drm/sti: Add __iomem for mixer_dbg_mxn's parameter (git-fixes).\n- drm/sti: avoid potential dereference of error pointers (git-fixes).\n- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (git-fixes).\n- drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (git-fixes).\n- drm/v3d: Address race-condition in MMU flush (git-fixes).\n- drm/v3d: Enable Performance Counters before clearing them (git-fixes).\n- drm/v3d: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (stable-fixes).\n- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush (git-fixes).\n- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load (git-fixes).\n- drm/vc4: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vc4: hdmi: Avoid hang with debug registers when suspended (git-fixes).\n- drm/vc4: hvs: Correct logic on stopping an HVS channel (git-fixes).\n- drm/vc4: hvs: Do not write gamma luts on 2711 (git-fixes).\n- drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer (git-fixes).\n- drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function (git-fixes).\n- drm/vkms: Drop unnecessary call to drm_crtc_cleanup() (git-fixes).\n- drm/vmwgfx: Handle surface check failure correctly (git-fixes).\n- drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (stable-fixes).\n- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS (git-fixes).\n- drm: Expand max DRM device number to full MINORBITS (jsc#PED-11580).\n- drm: Use XArray instead of IDR for minors (jsc#PED-11580).\n- drm: use ATOMIC64_INIT() for atomic64_t (git-fixes).\n- drm: xlnx: zynqmp_dpsub: fix hotplug detection (git-fixes).\n- drm: zynqmp_kms: Unplug DRM device before removal (git-fixes).\n- e1000e: Fix S0ix residency on corporate systems (git-fixes).\n- e1000e: Remove Meteor Lake SMBUS workarounds (git-fixes).\n- e1000e: change I219 (19) devices to ADP (git-fixes).\n- e1000e: fix force smbus during suspend flow (git-fixes).\n- e1000e: move force SMBUS near the end of enable_ulp function (git-fixes).\n- efi/libstub: Free correct pointer on failure (git-fixes).\n- efi/libstub: fix efi_parse_options() ignoring the default command line (git-fixes).\n- efi/libstub: zboot.lds: Discard .discard sections (stable-fixes).\n- efi/memattr: Ignore table if the size is clearly bogus (bsc#1231465).\n- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (stable-fixes).\n- eth: bnxt: fix counting packets discarded due to OOM and netpoll (git-fixes).\n- ext4: do not track ranges in fast_commit if inode has inlined data (bsc#1231635).\n- ext4: fix fast commit inode enqueueing during a full journal commit (bsc#1231636).\n- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible() (bsc#1231637).\n- ext4: fix possible tid_t sequence overflows (bsc#1231634).\n- ext4: fix slab-use-after-free in ext4_split_extent_at() (bsc#1232201)\n- ext4: fix unttached inode after power cut with orphan file feature enabled (bsc#1234009).\n- ext4: mark fc as ineligible using an handle in ext4_xattr_set() (bsc#1231640).\n- ext4: use handle to mark fc as ineligible in __track_dentry_update() (bsc#1231639).\n- f2fs: get out of a repeat loop when getting a locked data page (bsc#1234011).\n- fat: fix uninitialized variable (git-fixes).\n- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (stable-fixes).\n- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (git-fixes).\n- fbdev: sisfb: Fix strbuf array overflow (stable-fixes).\n- fgraph: Change the name of cpuhp state to \"fgraph:online\" (git-fixes).\n- fgraph: Fix missing unlock in register_ftrace_graph() (git-fixes).\n- fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks (git-fixes).\n- filemap: remove use of wait bookmarks (bsc#1224088).\n- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (git-fixes).\n- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (git-fixes).\n- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (git-fixes).\n- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (git-fixes).\n- firmware: google: Unregister driver_info on failure (git-fixes).\n- firmware_loader: Fix possible resource leak in fw_log_firmware_info() (git-fixes).\n- fs/9p: drop inodes immediately on non-.L too (git-fixes).\n- fs/9p: fix the cache always being enabled on files with qid flags (git-fixes).\n- fs/ntfs3: Add more attributes checks in mi_enum_attr() (bsc#1233207)\n- fs/ntfs3: Fixed overflow check in mi_enum_attr() (bsc#1233207)\n- fs/ntfs3: Sequential field availability check in mi_enum_attr() (bsc#1233207)\n- fs: Fix uninitialized value issue in from_kuid and from_kgid (git-fixes).\n- genirq/msi: Fix off-by-one error in msi_domain_alloc() (git-fixes).\n- goldfish: Fix unused const variable 'goldfish_pipe_acpi_match' (git-fixes).\n- gpio: aspeed: Add the flush write to ensure the write complete (git-fixes).\n- gpio: aspeed: Use devm_clk api to manage clock source (git-fixes).\n- gpio: davinci: fix lazy disable (git-fixes).\n- gpio: exar: set value when external pull-up or pull-down is present (git-fixes).\n- gpio: zevio: Add missed label initialisation (git-fixes).\n- gve: Fix XDP TX completion handling when counters overflow (git-fixes).\n- gve: Fix an edge case for TSO skb validity check (git-fixes).\n- gve: ignore nonrelevant GSO type bits when processing TSO headers (git-fixes).\n- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (git-fixes).\n- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (git-fixes).\n- hv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer (git-fixes).\n- hwmon: (adm9240) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (adt7470) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (max16065) Fix alarm attributes (git-fixes).\n- hwmon: (max16065) Remove use of i2c_match_id() (stable-fixes).\n- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list (stable-fixes).\n- hwmon: (nct6775-core) Fix overflows seen when writing limit attributes (git-fixes).\n- hwmon: (tmp513) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (tps23861) Fix reporting of negative temperatures (git-fixes).\n- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature (git-fixes).\n- i2c: core: Setup i2c_adapter runtime-pm before calling device_add() (git-fixes).\n- i2c: core: fix lockdep warning for sparsely nested adapter chain (git-fixes).\n- i2c: cpm: Remove linux,i2c-index conversion from be32 (git-fixes).\n- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set (git-fixes).\n- i2c: exynos5: Calculate t_scl_l, t_scl_h according to i2c spec (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell Precision 3540 (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell XPS 15 7590 (git-fixes).\n- i2c: i801: Use a different adapter-name for IDF adapters (stable-fixes).\n- i2c: i801: add helper i801_restore_regs (git-fixes).\n- i2c: ismt: kill transaction in hardware on timeout (git-fixes).\n- i2c: ocores: Move system PM hooks to the NOIRQ phase (git-fixes).\n- i2c: ocores: Remove #ifdef guards for PM related functions (git-fixes).\n- i2c: omap: switch to NOIRQ_SYSTEM_SLEEP_PM_OPS() and RUNTIME_PM_OPS() (git-fixes).\n- i2c: omap: wakeup the controller during suspend() callback (git-fixes).\n- i2c: rcar: properly format a debug output (git-fixes).\n- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume (git-fixes).\n- i2c: stm32f7: perform most of irq job in threaded handler (git-fixes).\n- i2c: synquacer: Deal with optional PCLK correctly (git-fixes).\n- i2c: synquacer: Remove a clk reference from struct synquacer_i2c (stable-fixes).\n- i2c: xiic: Try re-initialization on bus busy timeout (git-fixes).\n- i2c: xiic: improve error message when transfer fails to start (stable-fixes).\n- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (git-fixes).\n- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition (stable-fixes).\n- i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- i40e: Fix XDP program unloading while removing the driver (git-fixes).\n- i40e: Report MFS in decimal base instead of hex (git-fixes).\n- i40e: fix race condition by adding filter's intermediate sync state (git-fixes).\n- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (git-fixes).\n- iavf: Fix TC config comparison with existing adapter TC config (git-fixes).\n- ice: Fix VSI list rule with ICE_SW_LKUP_LAST type (git-fixes).\n- ice: Fix checking for unsupported keys on non-tunnel device (git-fixes).\n- ice: Fix lldp packets dropping after changing the number of channels (git-fixes).\n- ice: Fix netif_is_ice() in Safe Mode (git-fixes).\n- ice: Fix package download algorithm (git-fixes).\n- ice: Fix recipe read procedure (git-fixes).\n- ice: Fix reset handler (git-fixes).\n- ice: Flush FDB entries before reset (git-fixes).\n- ice: Interpret .set_channels() input differently (git-fixes).\n- ice: Rebuild TC queues on VSI queue reconfiguration (git-fixes).\n- ice: Reject pin requests with unsupported flags (git-fixes).\n- ice: add flag to distinguish reset from .ndo_bpf in XDP rings config (git-fixes).\n- ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (git-fixes).\n- ice: avoid IRQ collision to fix init failure on ACPI S3 resume (git-fixes).\n- ice: clear port vlan config during reset (git-fixes).\n- ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins (git-fixes).\n- ice: do not bring the VSI up, if it was down before the XDP setup (git-fixes).\n- ice: do not busy wait for Rx queue disable in ice_qp_dis() (git-fixes).\n- ice: fix 200G PHY types to link speed mapping (git-fixes).\n- ice: fix 200G link speed message log (git-fixes).\n- ice: fix ICE_LAST_OFFSET formula (git-fixes).\n- ice: fix VLAN replay after reset (git-fixes).\n- ice: fix VSI lists confusion when adding VLANs (git-fixes).\n- ice: fix accounting for filters shared by multiple VSIs (git-fixes).\n- ice: fix accounting if a VLAN already exists (git-fixes).\n- ice: fix iteration of TLVs in Preserved Fields Area (git-fixes).\n- ice: fix page reuse when PAGE_SIZE is over 8k (git-fixes).\n- ice: fix reads from NVM Shadow RAM on E830 and E825-C devices (git-fixes).\n- ice: fix truesize operations for PAGE_SIZE \u003e= 8192 (git-fixes).\n- ice: implement AQ download pkg retry (git-fixes).\n- ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors() (git-fixes).\n- ice: remove af_xdp_zc_qps bitmap (git-fixes).\n- ice: replace synchronize_rcu with synchronize_net (git-fixes).\n- ice: respect netif readiness in AF_XDP ZC related ndo's (git-fixes).\n- ice: set correct dst VSI in only LAN filters (git-fixes).\n- ice: tc: allow zero flags in parsing tc flower (git-fixes).\n- ice: tc: check src_vsi in case of traffic from VF (git-fixes).\n- ice: use proper macro for testing bit (git-fixes).\n- idpf: Interpret .set_channels() input differently (git-fixes).\n- idpf: avoid bloating \u0026idpf_q_vector with big %NR_CPUS (git-fixes).\n- idpf: do not enable NAPI and interrupts prior to allocating Rx buffers (git-fixes).\n- idpf: do not skip over ethtool tcp-data-split setting (git-fixes).\n- idpf: fix UAFs when destroying the queues (git-fixes).\n- idpf: fix memleak in vport interrupt configuration (git-fixes).\n- idpf: fix memory leaks and crashes while performing a soft reset (git-fixes).\n- ieee802154: Fix build error (git-fixes).\n- igb: Always call igb_xdp_ring_update_tail() under Tx lock (git-fixes).\n- igb: Disable threaded IRQ for igb_msix_other (git-fixes).\n- igb: Fix not clearing TimeSync interrupts for 82580 (git-fixes).\n- igc: Fix double reset adapter triggered from a single taprio cmd (git-fixes).\n- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (git-fixes).\n- igc: Fix qbv tx latency by setting gtxoffset (git-fixes).\n- igc: Fix qbv_config_change_errors logics (git-fixes).\n- igc: Fix reset adapter logics when tx mode change (git-fixes).\n- igc: Unlock on error in igc_io_resume() (git-fixes).\n- iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (git-fixes).\n- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling (git-fixes).\n- iio: accel: kx022a: Fix raw read format (git-fixes).\n- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (git-fixes).\n- iio: adc: ad7606: Fix typo in the driver name (git-fixes).\n- iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer (git-fixes).\n- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (git-fixes).\n- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts: Fix uninitialized symbol 'ret' (git-fixes).\n- iio: gts: fix infinite loop for gain_to_scaletables() (git-fixes).\n- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (git-fixes).\n- iio: light: al3010: Fix an error handling path in al3010_probe() (git-fixes).\n- iio: light: opt3001: add missing full-scale range value (git-fixes).\n- iio: light: veml6030: fix ALS sensor resolution (git-fixes).\n- iio: light: veml6030: fix IIO device retrieval from embedded device (git-fixes).\n- iio: light: veml6030: fix microlux value calculation (git-fixes).\n- iio: magnetometer: ak8975: Convert enum-\u003epointer for data in the match tables (stable-fixes).\n- iio: magnetometer: ak8975: Fix 'Unexpected device' error (git-fixes).\n- iio: magnetometer: ak8975: drop incorrect AK09116 compatible (git-fixes).\n- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- ima: fix buffer overrun in ima_eventdigest_init_common (git-fixes).\n- initramfs: avoid filename buffer overrun (bsc#1232436).\n- intel_idle: add Granite Rapids Xeon support (bsc#1231630).\n- intel_idle: fix ACPI _CST matching for newer Xeon platforms (bsc#1231630).\n- io_uring/eventfd: move to more idiomatic RCU free usage (git-fixes).\n- io_uring/io-wq: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/io-wq: inherit cpuset of cgroup in io worker (git-fixes).\n- io_uring/net: harden multishot termination case for recv (git-fixes).\n- io_uring/rw: fix cflags posting for single issue multishot read (git-fixes).\n- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (git-fixes).\n- io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN (git-fixes).\n- io_uring/sqpoll: close race on waiting for sqring entries (git-fixes).\n- io_uring/sqpoll: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/sqpoll: do not put cpumask on stack (git-fixes).\n- io_uring/sqpoll: retain test for whether the CPU is valid (git-fixes).\n- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL (git-fixes).\n- iommu/amd: Allocate the page table root using GFP_KERNEL (git-fixes).\n- iommu/amd: Do not set the D bit on AMD v2 table entries (git-fixes).\n- iommu/amd: Fix typo of , instead of ; (git-fixes).\n- iommu/vt-d: Always reserve a domain ID for identity setup (git-fixes).\n- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (git-fixes).\n- iommufd: Check the domain owner of the parent before creating a nesting domain (git-fixes).\n- iommufd: Protect against overflow of ALIGN() during iova allocation (git-fixes).\n- irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (git-fixes).\n- jbd2: Move j_transaction_overhead_buffers into a hole (bsc#1234042).\n- jbd2: avoid infinite transaction commit loop (bsc#1234039).\n- jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (bsc#1234043).\n- jbd2: avoid mount failed when commit block is partial submitted (bsc#1234040).\n- jbd2: correct the printing of write_flags in jbd2_write_superblock() (bsc#1234045).\n- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit (bsc#1231638).\n- jbd2: fix kernel-doc for j_transaction_overhead_buffers (bsc#1234042).\n- jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (bsc#1234044).\n- jbd2: fix soft lockup in journal_finish_inode_data_buffers() (bsc#1234046).\n- jbd2: make jbd2_journal_get_max_txn_bufs() internal (bsc#1234041).\n- jbd2: precompute number of transaction descriptor blocks (bsc#1234042).\n- jfs: Fix sanity check in dbMount (git-fixes).\n- jfs: Fix uaf in dbFreeBits (git-fixes).\n- jfs: Fix uninit-value access of new_ea in ea_buffer (git-fixes).\n- jfs: UBSAN: shift-out-of-bounds in dbFindBits (git-fixes).\n- jfs: check if leafidx greater than num leaves per dmap tree (git-fixes).\n- jump_label: Fix static_key_slow_dec() yet again (git-fixes).\n- kABI fix of VM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- kABI workaround for ASoC SOF (bsc#1233305).\n- kABI: Restore exported __arm_smccc_sve_check (git-fixes)\n- kABI: bpf: enum bpf_{type_flag,arg_type} kABI workaround (git-fixes).\n- kABI: bpf: struct bpf_insn_acces_aux kABI workaround (git-fixes).\n- kabi, mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes kabi).\n- kasan: Fix Software Tag-Based KASAN with GCC (git-fixes).\n- kasan: move checks to do_strncpy_from_user (git-fixes).\n- kbuild, bpf: Use test-ge check for v1.25-only pahole (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Add module-specific pahole flags for distilled base BTF (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later (bsc#1230414 bsc#1229450).\n- kbuild: avoid too many execution of scripts/pahole-flags.sh (bsc#1230414 bsc#1229450).\n- kbuild: bpf: Tell pahole to DECL_TAG kfuncs (bsc#1230414 bsc#1229450).\n- kconfig: qconf: fix buffer overflow in debug links (git-fixes).\n- kernel-binary: Enable livepatch package only when livepatch is enabled Otherwise the filelist may be empty failing the build (bsc#1218644).\n- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y (git-fixes).\n- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry (git-fixes).\n- keys: Fix overwrite of key expiration on instantiation (git-fixes).\n- kthread: unpark only parked kthread (git-fixes).\n- leds: lp55xx: Remove redundant test for invalid channel number (git-fixes).\n- lib/xarray: introduce a new helper xas_get_order (bsc#1231617).\n- lib: string_helpers: silence snprintf() output truncation warning (git-fixes).\n- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (git-fixes).\n- macsec: do not increment counters for an unrelated SA (git-fixes).\n- mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (git-fixes).\n- maple_tree: correct tree corruption on spanning store (git-fixes).\n- maple_tree: fix alloc node fail issue (git-fixes).\n- maple_tree: refine mas_store_root() on storing NULL (git-fixes).\n- media: adv7604: prevent underflow condition when reporting colorspace (git-fixes).\n- media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: amphion: Set video drvdata before register video device (git-fixes).\n- media: ar0521: do not overflow when checking PLL values (git-fixes).\n- media: atomisp: Add check for rgby_data memory allocation failure (git-fixes).\n- media: bttv: use audio defaults for winfast2000 (git-fixes).\n- media: core: v4l2-ioctl: check if ioctl is known to avoid NULL name (git-fixes).\n- media: cx24116: prevent overflows on SNR calculus (git-fixes).\n- media: dvb_frontend: do not play tricks with underflow values (git-fixes).\n- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (stable-fixes).\n- media: dvbdev: prevent the risk of out of memory access (git-fixes).\n- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (git-fixes).\n- media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: i2c: imx335: Enable regulator supplies (stable-fixes).\n- media: i2c: tc358743: Fix crash in the probe error path when using polling (git-fixes).\n- media: imx-jpeg: Ensure power suppliers be suspended before detach them (git-fixes).\n- media: imx-jpeg: Set video drvdata before register video device (git-fixes).\n- media: imx335: Fix reset-gpio handling (git-fixes).\n- media: mantis: remove orphan mantis_core.h (git-fixes).\n- media: mtk-jpeg: Fix null-ptr-deref during unload module (git-fixes).\n- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (git-fixes).\n- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (git-fixes).\n- media: platform: exynos4-is: Fix an OF node reference leak in fimc_md_is_isp_available (git-fixes).\n- media: pulse8-cec: fix data timestamp at pulse8_setup() (git-fixes).\n- media: s5p-jpeg: prevent buffer overflows (git-fixes).\n- media: stb0899_algo: initialize cfr before using it (git-fixes).\n- media: ts2020: fix null-ptr-deref in ts2020_probe() (git-fixes).\n- media: uvcvideo: Require entities to have a non-zero unique ID (git-fixes).\n- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (git-fixes).\n- media: uvcvideo: Stop stream during unregister (git-fixes).\n- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (git-fixes).\n- media: v4l2-tpg: prevent the risk of a division by zero (git-fixes).\n- media: vb2: Fix comment (git-fixes).\n- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() (stable-fixes).\n- media: videobuf2: fix typo: vb2_dbuf -\u003e vb2_qbuf (git-fixes).\n- media: wl128x: Fix atomicity violation in fmc_send_cmd() (git-fixes).\n- mei: use kvmalloc for read buffer (git-fixes).\n- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).\n- mfd: rt5033: Fix missing regmap_del_irq_chip() (git-fixes).\n- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (git-fixes).\n- minmax: avoid overly complex min()/max() macro arguments in xen (git-fixes).\n- minmax: scsi: fix mis-use of 'clamp()' in sr.c (git-fixes).\n- misc: apds990x: Fix missing pm_runtime_disable() (git-fixes).\n- mlx5: avoid truncating error message (git-fixes).\n- mlx5: stop warning for 64KB pages (git-fixes).\n- mlxbf_gige: disable RX filters until RX path initialized (git-fixes).\n- mm/filemap: optimize filemap folio adding (bsc#1231617).\n- mm/filemap: return early if failed to allocate memory for split (bsc#1231617).\n- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (bsc#1234012).\n- mm: avoid unsafe VMA hook invocation when error arises on mmap hook (git-fixes).\n- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point (git-fixes).\n- mm: mmap: no need to call khugepaged_enter_vma() for stack (jsc#PED-10978).\n- mm: move dummy_vm_ops out of a header (git-fixes prerequisity).\n- mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes).\n- mm: refactor map_deny_write_exec() (git-fixes).\n- mm: resolve faulty mmap_region() error path behaviour (git-fixes).\n- mm: unconditionally close VMAs on error (git-fixes).\n- mmc: core: Further prevent card detect during shutdown (git-fixes).\n- mmc: mmc_spi: drop buggy snprintf() (git-fixes).\n- mmc: sunxi-mmc: Fix A100 compatible description (git-fixes).\n- modpost: fix acpi MODULE_DEVICE_TABLE built with mismatched endianness (git-fixes).\n- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (git-fixes).\n- modpost: remove incorrect code in do_eisa_entry() (git-fixes).\n- module: abort module loading when sysfs setup suffer errors (git-fixes).\n- mtd: rawnand: atmel: Fix possible memory leak (git-fixes).\n- mtd: spi-nor: core: replace dummy buswidth from addr to data (git-fixes).\n- nbd: fix race between timeout and normal completion (bsc#1230918).\n- net/mlx5: Add missing masks and QoS bit masks for scheduling elements (git-fixes).\n- net/mlx5: Added cond_resched() to crdump collection (git-fixes).\n- net/mlx5: Check capability for fw_reset (git-fixes).\n- net/mlx5: Check for invalid vector index on EQ creation (git-fixes).\n- net/mlx5: Explicitly set scheduling element and TSAR type (git-fixes).\n- net/mlx5: Fix command bitmask initialization (git-fixes).\n- net/mlx5: Fix error handling in irq_pool_request_irq (git-fixes).\n- net/mlx5: Lag, do bond only if slaves agree on roce state (git-fixes).\n- net/mlx5: Lag, do not use the hardcoded value of the first port (git-fixes).\n- net/mlx5: Stop waiting for PCI if pci channel is offline (git-fixes).\n- net/mlx5: Unregister notifier on eswitch init failure (git-fixes).\n- net/mlx5: Update the list of the PCI supported devices (git-fixes).\n- net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (git-fixes).\n- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map (git-fixes).\n- net/mlx5e: Add missing link modes to ptys2ethtool_map (git-fixes).\n- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (git-fixes).\n- net/mlx5e: Correctly report errors for ethtool rx flows (git-fixes).\n- net/mlx5e: Do not call cleanup on profile rollback failure (git-fixes).\n- net/mlx5e: Fix IPsec tunnel mode offload feature check (git-fixes).\n- net/mlx5e: Fix UDP GSO for encapsulated packets (git-fixes).\n- net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (git-fixes).\n- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (git-fixes).\n- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (git-fixes).\n- net: mana: Implement get_ringparam/set_ringparam for mana (bsc#1229891).\n- net: mana: Improve mana_set_channels() in low mem conditions (bsc#1230289).\n- net: mdio-ipq4019: add missing error check (git-fixes).\n- net: phy: Remove LED entry from LEDs list on unregister (git-fixes).\n- net: phy: bcm84881: Fix some error handling paths (git-fixes).\n- net: phy: dp83822: Fix reset pin definitions (git-fixes).\n- net: phy: dp83869: fix memory corruption when enabling fiber (git-fixes).\n- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (git-fixes).\n- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (git-fixes).\n- net: qede: use return from qede_parse_actions() (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flow_spec (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flower (git-fixes).\n- net: relax socket state check at accept time (git-fixes).\n- net: stmmac: dwmac-tegra: Fix link bring-up sequence (git-fixes)\n- net: sysfs: Fix /sys/class/net/\u0026lt;iface\u003e path for statistics (git-fixes).\n- net: test for not too small csum_start in virtio_net_hdr_to_skb() (git-fixes).\n- net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (git-fixes).\n- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (git-fixes).\n- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (git-fixes).\n- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (stable-fixes).\n- net: usb: usbnet: fix name regression (get-fixes).\n- net: usb: usbnet: fix race in probe failure (git-fixes).\n- net: wwan: fix global oob in wwan_rtnl_policy (git-fixes).\n- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() (git-fixes).\n- net: xfrm: preserve kabi for xfrm_state (bsc#1233754).\n- netdevsim: copy addresses for both in and out paths (git-fixes).\n- netdevsim: use cond_resched() in nsim_dev_trap_report_work() (git-fixes).\n- netfilter: nf_tables: missing iterator type in lookup walk (git-fixes).\n- nfs: Fix KMSAN warning in decode_getfattr_attrs() (git-fixes).\n- nfs: avoid i_lock contention in nfs_clear_invalid_mapping (git-fixes).\n- nfs: fix memory leak in error path of nfs4_do_reclaim (git-fixes).\n- nfsd: call cache_put if xdr_reserve_space returns NULL (git-fixes).\n- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (git-fixes).\n- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (git-fixes).\n- nfsd: fix refcount leak when file is unhashed after being found (git-fixes).\n- nfsd: map the EBADMSG to nfserr_io to avoid warning (git-fixes).\n- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (git-fixes).\n- nfsd: remove unsafe BUG_ON from set_change_info (bsc#1234121).\n- nfsd: return -EINVAL when namelen is 0 (git-fixes).\n- nilfs2: fix kernel bug due to missing clearing of buffer delay flag (git-fixes).\n- nilfs2: fix potential deadlock with newly created symlinks (git-fixes).\n- nouveau/dmem: Fix privileged error in copy engine channel (git-fixes).\n- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (git-fixes).\n- nouveau/dp: handle retries for AUX CH transfers with GSP (git-fixes).\n- nouveau/gsp: Avoid addressing beyond end of rpc-\u003eentries (stable-fixes).\n- nouveau: fw: sync dma after setup is called (git-fixes).\n- nouveau: handle EBUSY and EAGAIN for GSP aux errors (git-fixes).\n- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- ntfs3: Add bounds checking to mi_enum_attr() (bsc#1233207)\n- nvme-fabrics: fix kernel crash while shutting down controller (git-fixes).\n- nvme-loop: flush off pending I/O while shutting down loop controller (git-fixes).\n- nvme-multipath: suppress partition scan until the disk is ready (bsc#1228244).\n- nvme-pci: fix freeing of the HMB descriptor table (git-fixes).\n- nvme-pci: fix race condition between reset and nvme_dev_disable() (git-fixes).\n- nvme-pci: qdepth 1 quirk (git-fixes).\n- nvme-pci: reverse request order in nvme_queue_rqs (git-fixes).\n- nvme-pci: set doorbell config before unquiescing (git-fixes).\n- nvme/host: Fix RCU list traversal to use SRCU primitive (git-fixes).\n- nvme: disable CC.CRIME (NVME_CC_CRIME) (jsc#PED-9901).\n- nvme: null terminate nvme_tls_attrs (git-fixes).\n- nvme: re-fix error-handling for io_uring nvme-passthrough (git-fixes).\n- nvme: tcp: avoid race between queue_lock lock and destroy (git-fixes).\n- nvmet-auth: assign dh_key to NULL after kfree_sensitive (git-fixes).\n- ocfs2: fix UBSAN warning in ocfs2_verify_volume() (git-fixes).\n- ocfs2: fix the la space leak when unmounting an ocfs2 volume (git-fixes).\n- ocfs2: fix uninit-value in ocfs2_get_block() (git-fixes).\n- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (git-fixes).\n- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (git-fixes).\n- ocfs2: uncache inode which has failed entering the group (git-fixes).\n- of: Add cleanup.h based auto release via __free(device_node) markings (bsc#1232386)\n- parport: Proper fix for array out-of-bounds access (git-fixes).\n- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check (git-fixes).\n- phy: qcom: qmp-combo: move driver data initialisation earlier (git-fixes).\n- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend (git-fixes).\n- phy: tegra: xusb: Add error pointer check in xusb.c (git-fixes).\n- phy: ti: phy-j721e-wiz: fix usxgmii configuration (git-fixes).\n- pinctrl: apple: check devm_kasprintf() returned value (git-fixes).\n- pinctrl: k210: Undef K210_PC_DEFAULT (git-fixes).\n- pinctrl: ocelot: fix system hang on level based interrupts (stable-fixes).\n- pinctrl: qcom: spmi: fix debugfs drive strength (git-fixes).\n- pinctrl: zynqmp: drop excess struct member description (git-fixes).\n- platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (git-fixes).\n- platform/x86/amd/pmc: Detect when STB is not available (git-fixes).\n- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug (git-fixes).\n- platform/x86: dell-sysman: add support for alienware products (stable-fixes).\n- platform/x86: dell-wmi: Ignore suspend notifications (stable-fixes).\n- platform/x86: lenovo-ymc: Ignore the 0x0 state (stable-fixes).\n- platform/x86: panasonic-laptop: Return errno correctly in show callback (git-fixes).\n- platform/x86: touchscreen_dmi: add nanote-next quirk (stable-fixes).\n- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (bsc#1234098).\n- power: reset: brcmstb: Do not go into infinite loop if reset fails (stable-fixes).\n- power: supply: bq27xxx: Fix registers of bq27426 (git-fixes).\n- power: supply: core: Remove might_sleep() from power_supply_put() (git-fixes).\n- power: supply: rt9471: Fix wrong WDT function regfield declaration (git-fixes).\n- power: supply: rt9471: Use IC status regfield to report real charger status (git-fixes).\n- powercap: intel_rapl: Fix off by one in get_rpi() (git-fixes).\n- powerpc/64: Convert patch_instruction() to patch_u32() (bsc#1194869).\n- powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0 (bsc#1215199).\n- powerpc/atomic: Use YZ constraints for DS-form instructions (bsc#1194869).\n- powerpc/boot: Handle allocation failure in simple_realloc() (bsc#1194869).\n- powerpc/boot: Only free if realloc() succeeds (bsc#1194869).\n- powerpc/code-patching: Add generic memory patching (bsc#1194869).\n- powerpc/code-patching: Perform hwsync in __patch_instruction() in case of failure (bsc#1194869).\n- powerpc/crypto: do not build aes-gcm-p10 by default (bsc#1230501 ltc#208632).\n- powerpc/crypto: fix missing skcipher dependency for aes-gcm-p10 (bsc#1230501 ltc#208632).\n- powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (bsc#1215199).\n- powerpc/fadump: Refactor and prepare fadump_cma_init for late init (bsc#1215199).\n- powerpc/kexec: Fix return of uninitialized variable (bsc#1194869).\n- powerpc/mm/fault: Fix kfence page fault reporting (bsc#1194869).\n- powerpc/mm: Fix boot crash with FLATMEM (bsc#1194869).\n- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL (bsc#1194869).\n- powerpc/powernv: Free name on error in opal_event_init() (bsc#1194869).\n- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (bsc#1194869).\n- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (bsc#1194869).\n- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct (bsc#1215199).\n- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace (bsc#1194869).\n- powerpc/vdso: Inconditionally use CFUNC macro (bsc#1215199).\n- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (bsc#1194869).\n- powerpc/xmon: Fix disassembly CPU feature checks (bsc#1065729).\n- printk: Add notation to console_srcu locking (bsc#1232183).\n- pwm: imx-tpm: Use correct MODULO value for EPWM mode (git-fixes).\n- qed: avoid truncating work queue length (git-fixes).\n- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (bsc#1226631).\n- rcu: Fix buffer overflow in print_cpu_stall_info() (bsc#1226623).\n- regmap: detach regmap from dev on regmap_exit (git-fixes).\n- regmap: irq: Set lockdep class for hierarchical IRQ domains (git-fixes).\n- rpm/check-for-config-changes: add HAVE_RUST and RUSTC_SUPPORTS_ to IGNORED_CONFIGS_RE They depend on SHADOW_CALL_STACK.\n- rpm/release-projects: Add SLFO projects (bsc#1231293).\n- rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation. (bsc#1218644)\n- rpmsg: glink: Handle rejected intent request better (git-fixes).\n- rtc: ab-eoz9: do not fail temperature reads on undervoltage notification (git-fixes).\n- rtc: abx80x: Fix WDT bit position of the status register (git-fixes).\n- rtc: bbnsm: add remove hook (git-fixes).\n- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (git-fixes).\n- rtc: rzn1: fix BCD to rtc_time conversion errors (git-fixes).\n- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- runtime constants: add default dummy infrastructure (git-fixes).\n- runtime constants: add x86 architecture support (git-fixes).\n- s390/mm: Add cond_resched() to cmm_alloc/free_pages() (bsc#1228747).\n- s390/pci: Handle PCI error codes other than 0x3a (git-fixes bsc#1232629).\n- s390/sclp: Deactivate sclp after all its users (git-fixes bsc#1232628).\n- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (git-fixes bsc#1232627).\n- scsi: NCR5380: Check for phase match during PDMA fixup (git-fixes).\n- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers (git-fixes).\n- scsi: Remove scsi device no_start_on_resume flag (git-fixes).\n- scsi: aacraid: Rearrange order of struct aac_srb_unit (git-fixes).\n- scsi: cdrom: kABI: fix cdrom_dev_ops change (git-fixes).\n- scsi: core: Disable CDL by default (git-fixes).\n- scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING (git-fixes).\n- scsi: core: Fix the return value of scsi_logical_block_count() (git-fixes).\n- scsi: core: Handle devices which return an unusually large VPD page count (git-fixes).\n- scsi: core: alua: I/O errors for ALUA state transitions (git-fixes).\n- scsi: fnic: Move flush_work initialization out of if block (bsc#1230055).\n- scsi: hisi_sas: Handle the NCQ error returned by D2H frame (git-fixes).\n- scsi: hpsa: Fix allocation size for Scsi_Host private data (git-fixes).\n- scsi: kABI: restore no_start_on_resume to scsi_device (git-fixes).\n- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (git-fixes).\n- scsi: libsas: Fix the failure of adding phy with zero-address to port (git-fixes).\n- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd() (bsc#1232757).\n- scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Copyright updates for 14.4.0.6 patches (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (bsc#1232757).\n- scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (bsc#1232757).\n- scsi: lpfc: Modify CGN warning signal calculation based on EDC response (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Remove trailing space after \\n newline (bsc#1232757).\n- scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs (bsc#1232757 bsc#1228119).\n- scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to KERN_WARNING (bsc#1232757).\n- scsi: lpfc: Support loopback tests with VMID enabled (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.5 (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.6 (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE (bsc#1232757).\n- scsi: mac_scsi: Disallow bus errors during PDMA send (git-fixes).\n- scsi: mac_scsi: Refactor polling loop (git-fixes).\n- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages (git-fixes).\n- scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (git-fixes).\n- scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (git-fixes).\n- scsi: mpi3mr: Avoid possible run-time warning with long manufacturer strings (git-fixes).\n- scsi: mpi3mr: Fix ATA NCQ priority support (git-fixes).\n- scsi: mpi3mr: Validate SAS port assignments (git-fixes).\n- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (git-fixes).\n- scsi: pm8001: Do not overwrite PCI queue mapping (git-fixes).\n- scsi: pm80xx: Set phy-\u003eenable_completion only when we wait for it (git-fixes).\n- scsi: qedf: Set qed_slowpath_params to zero before use (git-fixes).\n- scsi: scsi_transport_fc: Allow setting rport state to current state (git-fixes).\n- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress (git-fixes).\n- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (git-fixes).\n- scsi: smartpqi: correct stream detection (git-fixes).\n- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly (git-fixes).\n- scsi: spi: Fix sshdr use (git-fixes).\n- scsi: sr: Fix unintentional arithmetic wraparound (git-fixes).\n- scsi: wd33c93: Do not use stale scsi_pointer value (git-fixes).\n- security/keys: fix slab-out-of-bounds in key_task_permission (git-fixes).\n- selftests/bpf: Add a test case to write mtu result into .rodata (git-fixes).\n- selftests/bpf: Add a test case to write strtol result into .rodata (git-fixes).\n- selftests/bpf: Add test for sign extension in coerce_subreg_to_size_sx() (git-fixes).\n- selftests/bpf: Add test for truncation after sign extension in coerce_reg_to_size_sx() (git-fixes).\n- selftests/bpf: Add tests for ldsx of pkt data/data_end/data_meta accesses (git-fixes).\n- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test (git-fixes).\n- selftests/bpf: Rename ARG_PTR_TO_LONG test description (git-fixes).\n- selftests/bpf: test for malformed BPF_CORE_TYPE_ID_LOCAL relocation (git-fixes).\n- serial: 8250: omap: Move pm_runtime_get_sync (git-fixes).\n- serial: imx: Update mctrl old_status on RTSD interrupt (git-fixes).\n- serial: protect uart_port_dtr_rts() in uart_shutdown() too (stable-fixes).\n- signal: Replace BUG_ON()s (bsc#1234093).\n- soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (git-fixes).\n- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (git-fixes).\n- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- soundwire: intel_bus_common: enable interrupts before exiting reset (stable-fixes).\n- spi: Fix acpi deferred irq probe (git-fixes).\n- spi: atmel-quadspi: Fix register name in verbose logging function (git-fixes).\n- spi: atmel-quadspi: Fix wrong register value written to MR (git-fixes).\n- spi: mpc52xx: Add cancel_work_sync before module remove (git-fixes).\n- spi: mtk-snfi: fix kerneldoc for mtk_snand_is_page_ops() (git-fixes).\n- spi: s3c64xx: fix timeout counters in flush_fifo (git-fixes).\n- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select (git-fixes).\n- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- spi: tegra210-quad: Avoid shift-out-of-bounds (git-fixes).\n- splice: always fsnotify_access(in), fsnotify_modify(out) on success (git-fixes).\n- splice: fsnotify_access(fd)/fsnotify_modify(fd) in vmsplice (git-fixes).\n- splice: fsnotify_access(in), fsnotify_modify(out) on success in tee (git-fixes).\n- srcu: Fix callbacks acceleration mishandling (git-fixes).\n- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (git-fixes).\n- sumversion: Fix a memory leak in get_src_version() (git-fixes).\n- supported.conf: mark nhpoly1305 module as supported (bsc#1231035)\n- supported.conf: mark ultravisor userspace access as supported (bsc#1232090)\n- task_work: add kerneldoc annotation for 'data' argument (git-fixes).\n- tcp: Fix refcnt handling in __inet_hash_connect() (git-fixes).\n- thermal: core: Initialize thermal zones before registering them (git-fixes).\n- thermal: int3400: Fix reading of current_uuid for active policy (git-fixes).\n- thermal: intel: int340x: processor: Fix warning during module unload (git-fixes).\n- thunderbolt: Honor TMU requirements in the domain when setting TMU mode (stable-fixes).\n- thunderbolt: Improve DisplayPort tunnel setup process to be more robust (stable-fixes).\n- tools/lib/thermal: Fix sampling handler context ptr (git-fixes).\n- tools/power turbostat: Fix trailing '\\n' parsing (git-fixes).\n- tools/power turbostat: Increase the limit for fd opened (bsc#1233119).\n- tools: hv: rm .*.cmd when make clean (git-fixes).\n- tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1082555 git-fixes).\n- tpm: fix signed/unsigned bug when checking event logs (git-fixes).\n- tracing/hwlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/osnoise: Fix build when timerlat is not enabled (git-fixes).\n- tracing/osnoise: Skip running osnoise if all instances are off (git-fixes).\n- tracing/osnoise: Switch from PF_NO_SETAFFINITY to migrate_disable (git-fixes).\n- tracing/osnoise: Use a cpumask to know what threads are kthreads (git-fixes).\n- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (git-fixes).\n- tracing/timerlat: Add user-space interface (git-fixes).\n- tracing/timerlat: Drop interface_lock in stop_kthread() (git-fixes).\n- tracing/timerlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (git-fixes).\n- tracing/timerlat: Move hrtimer_init to timerlat_fd open() (git-fixes).\n- tracing/timerlat: Only clear timer if a kthread exists (git-fixes).\n- tracing: Consider the NULL character when validating the event length (git-fixes).\n- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (git-fixes).\n- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (stable-fixes).\n- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (git-fixes).\n- ubifs: Fix adding orphan entry twice for the same inode (git-fixes).\n- ubifs: Fix unattached xattr inode if powercut happens after deleting (git-fixes).\n- ubifs: add check for crypto_shash_tfm_digest (git-fixes).\n- ubifs: dbg_orphan_check: Fix missed key type checking (git-fixes).\n- ucounts: fix counter leak in inc_rlimit_get_ucounts() (bsc#1233460).\n- unicode: Do not special case ignorable code points (stable-fixes).\n- unicode: Fix utf8_load() error path (git-fixes).\n- uprobe: avoid out-of-bounds memory access of fetching args (git-fixes).\n- uprobes: encapsulate preparation of uprobe args buffer (git-fixes).\n- uprobes: introduce the global struct vm_special_mapping xol_mapping (bsc#1231114).\n- uprobes: turn xol_area-\u003epages into xol_area-\u003epage (bsc#1231114).\n- usb: chipidea: udc: enable suspend interrupt after usb reset (stable-fixes).\n- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario (stable-fixes).\n- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG (git-fixes).\n- usb: dwc3: core: Stop processing of pending events if controller is halted (git-fixes).\n- usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (git-fixes).\n- usb: dwc3: gadget: Fix checking for number of TRBs left (git-fixes).\n- usb: dwc3: gadget: Fix looping of queued SG entries (git-fixes).\n- usb: ehci-spear: fix call balance of sehci clk handling routines (git-fixes).\n- usb: gadget: core: force synchronous registration (git-fixes).\n- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe (stable-fixes).\n- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler (stable-fixes).\n- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context (git-fixes).\n- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant (stable-fixes).\n- usb: gadget: f_uac2: fix non-newline-terminated function name (stable-fixes).\n- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store (git-fixes).\n- usb: musb: Fix hardware lockup on first Rx endpoint request (git-fixes).\n- usb: musb: sunxi: Fix accessing an released usb phy (git-fixes).\n- usb: phy: Fix API devm_usb_put_phy() can not release the phy (git-fixes).\n- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (stable-fixes).\n- usb: typec: altmode should keep reference to parent (git-fixes).\n- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (git-fixes).\n- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (git-fixes).\n- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (git-fixes).\n- usb: xhci: Fix TD invalidation under pending Set TR Dequeue (git-fixes).\n- usb: xhci: Fix problem with xhci resume from suspend (stable-fixes).\n- usb: xhci: fix loss of data on Cadence xHC (git-fixes).\n- usb: yurex: make waiting on yurex_write interruptible (git-fixes).\n- usbip: tools: Fix detach_port() invalid port error path (git-fixes).\n- usbnet: fix cyclical race on disconnect with work queue (git-fixes).\n- vdpa: Fix an error handling path in eni_vdpa_probe() (git-fixes).\n- vdpa_sim_blk: Fix the potential leak of mgmt_dev (git-fixes).\n- vdpa_sim_blk: allocate the buffer zeroed (git-fixes).\n- vduse: avoid using __GFP_NOFAIL (git-fixes).\n- vfs: dcache: move hashlen_hash() from callers into d_hash() (git-fixes).\n- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (git-fixes).\n- vhost_vdpa: assign irq bypass producer token correctly (git-fixes).\n- virtio_console: fix misc probe bugs (git-fixes).\n- vmalloc: modify the alloc_vmap_area() error message for better diagnostics (jsc#PED-10978).\n- vmxnet3: Add XDP support (bsc#1226498).\n- vmxnet3: Fix missing reserved tailroom (bsc#1226498).\n- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame (bsc#1226498).\n- vmxnet3: add command to allow disabling of offloads (bsc#1226498).\n- vmxnet3: add latency measurement support in vmxnet3 (bsc#1226498).\n- vmxnet3: prepare for version 9 changes (bsc#1226498).\n- vmxnet3: update to version 9 (bsc#1226498).\n- vsock: Update msg_count on read_skb() (git-fixes).\n- vt: prevent kernel-infoleak in con_font_get() (git-fixes).\n- watchdog: apple: Actually flush writes after requesting watchdog restart (git-fixes).\n- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (git-fixes).\n- watchdog: rti: of: honor timeout-sec property (git-fixes).\n- wifi: ath10k: Fix memory leak in management tx (git-fixes).\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (git-fixes).\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (git-fixes).\n- wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (git-fixes).\n- wifi: ath11k: Fix invalid ring usage in full monitor mode (git-fixes).\n- wifi: ath11k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: Skip Rx TID cleanup for self peer (git-fixes).\n- wifi: ath12k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: fix crash when unbinding (git-fixes).\n- wifi: ath12k: fix warning when unbinding (git-fixes).\n- wifi: ath12k: remove msdu_end structure for WCN7850 (git-fixes).\n- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (git-fixes).\n- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (stable-fixes).\n- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (stable-fixes).\n- wifi: brcm80211: BRCM_TRACING should depend on TRACING (git-fixes).\n- wifi: brcmfmac: release 'root' node in all execution paths (git-fixes).\n- wifi: cfg80211: Set correct chandef when starting CAC (stable-fixes).\n- wifi: cfg80211: clear wdev-\u003ecqm_config pointer on free (git-fixes).\n- wifi: cw1200: Fix potential NULL dereference (git-fixes).\n- wifi: iwlegacy: Clear stale interrupts before resuming device (stable-fixes).\n- wifi: iwlegacy: Fix \"field-spanning write\" warning in il_enqueue_hcmd() (git-fixes).\n- wifi: iwlwifi: allow only CN mcc from WRDD (stable-fixes).\n- wifi: iwlwifi: config: label 'gl' devices as discrete (git-fixes).\n- wifi: iwlwifi: mvm: Fix a race in scan abort flow (stable-fixes).\n- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (git-fixes).\n- wifi: iwlwifi: mvm: avoid NULL pointer dereference (stable-fixes).\n- wifi: iwlwifi: mvm: do not add default link in fw restart flow (git-fixes).\n- wifi: iwlwifi: mvm: do not leak a link on AP removal (git-fixes).\n- wifi: iwlwifi: mvm: drop wrong STA selection in TX (stable-fixes).\n- wifi: iwlwifi: mvm: use correct key iteration (stable-fixes).\n- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL (stable-fixes).\n- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (git-fixes).\n- wifi: mac80211: fix RCU list iterations (stable-fixes).\n- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (git-fixes).\n- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation (stable-fixes).\n- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable (stable-fixes).\n- wifi: mt76: mt7915: hold dev-\u003emt76.mutex while disabling tx worker (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (git-fixes).\n- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c (stable-fixes).\n- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons (git-fixes).\n- wifi: rtw88: select WANT_DEV_COREDUMP (stable-fixes).\n- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements (stable-fixes).\n- wifi: rtw89: avoid to add interface to list twice when SER (stable-fixes).\n- wifi: rtw89: correct base HT rate mask for firmware (stable-fixes).\n- wifi: wfx: Fix error handling in wfx_core_init() (git-fixes).\n- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (bsc#1233443).\n- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load (git-fixes).\n- x86/Documentation: Indent 'note::' directive for protocol version number note (git-fixes).\n- x86/PCI: Check pcie_find_root_port() return for NULL (git-fixes).\n- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h (git-fixes).\n- x86/apic: Always explicitly disarm TSC-deadline timer (git-fixes).\n- x86/apic: Make x2apic_disable() work correctly (git-fixes).\n- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (git-fixes).\n- x86/bugs: Skip RSB fill at VMEXIT (git-fixes).\n- x86/cpufeatures: Add a IBPB_NO_RET BUG flag (git-fixes).\n- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (git-fixes).\n- x86/entry: Have entry_ibpb() invalidate return predictions (git-fixes).\n- x86/entry: Remove unwanted instrumentation in common_interrupt() (git-fixes).\n- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency (git-fixes).\n- x86/microcode/intel: Remove unnecessary cache writeback and invalidation (git-fixes).\n- x86/mm: Use IPIs to synchronize LAM enablement (git-fixes).\n- x86/resctrl: Annotate get_mem_config() functions as __init (git-fixes).\n- x86/resctrl: Avoid overflow in MB settings in bw_validate() (git-fixes).\n- x86/resctrl: Remove hard-coded memory bandwidth limit (git-fixes).\n- x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler (git-fixes).\n- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() (git-fixes).\n- x86/tdx: Dynamically disable SEPT violations from causing #VEs (git-fixes).\n- x86/tdx: Enable CPU topology enumeration (git-fixes).\n- x86/tdx: Introduce wrappers to read and write TD metadata (git-fixes).\n- x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup() (git-fixes).\n- x86/traps: move kmsan check after instrumentation_begin (git-fixes).\n- x86: Increase brk randomness entropy for 64-bit systems (git-fixes).\n- x86: do the user address masking outside the user access area (git-fixes).\n- x86: fix off-by-one in access_ok() (git-fixes).\n- x86: fix user address masking non-canonical speculation issue (git-fixes).\n- x86: make the masked_user_access_begin() macro use its argument only once (git-fixes).\n- x86: support user address masking instead of non-speculative conditional (git-fixes).\n- xfrm: Export symbol xfrm_dev_state_delete (bsc#1233754).\n- xfrm: Fix unregister netdevice hang on hardware offload (bsc#1233754).\n- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2 (git-fixes).\n- xfs: check shortform attr entry flags specifically (git-fixes).\n- xfs: convert delayed extents to unwritten when zeroing post eof blocks (git-fixes).\n- xfs: fix finding a last resort AG in xfs_filestream_pick_ag (git-fixes).\n- xfs: fix freeing speculative preallocations for preallocated files (git-fixes).\n- xfs: make sure sb_fdblocks is non-negative (git-fixes).\n- xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional (git-fixes).\n- xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset (git-fixes).\n- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent (git-fixes).\n- xfs: validate recovered name buffers when recovering xattr items (git-fixes).\n- xhci: Add a quirk for writing ERST in high-low order (git-fixes).\n- xhci: Fix Link TRB DMA in command ring stopped completion event (git-fixes).\n- xhci: Fix incorrect stream context type macro (git-fixes).\n- xhci: Mitigate failed set dequeue pointer commands (git-fixes).\n- xhci: Use pm_runtime_get to prevent RPM on unsupported systems (git-fixes).\n- xhci: tegra: fix checked USB2 port number (git-fixes).\n- zonefs: Improve error handling (git-fixes).\n","status":"published","published":"2025-03-27T15:23:38Z","modified":"2026-03-23T04:50:04.836388Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20246-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).\n- CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).\n- CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).\n- CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).\n- CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).\n- CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).\n- CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).\n- CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb-\u003ehead (bsc#1224518).\n- CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).\n- CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).\n- CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).\n- CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).\n- CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).\n- CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).\n- CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).\n- CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).\n- CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).\n- CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).\n- CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).\n- CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).\n- CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command  (bsc#1228620).\n- CVE-2024-42102: Revert \"mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again\" (bsc#1233132).\n- CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).\n- CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).\n- CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).\n- CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).\n- CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).\n- CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).\n- CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).\n- CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)\n- CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).\n- CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).\n- CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).\n- CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).\n- CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).\n- CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).\n- CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).\n- CVE-2024-46813: drm/amd/display: Check link_index before accessing dc-\u003elinks (bsc#1231191).\n- CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).\n- CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).\n- CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).\n- CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).\n- CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).\n- CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).\n- CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100).\n- CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).\n- CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).\n- CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).\n- CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (bsc#1231435).\n- CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (bsc#1231436).\n- CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).\n- CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442).\n- CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).\n- CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()\u0026iput() (bsc#1231930).\n- CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).\n- CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).\n- CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003).\n- CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).\n- CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).\n- CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946).\n- CVE-2024-47704: drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944).\n- CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872).\n- CVE-2024-47706: block, bfq: fix possible UAF for bfqq-\u003ebic with merge chain (bsc#1231942).\n- CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).\n- CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049).\n- CVE-2024-47727: x86/tdx: Fix \"in-kernel MMIO\" check (bsc#1232116).\n- CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).\n- CVE-2024-47731: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (bsc#1232117).\n- CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).\n- CVE-2024-47741: btrfs: fix race setting file private on concurrent lseek using same fd (bsc#1231869).\n- CVE-2024-47745: mm: call the security_mmap_file() LSM hook in remap_file_pages() (bsc#1232135).\n- CVE-2024-47747: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (bsc#1232145).\n- CVE-2024-47752: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning (bsc#1232130).\n- CVE-2024-47753: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning (bsc#1231868).\n- CVE-2024-47754: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning (bsc#1232131).\n- CVE-2024-49852: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (bsc#1232819).\n- CVE-2024-49864: rxrpc: Fix a race between socket set up and I/O thread creation (bsc#1232256).\n- CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount (bsc#1232262).\n- CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).\n- CVE-2024-49881: ext4: update orig_path in ext4_find_extent() (bsc#1232201).\n- CVE-2024-49882: ext4: fix double brelse() the buffer of the extents path (bsc#1232200).\n- CVE-2024-49883: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199).\n- CVE-2024-49888: bpf: Fix a sdiv overflow issue (bsc#1232208).\n- CVE-2024-49890: drm/amd/pm: ensure the fw_info is not null before using it (bsc#1232217).\n- CVE-2024-49892: drm/amd/display: Initialize get_bytes_per_element's default to 1 (bsc#1232220).\n- CVE-2024-49894: drm/amd/display: Fix index out of bounds in degamma hardware format translation (bsc#1232354).\n- CVE-2024-49895: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (bsc#1232352).\n- CVE-2024-49896: drm/amd/display: Check stream before comparing them (bsc#1232221).\n- CVE-2024-49897: drm/amd/display: Check phantom_stream before it is used (bsc#1232355).\n- CVE-2024-49898: drm/amd/display: Check null-initialized variables (bsc#1232222).\n- CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).\n- CVE-2024-49901: drm/msm/adreno: Assign msm_gpu-\u003epdev earlier to avoid nullptrs (bsc#1232305).\n- CVE-2024-49906: drm/amd/display: Check null pointer before try to access it (bsc#1232332).\n- CVE-2024-49907: drm/amd/display: Check null pointers before using dc-\u003eclk_mgr (bsc#1232334).\n- CVE-2024-49909: drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func (bsc#1232337).\n- CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (bsc#1232366).\n- CVE-2024-49912: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (bsc#1232367).\n- CVE-2024-49913: drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (bsc#1232307).\n- CVE-2024-49914: drm/amd/display: Add null check for pipe_ctx-\u003eplane_state in (bsc#1232369).\n- CVE-2024-49917: drm/amd/display: Add NULL check for clk_mgr and clk_mgr-\u003efuncs in dcn30_init_hw (bsc#1231965).\n- CVE-2024-49918: drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer (bsc#1231967).\n- CVE-2024-49919: drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer (bsc#1231968).\n- CVE-2024-49920: drm/amd/display: Check null pointers before multiple uses (bsc#1232313).\n- CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).\n- CVE-2024-49922: drm/amd/display: Check null pointers before using them (bsc#1232374).\n- CVE-2024-49923: drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags (bsc#1232361).\n- CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)\n- CVE-2024-49933: blk_iocost: fix more out of bound shifts (bsc#1232368).\n- CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).\n- CVE-2024-49936: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424).\n- CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).\n- CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).\n- CVE-2024-49946: ppp: do not assume bh is held in ppp_channel_bridge_input() (bsc#1232164).\n- CVE-2024-49949: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (bsc#1232160).\n- CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).\n- CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).\n- CVE-2024-49953: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice (bsc#1232156).\n- CVE-2024-49954: static_call: Replace pointless WARN_ON() in static_call_module_notify() (bsc#1232155).\n- CVE-2024-49958: ocfs2: reserve space for inline xattr before attaching reflink tree (bsc#1232151).\n- CVE-2024-49959: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (bsc#1232149).\n- CVE-2024-49960: ext4: fix timer use-after-free on failed mount (bsc#1232395).\n- CVE-2024-49967: ext4: no need to continue when the number of entries is 1 (bsc#1232140).\n- CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).\n- CVE-2024-49969: drm/amd/display: Fix index out of bounds in DCN30 color transformation (bsc#1232519).\n- CVE-2024-49972: drm/amd/display: Deallocate DML memory if allocation fails (bsc#1232315).\n- CVE-2024-49973: r8169: add tally counter fields added with RTL8125 (bsc#1232105).\n- CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383).\n- CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).\n- CVE-2024-49986: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors (bsc#1232093).\n- CVE-2024-49987: bpftool: Fix undefined behavior in qsort(NULL, 0, ...) (bsc#1232258).\n- CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).\n- CVE-2024-49991: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer (bsc#1232282).\n- CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (bsc#1232316).\n- CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).\n- CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).\n- CVE-2024-50000: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (bsc#1232085).\n- CVE-2024-50001: net/mlx5: Fix error path in multi-packet WQE transmit (bsc#1232084).\n- CVE-2024-50002: static_call: Handle module init failure correctly in static_call_del_module() (bsc#1232083).\n- CVE-2024-50003: drm/amd/display: Fix system hang while resume with TBT monitor (bsc#1232385).\n- CVE-2024-50004: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 (bsc#1232396).\n- CVE-2024-50006: ext4: fix i_data_sem unlock order in ext4_ind_migrate() (bsc#1232442).\n- CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).\n- CVE-2024-50012: cpufreq: Avoid a bad reference count on CPU node (bsc#1232386).\n- CVE-2024-50014: ext4: fix access to uninitialised lock in fc replay path (bsc#1232446).\n- CVE-2024-50015: ext4: dax: fix overflowing extents beyond inode size when partially writing (bsc#1232079).\n- CVE-2024-50020: ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() (bsc#1231989).\n- CVE-2024-50021: ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() (bsc#1231957).\n- CVE-2024-50022: device-dax: correct pgoff align in dax_set_mapping() (bsc#1231956).\n- CVE-2024-50024: net: Fix an unsafe loop on the list (bsc#1231954).\n- CVE-2024-50027: thermal: core: Free tzp copy along with the thermal zone (bsc#1231951).\n- CVE-2024-50028: thermal: core: Reference count the zone in thermal_zone_get_by_id() (bsc#1231950).\n- CVE-2024-50033: slip: make slhc_remember() more robust against malicious packets (bsc#1231914).\n- CVE-2024-50035: ppp: fix ppp_async_encode() illegal access (bsc#1232392).\n- CVE-2024-50040: igb: Do not bring the device up after non-fatal error (bsc#1231908).\n- CVE-2024-50041: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash (bsc#1231907).\n- CVE-2024-50042: ice: Fix increasing MSI-X on VF (bsc#1231906).\n- CVE-2024-50045: netfilter: br_netfilter: fix panic with metadata_dst skb (bsc#1231903).\n- CVE-2024-50046: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (bsc#1231902).\n- CVE-2024-50047: smb: client: fix UAF in async decryption (bsc#1232418).\n- CVE-2024-50059: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (bsc#1232345).\n- CVE-2024-50060: io_uring: check if we need to reschedule during overflow flush (bsc#1232417).\n- CVE-2024-50063: bpf: Prevent tail call between progs attached to different hooks (bsc#1232435).\n- CVE-2024-50064: zram: free secondary algorithms names (bsc#1231901).\n- CVE-2024-50080: ublk: do not allow user copy for unprivileged device (bsc#1232502).\n- CVE-2024-50081: blk-mq: setup queue -\u003etag_set before initializing hctx (bsc#1232501).\n- CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).\n- CVE-2024-50084: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() (bsc#1232494).\n- CVE-2024-50087: btrfs: fix uninitialized pointer free on read_alloc_one_name() error (bsc#1232499).\n- CVE-2024-50088: btrfs: fix uninitialized pointer free in add_inode_ref() (bsc#1232498).\n- CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).\n- CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).\n- CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).\n- CVE-2024-50124: Bluetooth: ISO: Fix UAF on iso_sock_timeout (bsc#1232926).\n- CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).\n- CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).\n- CVE-2024-50128: net: wwan: fix global oob in wwan_rtnl_policy (bsc#1232905).\n- CVE-2024-50130: netfilter: bpf: must hold reference on net namespace (bsc#1232894).\n- CVE-2024-50138: bpf: Use raw_spinlock_t in ringbuf (bsc#1232935).\n- CVE-2024-50139: KVM: arm64: Fix shift-out-of-bounds bug (bsc#1233062).\n- CVE-2024-50145: octeon_ep: add SKB allocation failures handling in __octep_oq_process_rx() (bsc#1233044).\n- CVE-2024-50153: scsi: target: core: Fix null-ptr-deref in target_alloc_device() (bsc#1233061).\n- CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070).\n- CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050).\n- CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049).\n- CVE-2024-50169: vsock: Update rx_bytes on read_skb() (bsc#1233320).\n- CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057).\n- CVE-2024-50177: drm/amd/display: fix a UBSAN warning in DML2.1 (bsc#1233115).\n- CVE-2024-50182: secretmem: disable memfd_secret() if arch cannot set direct map (bsc#1233129).\n- CVE-2024-50184: virtio_pmem: Check device status before requesting flush (bsc#1233135).\n- CVE-2024-50186: net: explicitly clear the sk pointer, when pf-\u003ecreate fails (bsc#1233110).\n- CVE-2024-50192: irqchip/gic-v4: Do not allow a VMOVP on a dying VPE (bsc#1233106).\n- CVE-2024-50225: btrfs: fix error propagation of split bios (bsc#1233193).\n- CVE-2024-50228: mm: shmem: fix data-race in shmem_getattr() (bsc#1233204).\n- CVE-2024-50230: nilfs2: fix kernel bug due to missing clearing of checked flag (bsc#1233206).\n- CVE-2024-50245: fs/ntfs3: Fix possible deadlock in mi_read (bsc#1233203).\n- CVE-2024-50246: fs/ntfs3: Add rough attr alloc_size check (bsc#1233207).\n- CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233226).\n- CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).\n- CVE-2024-50257: netfilter: Fix use-after-free in get_info() (bsc#1233244).\n- CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (bsc#1233253).\n- CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-\u003etrans (bsc#1233453).\n- CVE-2024-50271: signal: restore the override_rlimit logic (bsc#1233460).\n- CVE-2024-50273: btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1233462).\n- CVE-2024-50274: idpf: avoid vport access in idpf_get_link_ksettings (bsc#1233463).\n- CVE-2024-50275: arm64/sve: Discard stale CPU state when handling SVE traps (bsc#1233464).\n- CVE-2024-50276: net: vertexcom: mse102x: Fix possible double free of TX skb (bsc#1233465).\n- CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).\n- CVE-2024-50289: media: av7110: fix a spectre vulnerability (bsc#1233478).\n- CVE-2024-50295: net: arc: fix the device for dma_map_single/dma_unmap_single (bsc#1233484).\n- CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).\n- CVE-2024-50298: net: enetc: allocate vf_state during PF probes (bsc#1233487).\n- CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233540).\n- CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).\n- CVE-2024-53048: ice: fix crash on probe for DPLL enabled E810 LOM (bsc#1233721).\n- CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).\n- CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).\n- CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).\n- CVE-2024-53058: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (bsc#1233552).\n- CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (bsc#1233570).\n- CVE-2024-53082: virtio_net: Add hash_key_length check (bsc#1233573).\n- CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).\n- CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (bsc#1234085).\n- CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (bsc#1234078).\n- CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1234223).\n\nThe following non-security bugs were fixed:\n\n- 9p: explicitly deny setlease attempts (git-fixes).\n- ACPI: CPPC: Add support for setting EPP register in FFH (stable-fixes).\n- ACPI: CPPC: Fix _CPC register setting issue (git-fixes).\n- ACPI: CPPC: Make rmw_lock a raw_spin_lock (git-fixes).\n- ACPI: EC: Do not release locks during operation region accesses (stable-fixes).\n- ACPI: PAD: fix crash in exit_round_robin() (stable-fixes).\n- ACPI: PRM: Clean up guid type in struct prm_handler_info (git-fixes).\n- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (git-fixes).\n- ACPI: battery: Fix possible crash when unregistering a battery hook (git-fixes).\n- ACPI: battery: Simplify battery hook locking (stable-fixes).\n- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (stable-fixes).\n- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add another DMI match for the TongFang GMxXGxx (stable-fixes).\n- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (stable-fixes).\n- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (stable-fixes).\n- ACPICA: iasl: handle empty connection_node (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: cleanup sdw_intel_scan_controller (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: fetch fwnode once in sdw_intel_scan_controller() (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: simplify sdw-master-count property read (stable-fixes).\n- ALSA: 6fire: Release resources at card release (git-fixes).\n- ALSA: Reorganize kerneldoc parameter names (stable-fixes).\n- ALSA: ac97: bus: Fix the mistake in the comment (git-fixes).\n- ALSA: asihpi: Fix potential OOB array access (stable-fixes).\n- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ALSA: core: add isascii() check to card ID generator (stable-fixes).\n- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (git-fixes).\n- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (git-fixes).\n- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (stable-fixes).\n- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (git-fixes).\n- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (git-fixes).\n- ALSA: hda/conexant: fix Z60MR100 startup pop issue (stable-fixes).\n- ALSA: hda/conexant: fix some typos (stable-fixes).\n- ALSA: hda/cs8409: Fix possible NULL dereference (git-fixes).\n- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs (bsc#1219803).\n- ALSA: hda/realtek - Fixed Clevo platform headset Mic issue (stable-fixes).\n- ALSA: hda/realtek - update set GPIO3 to default for Thinkpad with ALC1318 (git-fixes).\n- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (stable-fixes).\n- ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (stable-fixes).\n- ALSA: hda/realtek: Apply quirk for Medion E15433 (bsc#1233298).\n- ALSA: hda/realtek: Enable mic on Vaio VJFH52 (stable-fixes).\n- ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (stable-fixes).\n- ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform (bsc#1233298).\n- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (bsc#1233298).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 (stable-fixes).\n- ALSA: hda/realtek: Fix the push button function for the ALC257 (git-fixes).\n- ALSA: hda/realtek: Limit internal Mic boost on Dell platform (stable-fixes).\n- ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init (stable-fixes).\n- ALSA: hda/realtek: Set PCBeep to default value for ALC274 (stable-fixes).\n- ALSA: hda/realtek: Update ALC225 depop procedure (git-fixes).\n- ALSA: hda/realtek: Update ALC256 depop procedure (git-fixes).\n- ALSA: hda/realtek: Update default depop procedure (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8 (stable-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10 (stable-fixes).\n- ALSA: hda/realtek: tas2781: Fix ROG ALLY X audio (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects (stable-fixes).\n- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE (git-fixes).\n- ALSA: hda: Poll jack events for LS7A HD-Audio (stable-fixes).\n- ALSA: hda: Show the codec quirk info at probing (stable-fixes).\n- ALSA: hda: Sound support for HP Spectre x360 16 inch model 2024 (stable-fixes).\n- ALSA: hda: tas2781: Fix missing setup at runtime PM (bsc#1230132).\n- ALSA: hdsp: Break infinite MIDI input flush loop (stable-fixes).\n- ALSA: ice1712: Remove redundant code in stac9460_dac_vol_put (stable-fixes).\n- ALSA: line6: add hw monitor volume control to POD HD500X (stable-fixes).\n- ALSA: line6: update contact information (stable-fixes).\n- ALSA: mixer_oss: Remove some incorrect kfree_const() usages (git-fixes).\n- ALSA: pcm: Add sanity NULL check for the default mmap fault handler (stable-fixes).\n- ALSA: silence integer wrapping warning (stable-fixes).\n- ALSA: ump: Fix evaluation of MIDI 1.0 FB info (git-fixes).\n- ALSA: us122l: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ALSA: usb-audio: Add Pioneer DJ/AlphaTheta DJM-A9 Mixer (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET (stable-fixes).\n- ALSA: usb-audio: Add input value sanity checks for standard types (stable-fixes).\n- ALSA: usb-audio: Add logitech Audio profile quirk (stable-fixes).\n- ALSA: usb-audio: Add native DSD support for Luxman D-08u (stable-fixes).\n- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1232768).\n- ALSA: usb-audio: Add quirks for Dell WD19 dock (stable-fixes).\n- ALSA: usb-audio: Define macros for quirk table entries (stable-fixes).\n- ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (stable-fixes).\n- ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).\n- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (stable-fixes).\n- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (git-fixes).\n- ALSA: usb-audio: Make mic volume workarounds globally applicable (stable-fixes).\n- ALSA: usb-audio: Replace complex quirk lines with macros (stable-fixes).\n- ALSA: usb-audio: Use snprintf instead of sprintf in build_mixer_unit_ctl (stable-fixes).\n- ALSA: usb-audio: add mixer mapping for Corsair HS80 (stable-fixes).\n- ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ASoC: Intel: avs: da7219: Remove suspend_pre() and resume_post() (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (stable-fixes).\n- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (git-fixes).\n- ASoC: Intel: sst: Support LPE0F28 ACPI HID (stable-fixes).\n- ASoC: SOF: Add i2s bt dai configuration support for AMD platforms (bsc#1233305).\n- ASoC: SOF: Add support for configuring PDM interface from topology (bsc#1233305).\n- ASoC: SOF: Deprecate invalid enums in IPC3 (bsc#1233305).\n- ASoC: SOF: IPC4: get pipeline priority from topology (bsc#1233305).\n- ASoC: SOF: IPC4: synchronize fw_config_params with fw definitions (bsc#1233305).\n- ASoC: SOF: Refactor sof_i2s_tokens reading to update acpbt dai (bsc#1233305).\n- ASoC: SOF: Rename amd_bt sof_dai_type (bsc#1233305).\n- ASoC: SOF: Wire up buffer flags (bsc#1233305).\n- ASoC: SOF: add alignment for topology header file struct definition (bsc#1233305).\n- ASoC: SOF: align topology header file with sof topology header (bsc#1233305).\n- ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index (git-fixes).\n- ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai() (git-fixes).\n- ASoC: SOF: ipc4-control: Add support for ALSA enum control (bsc#1233305).\n- ASoC: SOF: ipc4-control: Add support for ALSA switch control (bsc#1233305).\n- ASoC: SOF: ipc4-mtrace: move debug slot related definitions to header.h (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add deep buffer size to debug prints (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add module ID print during module set up (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Helper to find an swidget by module/instance id (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (bsc#1233305).\n- ASoC: SOF: ipc4-topology: change chain_dma handling in dai_config (bsc#1233305).\n- ASoC: SOF: ipc4-topology: export sof_ipc4_copier_is_single_format (bsc#1233305).\n- ASoC: SOF: ipc4-topology: set config_length based on device_count (bsc#1233305).\n- ASoC: SOF: ipc4: Add data struct for module notification message from firmware (bsc#1233305).\n- ASoC: SOF: ipc4: Add new message type: SOF_IPC4_GLB_LOAD_LIBRARY_PREPARE (bsc#1233305).\n- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits (git-fixes).\n- ASoC: SOF: topology: Parse DAI type token for dspless mode (bsc#1233305).\n- ASoC: SOF: topology: dynamically allocate and store DAI widget-\u003eprivate (bsc#1233305).\n- ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA (stable-fixes).\n- ASoC: amd: yc: Add quirk for HP Dragonfly pro one (stable-fixes).\n- ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (git-fixes).\n- ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA (stable-fixes).\n- ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6 (stable-fixes).\n- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022 (stable-fixes).\n- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized (git-fixes).\n- ASoC: audio-graph-card2: Purge absent supplies for device tree nodes (stable-fixes).\n- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (git-fixes).\n- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (stable-fixes).\n- ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work() (stable-fixes).\n- ASoC: codecs: wsa883x: Handle reading version failure (stable-fixes).\n- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (git-fixes).\n- ASoC: dapm: fix bounds checker error in dapm_widget_list_create (git-fixes).\n- ASoC: fsl_micfil: Add sample rate constraint (stable-fixes).\n- ASoC: fsl_micfil: fix regmap_write_bits usage (git-fixes).\n- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (stable-fixes).\n- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m (git-fixes).\n- ASoC: max98388: Fix missing increment of variable slot_found (git-fixes).\n- ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec (git-fixes).\n- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (git-fixes).\n- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (stable-fixes).\n- ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c (git-fixes).\n- ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue (stable-fixes).\n- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (git-fixes).\n- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (stable-fixes).\n- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (stable-fixes).\n- ASoC: tas2781: Add new driver version for tas2563 \u0026 tas2781 qfn chip (stable-fixes).\n- ASoC: tas2781: Use of_property_read_reg() (stable-fixes).\n- Bluetooth: Call iso_exit() on module unload (git-fixes).\n- Bluetooth: ISO: Fix multiple init when debugfs is disabled (git-fixes).\n- Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (git-fixes).\n- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (git-fixes).\n- Bluetooth: Remove debugfs directory on module init failure (git-fixes).\n- Bluetooth: bnep: fix wild-memory-access in proto_unregister (git-fixes).\n- Bluetooth: btintel: Direct exception event to bluetooth stack (git-fixes).\n- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test (bsc#1230557)\n- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 (stable-fixes).\n- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (git-fixes).\n- Bluetooth: fix use-after-free in device_for_each_child() (git-fixes).\n- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (git-fixes).\n- Bluetooth: hci_core: Fix calling mgmt_device_connected (git-fixes).\n- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (git-fixes).\n- Documentation: kgdb: Correct parameter error (git-fixes).\n- HID: Ignore battery for all ELAN I2C-HID devices (stable-fixes).\n- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (git-fixes).\n- HID: core: zero-initialize the report buffer (git-fixes).\n- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk (stable-fixes).\n- HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (stable-fixes).\n- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (stable-fixes).\n- HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (stable-fixes).\n- HID: multitouch: Add support for B2402FVA track point (stable-fixes).\n- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (stable-fixes).\n- HID: multitouch: Add support for lenovo Y9000P Touchpad (stable-fixes).\n- HID: plantronics: Workaround for an unexcepted opposite volume key (stable-fixes).\n- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (git-fixes).\n- HID: wacom: fix when get product name maybe null pointer (git-fixes).\n- Input: adp5589-keys - fix NULL pointer dereference (git-fixes).\n- Input: adp5589-keys - fix adp5589_gpio_get_value() (git-fixes).\n- Input: edt-ft5x06 - fix regmap leak when probe fails (git-fixes).\n- Input: hideep - add missing dependency on REGMAP_I2C (git-fixes).\n- Input: hycon-hy46xx - add missing dependency on REGMAP_I2C (git-fixes).\n- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (stable-fixes).\n- Input: xpad - add GameSir T4 Kaleid Controller support (git-fixes).\n- Input: xpad - add GameSir VID for Xbox One controllers (git-fixes).\n- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller (git-fixes).\n- Input: xpad - add support for MSI Claw A1M (git-fixes).\n- Input: xpad - add support for Machenike G5 Pro Controller (git-fixes).\n- Input: xpad - fix support for some third-party controllers (git-fixes).\n- Input: xpad - sort xpad_device by vendor and product ID (git-fixes).\n- Input: xpad - spelling fixes for \"Xbox\" (git-fixes).\n- KVM: Fix coalesced_mmio_has_room() to avoid premature userspace exit (git-fixes).\n- KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending doorbells (bsc#1215199).\n- KVM: PPC: Book3S HV: Stop using vc-\u003edpdes for nested KVM guests (bsc#1215199).\n- KVM: PPC: Book3S HV: remove unused varible (bsc#1194869).\n- KVM: SEV-ES: Fix svm_get_msr()/svm_set_msr() for KVM_SEV_ES_INIT guests (bsc#1232207).\n- KVM: SEV-ES: Prevent MSR access post VMSA encryption (bsc#1232207).\n- KVM: SVM: Disallow guest from changing userspace's MSR_AMD64_DE_CFG value (git-fixes).\n- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock (git-fixes).\n- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled (git-fixes).\n- KVM: VMX: Set PFERR_GUEST_{FINAL,PAGE}_MASK if and only if the GVA is valid (git-fixes).\n- KVM: Write the per-page \"segment\" when clearing (part of) a guest page (git-fixes).\n- KVM: s390: Change virtual to physical address access in diag 0x258 handler (git-fixes bsc#1232626).\n- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (git-fixes bsc#1231276).\n- KVM: s390: gaccess: Check if guest address is in memslot (git-fixes bsc#1232623).\n- KVM: x86/mmu: Skip emulation on page fault iff 1+ SPs were unprotected (git-fixes).\n- KVM: x86/mmu: Trigger unprotect logic only on write-protection page faults (git-fixes).\n- KVM: x86: Dedup fastpath MSR post-handling logic (git-fixes).\n- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits (git-fixes).\n- KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (git-fixes).\n- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode() (git-fixes).\n- KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (git-fixes).\n- KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- NFS: Avoid unnecessary rescanning of the per-server delegation list (git-fixes).\n- NFS: remove revoked delegation from server's delegation list (git-fixes).\n- NFSD: Fix NFSv4's PUTPUBFH operation (git-fixes).\n- NFSD: Mark filecache \"down\" if init fails (git-fixes).\n- NFSv3: only use NFS timeout for MOUNT when protocols are compatible (bsc#1231016).\n- NFSv4: Fix clearing of layout segments in layoutreturn (git-fixes).\n- PCI: Add ACS quirk for Qualcomm SA8775P (stable-fixes).\n- PCI: Add T_PVPERL macro (git-fixes).\n- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip (stable-fixes).\n- PCI: Fix pci_enable_acs() support for the ACS quirks (bsc#1229019).\n- PCI: Fix reset_method_store() memory leak (git-fixes).\n- PCI: Mark Creative Labs EMU20k2 INTx masking as broken (stable-fixes).\n- PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf() (git-fixes).\n- PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds (git-fixes).\n- PCI: keystone: Add link up check to ks_pcie_other_map_bus() (git-fixes).\n- PCI: keystone: Set mode as Root Complex for \"ti,keystone-pcie\" compatible (git-fixes).\n- PCI: rockchip-ep: Fix address translation unit programming (git-fixes).\n- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix (jsc#PED-10559).\n- RAS/AMD/ATL: Expand helpers for adding and removing base and hole (jsc#PED-10559).\n- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization (jsc#PED-10559).\n- RAS/AMD/ATL: Read DRAM hole base early (jsc#PED-10559).\n- RAS/AMD/ATL: Validate address map when information is gathered (jsc#PED-10559).\n- RDMA/bnxt_re: Add a check for memory allocation (git-fixes)\n- RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (git-fixes)\n- RDMA/bnxt_re: Change the sequence of updating the CQ toggle value (git-fixes)\n- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (git-fixes)\n- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (git-fixes)\n- RDMA/bnxt_re: Fix a possible memory leak (git-fixes)\n- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (git-fixes)\n- RDMA/bnxt_re: Fix incorrect dereference of srq in async event (git-fixes)\n- RDMA/bnxt_re: Fix out of bound check (git-fixes)\n- RDMA/bnxt_re: Fix the GID table length (git-fixes)\n- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters (git-fixes)\n- RDMA/bnxt_re: Fix the usage of control path spin locks (git-fixes)\n- RDMA/bnxt_re: Return more meaningful error (git-fixes)\n- RDMA/bnxt_re: synchronize the qp-handle table array (git-fixes)\n- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)\n- RDMA/cxgb4: Dump vendor specific QP details (git-fixes)\n- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (git-fixes)\n- RDMA/hns: Add mutex_destroy() (git-fixes)\n- RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset (git-fixes)\n- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (git-fixes)\n- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci (git-fixes)\n- RDMA/hns: Fix cpu stuck caused by printings during reset (git-fixes)\n- RDMA/hns: Fix different dgids mapping to the same dip_idx (git-fixes)\n- RDMA/hns: Fix flush cqe error when racing with destroy qp (git-fixes)\n- RDMA/hns: Fix out-of-order issue of requester when setting FENCE (git-fixes)\n- RDMA/hns: Use dev_* printings in hem code instead of ibdev_* (git-fixes)\n- RDMA/hns: Use macro instead of magic number (git-fixes)\n- RDMA/irdma: Fix misspelling of \"accept*\" (git-fixes)\n- RDMA/mad: Improve handling of timed out WRs of mad agent (git-fixes)\n- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (git-fixes).\n- RDMA/mana_ib: use the correct page table index based on hardware page size (git-fixes).\n- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults (git-fixes)\n- RDMA/mlx5: Move events notifier registration to be after device registration (git-fixes)\n- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (git-fixes)\n- RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled (git-fixes).\n- RDMA/rtrs-srv: Avoid null pointer deref during path establishment (git-fixes)\n- RDMA/rxe: Fix the qp flush warnings in req (git-fixes)\n- RDMA/rxe: Set queue pair cur_qp_state when being queried (git-fixes)\n- RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES (git-fixes)\n- RDMA/srpt: Make slab cache names unique (git-fixes)\n- Revert \"ALSA: hda/conexant: Mute speakers at suspend / shutdown\" (bsc#1228269).\n- Revert \"ALSA: hda: Conditionally use snooping for AMD HDMI\" (stable-fixes).\n- Revert \"KEYS: encrypted: Add check for strsep\" (git-fixes).\n- Revert \"KVM: PPC: Book3S HV Nested: Stop forwarding all HFUs to L1\" (bsc#1215199).\n- Revert \"RDMA/core: Fix ENODEV error for iWARP test over vlan\" (git-fixes)\n- Revert \"cgroup: Fix memory leak caused by missing cgroup_bpf_offline\" (bsc#1234108).\n- Revert \"cpufreq: brcmstb-avs-cpufreq: Fix initial command check\" (stable-fixes).\n- Revert \"driver core: Fix uevent_show() vs driver detach race\" (git-fixes).\n- Revert \"ixgbe: Manual AN-37 for troublesome link partners for X550 SFI\" (git-fixes).\n- Revert \"mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K\" (git-fixes).\n- Revert \"ubifs: ubifs_symlink: Fix memleak of inode-\u003ei_link in error path\" (git-fixes).\n- Revert \"usb: gadget: composite: fix OS descriptors w_value logic\" (git-fixes).\n- Revert \"wifi: iwlwifi: remove retry loops in start\" (git-fixes).\n- SUNRPC: Fix integer overflow in decode_rc_list() (git-fixes).\n- SUNRPC: Fixup gss_status tracepoint error output (git-fixes).\n- SUNRPC: Remove BUG_ON call sites (git-fixes).\n- SUNRPC: clnt.c: Remove misleading comment (git-fixes).\n- USB: appledisplay: close race between probe and completion handler (git-fixes).\n- USB: chaoskey: Fix possible deadlock chaoskey_list_lock (git-fixes).\n- USB: chaoskey: fail open after removal (git-fixes).\n- USB: gadget: dummy-hcd: Fix \"task hung\" problem (git-fixes).\n- USB: misc: cypress_cy7c63: check for short transfer (git-fixes).\n- USB: misc: yurex: fix race between read and write (git-fixes).\n- USB: serial: ftdi_sio: Fix atomicity violation in get_serial_info() (git-fixes).\n- USB: serial: io_edgeport: fix use after free in debug printk (git-fixes).\n- USB: serial: option: add Fibocom FG132 0x0112 composition (stable-fixes).\n- USB: serial: option: add Quectel RG650V (stable-fixes).\n- USB: serial: option: add Telit FN920C04 MBIM compositions (stable-fixes).\n- USB: serial: option: add support for Quectel EG916Q-GL (stable-fixes).\n- USB: serial: qcserial: add support for Sierra Wireless EM86xx (stable-fixes).\n- accel/qaic: Fix the for loop used to walk SG table (git-fixes).\n- accel: Use XArray instead of IDR for minors (jsc#PED-11580).\n- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (git-fixes).\n- ad7780: fix division by zero in ad7780_write_raw() (git-fixes).\n- aes-gcm-p10: Use the correct bit to test for P10 (bsc#1232704).\n- amd-pstate: Set min_perf to nominal_perf for active mode performance gov (git-fixes).\n- apparmor: fix 'Do simple duplicate message elimination' (git-fixes).\n- apparmor: test: Fix memory leak for aa_unpack_strdup() (git-fixes).\n- apparmor: use kvfree_sensitive to free data-\u003edata (git-fixes).\n- arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (git-fixes)\n- arm64: cputype: Add Neoverse-N3 definitions (git-fixes)\n- arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (git-fixes)\n- arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay (git-fixes)\n- arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay (git-fixes)\n- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (git-fixes)\n- arm64: dts: imx8qxp: Add VPU subsystem file (git-fixes)\n- arm64: dts: imx93: add nvmem property for eqos (git-fixes)\n- arm64: dts: imx93: add nvmem property for fec1 (git-fixes)\n- arm64: dts: imx93: add ocotp node (git-fixes)\n- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus (git-fixes)\n- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes (git-fixes)\n- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (git-fixes)\n- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (git-fixes)\n- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo (git-fixes)\n- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes (git-fixes)\n- arm64: dts: rockchip: Fix rt5651 compatible value on (git-fixes)\n- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610 (git-fixes)\n- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node (git-fixes)\n- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma (git-fixes)\n- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (git-fixes)\n- arm64: dts: rockchip: Remove undocumented supports-emmc property (git-fixes)\n- arm64: dts: rockchip: fix i2c2 pinctrl-names property on (git-fixes)\n- arm64: dts: rockchip: remove num-slots property from (git-fixes)\n- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone (git-fixes)\n- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (git-fixes).\n- arm64: errata: Expand speculative SSBS workaround once more (git-fixes)\n- arm64: esr: Define ESR_ELx_EC_* constants as UL (git-fixes)\n- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (git-fixes)\n- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS (git-fixes).\n- arm64: probes: Fix simulate_ldr*_literal() (git-fixes)\n- arm64: probes: Fix uprobes for big-endian kernels (git-fixes)\n- arm64: probes: Remove broken LDR (literal) uprobe support (git-fixes)\n- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (git-fixes)\n- arm64: smccc: replace custom COUNT_ARGS() \u0026 CONCATENATE() (git-fixes)\n- arm64: tegra: Move AGX Orin nodes to correct location (git-fixes)\n- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (git-fixes)\n- ata: libata: Set DID_TIME_OUT for commands that actually timed out (git-fixes).\n- ata: libata: avoid superfluous disk spin down + spin up during hibernation (git-fixes).\n- audit: do not WARN_ON_ONCE(!current-\u003emm) in audit_exe_compare() (git-fixes).\n- audit: do not take task_lock() in audit_exe_compare() code path (git-fixes).\n- block: print symbolic error name instead of error code (bsc#1231872).\n- block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (bsc#1229677).\n- bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response (git-fixes).\n- bnxt_en: Fix error recovery for 5760X (P7) chips (git-fixes).\n- bnxt_en: Fix the PCI-AER routines (git-fixes).\n- bnxt_en: Restore PTP tx_avail count in case of skb_pad() error (git-fixes).\n- bnxt_en: refactor reset close code (git-fixes).\n- bpf, arm64: Fix address emission with tag-based KASAN enabled (git-fixes)\n- bpf, arm64: Remove garbage frame for struct_ops trampoline (git-fixes)\n- bpf, lsm: Add disabled BPF LSM hook list (git-fixes).\n- bpf, net: Fix a potential race in do_sock_getsockopt() (git-fixes).\n- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock (git-fixes).\n- bpf, verifier: Correct tail_call_reachable for bpf prog (git-fixes).\n- bpf, vsock: Drop static vsock_bpf_prot initialization (git-fixes).\n- bpf, x64: Remove tail call detection (git-fixes).\n- bpf,perf: Fix perf_event_detach_bpf_prog error handling (git-fixes).\n- bpf: Fail verification for sign-extension of packet data/data_end/data_meta (git-fixes).\n- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (git-fixes).\n- bpf: Fix error message on kfunc arg type mismatch (git-fixes).\n- bpf: Fix helper writes to read-only maps (git-fixes).\n- bpf: Fix tailcall cases in test_bpf (git-fixes).\n- bpf: Fix truncation bug in coerce_reg_to_size_sx() (git-fixes).\n- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types (git-fixes).\n- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers (git-fixes).\n- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (git-fixes).\n- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos (git-fixes).\n- btf, scripts: rust: drop is_rust_module.sh (bsc#1230414 bsc#1229450).\n- btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() (bsc#1233193)\n- btrfs: send: fix invalid clone operation for file that got its size decreased (git-fixes).\n- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (git-fixes).\n- can: c_can: fix {rx,tx}_errors statistics (git-fixes).\n- can: dev: can_set_termination(): allow sleeping GPIOs (git-fixes).\n- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: hi311x: hi3110_can_ist(): fix potential use-after-free (git-fixes).\n- can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics (git-fixes).\n- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: j1939: j1939_session_new(): fix skb reference counting (git-fixes).\n- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation (git-fixes).\n- can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6 (git-fixes).\n- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes (git-fixes).\n- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode (stable-fixes).\n- can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (git-fixes).\n- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (git-fixes).\n- ceph: fix cap ref leak via netfs init_request (bsc#1231384).\n- cgroup/bpf: only cgroup v2 can be attached by bpf programs (bsc#1234108).\n- clk: bcm: bcm53573: fix OF node leak in init (stable-fixes).\n- clk: clk-apple-nco: Add NULL check in applnco_probe (git-fixes).\n- clk: clk-axi-clkgen: make sure to enable the AXI bus clock (git-fixes).\n- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (stable-fixes).\n- clk: imx: clk-scu: fix clk enable state save and restore (git-fixes).\n- clk: imx: fracn-gppll: correct PLL initialization flow (git-fixes).\n- clk: imx: fracn-gppll: fix pll power up (git-fixes).\n- clk: imx: lpcg-scu: SW workaround for errata (e10858) (git-fixes).\n- clk: qcom: clk-alpha-pll: drop lucid-evo pll enabled warning (git-fixes).\n- clk: qcom: clk-alpha-pll: fix lucid 5lpe pll enabled check (git-fixes).\n- clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (git-fixes).\n- clk: renesas: rzg2l: Fix FOUTPOSTDIV clk (git-fixes).\n- clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset (git-fixes).\n- comedi: Flush partial mappings in error case (git-fixes).\n- comedi: ni_routing: tools: Check when the file could not be opened (stable-fixes).\n- config s390x: build ultravisor userspace access into the kernel (bsc#1232090).\n- config.sh: Remove Arm build project, we do not build armv7 configs\n- config: Disable LAM on x86 (bsc#1217845).\n- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems (git-fixes).\n- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (git-fixes).\n- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (git-fixes).\n- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() (git-fixes).\n- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() (git-fixes).\n- cpufreq: loongson2: Unregister platform_driver on failure (git-fixes).\n- cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (git-fixes).\n- crypto: aes-gcm-p10 - Use the correct bit to test for P10 (bsc#1232704).\n- crypto: api - Fix liveliness check in crypto_alg_tested (stable-fixes).\n- crypto: bcm - add error check in the ahash_hmac_init function (git-fixes).\n- crypto: caam - Fix the pointer passed to caam_qi_shutdown() (git-fixes).\n- crypto: caam - add error check to caam_rsa_set_priv_key_form (git-fixes).\n- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (git-fixes).\n- crypto: cavium - Fix the if condition to exit loop after timeout (git-fixes).\n- crypto: hisilicon/qm - flush all work before driver removed (bsc#1232075)\n- crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() (git-fixes).\n- crypto: octeontx - Fix authenc setkey (stable-fixes).\n- crypto: octeontx* - Select CRYPTO_AUTHENC (git-fixes).\n- crypto: octeontx2 - Fix authenc setkey (stable-fixes).\n- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (git-fixes).\n- crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTO_SIMD and re-enable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Register modules as SIMD (bsc#1230501 ltc#208632).\n- crypto: qat - remove check after debugfs_create_dir() (git-fixes).\n- crypto: qat - remove faulty arbiter config reset (git-fixes).\n- crypto: qat/qat_4xxx - fix off by one in uof_get_name() (git-fixes).\n- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (git-fixes).\n- cxgb4: Properly lock TX queue for the selftest (git-fixes).\n- cxgb4: add forgotten u64 ivlan cast before shift (git-fixes).\n- cxgb4: unnecessary check for 0 in the free_sge_txq_uld() function (git-fixes).\n- cxl: downgrade a warning message to debug level in cxl_probe_component_regs() (bsc#1229165).\n- dcache: keep dentry_hashtable or d_hash_shift even when not used (git-fixes).\n- debugfs: fix automount d_fsdata usage (git-fixes).\n- devlink: Fix command annotation documentation (git-fixes).\n- dma-fence: Fix reference leak on fence merge failure path (git-fixes).\n- dma-fence: Use kernel's sort for merging fences (git-fixes).\n- dmaengine: sh: rz-dmac: handle configs where one address is zero (git-fixes).\n- dmaengine: ti: k3-udma: Set EOP for all TRs in cyclic BCDMA transfer (git-fixes).\n- doc: rcu: update printed dynticks counter bits (git-fixes).\n- driver core: bus: Fix double free in driver API bus_register() (stable-fixes).\n- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (stable-fixes).\n- drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() (git-fixes).\n- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring (git-fixes).\n- drm/amd/display: Add HDMI DSC native YCbCr422 support (stable-fixes).\n- drm/amd/display: Add disable timeout option (bsc#1231435)\n- drm/amd/display: Adjust VSDB parser for replay feature (stable-fixes).\n- drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944)\n- drm/amd/display: Check null pointer before dereferencing se (stable-fixes).\n- drm/amd/display: Clean up dsc blocks in accelerated mode (stable-fixes).\n- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (stable-fixes).\n- drm/amd/display: Fix brightness level not retained over reboot (git-fixes).\n- drm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe (git-fixes).\n- drm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in hwss_setup_dpp (git-fixes).\n- drm/amd/display: Remove a redundant check in authenticated_dp (stable-fixes).\n- drm/amd/display: Revert \"Check HDCP returned status\" (stable-fixes).\n- drm/amd/display: Round calculated vtotal (stable-fixes).\n- drm/amd/display: Skip to enable dsc if it has been off (stable-fixes).\n- drm/amd/display: Validate backlight caps are sane (stable-fixes).\n- drm/amd/pm: Vangogh: Fix kernel memory out of bounds write (git-fixes).\n- drm/amd: Add some missing straps from NBIO 7.11.0 (git-fixes).\n- drm/amd: Fix initialization mistake for NBIO 7.7.0 (stable-fixes).\n- drm/amd: Guard against bad data for ATIF ACPI method (git-fixes).\n- drm/amdgpu/swsmu: Only force workload setup on init (git-fixes).\n- drm/amdgpu/vcn: enable AV1 on both instances (stable-fixes).\n- drm/amdgpu: Adjust debugfs eviction and IB access permissions (stable-fixes).\n- drm/amdgpu: Adjust debugfs register access permissions (stable-fixes).\n- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (git-fixes).\n- drm/amdgpu: Fix JPEG v4.0.3 register write (git-fixes).\n- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (stable-fixes).\n- drm/amdgpu: fix check in gmc_v9_0_get_vm_pte() (git-fixes).\n- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (git-fixes).\n- drm/amdkfd: Accounting pdd vram_usage for svm (stable-fixes).\n- drm/amdkfd: Fix wrong usage of INIT_WORK() (git-fixes).\n- drm/bridge: anx7625: Drop EDID cache on bridge power off (git-fixes).\n- drm/bridge: it6505: Drop EDID cache on bridge power off (git-fixes).\n- drm/bridge: tc358767: Fix link properties discovery (git-fixes).\n- drm/bridge: tc358768: Fix DSI command tx (git-fixes).\n- drm/etnaviv: Request pages from DMA32 zone on addressing_limited (git-fixes).\n- drm/etnaviv: hold GPU lock across perfmon sampling (git-fixes).\n- drm/i915/gem: fix bitwise and logical AND mixup (git-fixes).\n- drm/i915/hdcp: fix connector refcounting (git-fixes).\n- drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/mediatek: Fix child node refcount handling in early exit (git-fixes).\n- drm/mediatek: Fix get efuse issue for MT8188 DPTX (git-fixes).\n- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (git-fixes).\n- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (git-fixes).\n- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds() (git-fixes).\n- drm/msm/dpu: do not always program merge_3d block (git-fixes).\n- drm/msm/dpu: drop LM_3 / LM_4 on MSM8998 (git-fixes).\n- drm/msm/dpu: drop LM_3 / LM_4 on SDM845 (git-fixes).\n- drm/msm/dpu: make sure phys resources are properly initialized (git-fixes).\n- drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check (git-fixes).\n- drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block (git-fixes).\n- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (git-fixes).\n- drm/msm/dsi: improve/fix dsc pclk calculation (git-fixes).\n- drm/msm/gpu: Check the status of registration to PM QoS (git-fixes).\n- drm/msm: Allocate memory for disp snapshot with kvzalloc() (git-fixes).\n- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (git-fixes).\n- drm/msm: Fix some typos in comment (git-fixes).\n- drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() (git-fixes).\n- drm/omap: Fix locking in omap_gem_new_dmabuf() (git-fixes).\n- drm/omap: Fix possible NULL dereference (git-fixes).\n- drm/panfrost: Add missing OPP table refcnt decremental (git-fixes).\n- drm/panfrost: Remove unused id_mask from struct panfrost_model (git-fixes).\n- drm/radeon: Fix encoder-\u003epossible_clones (git-fixes).\n- drm/rockchip: vop: Fix a dereferenced before check warning (git-fixes).\n- drm/sched: Add locking to drm_sched_entity_modify_sched (git-fixes).\n- drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job (git-fixes).\n- drm/sti: Add __iomem for mixer_dbg_mxn's parameter (git-fixes).\n- drm/sti: avoid potential dereference of error pointers (git-fixes).\n- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (git-fixes).\n- drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (git-fixes).\n- drm/v3d: Address race-condition in MMU flush (git-fixes).\n- drm/v3d: Enable Performance Counters before clearing them (git-fixes).\n- drm/v3d: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (stable-fixes).\n- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush (git-fixes).\n- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load (git-fixes).\n- drm/vc4: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vc4: hdmi: Avoid hang with debug registers when suspended (git-fixes).\n- drm/vc4: hvs: Correct logic on stopping an HVS channel (git-fixes).\n- drm/vc4: hvs: Do not write gamma luts on 2711 (git-fixes).\n- drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer (git-fixes).\n- drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function (git-fixes).\n- drm/vkms: Drop unnecessary call to drm_crtc_cleanup() (git-fixes).\n- drm/vmwgfx: Handle surface check failure correctly (git-fixes).\n- drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (stable-fixes).\n- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS (git-fixes).\n- drm: Expand max DRM device number to full MINORBITS (jsc#PED-11580).\n- drm: Use XArray instead of IDR for minors (jsc#PED-11580).\n- drm: use ATOMIC64_INIT() for atomic64_t (git-fixes).\n- drm: xlnx: zynqmp_dpsub: fix hotplug detection (git-fixes).\n- drm: zynqmp_kms: Unplug DRM device before removal (git-fixes).\n- dwc2: Drop USB dwc2 patch that caused a regression on RPi3 (bsc#1232342)\n- e1000e: Fix S0ix residency on corporate systems (git-fixes).\n- e1000e: Remove Meteor Lake SMBUS workarounds (git-fixes).\n- e1000e: change I219 (19) devices to ADP (git-fixes).\n- e1000e: fix force smbus during suspend flow (git-fixes).\n- e1000e: move force SMBUS near the end of enable_ulp function (git-fixes).\n- efi/libstub: Free correct pointer on failure (git-fixes).\n- efi/libstub: fix efi_parse_options() ignoring the default command line (git-fixes).\n- efi/libstub: zboot.lds: Discard .discard sections (stable-fixes).\n- efi/memattr: Ignore table if the size is clearly bogus (bsc#1231465).\n- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (stable-fixes).\n- eth: bnxt: fix counting packets discarded due to OOM and netpoll (git-fixes).\n- ext4: do not track ranges in fast_commit if inode has inlined data (bsc#1231635).\n- ext4: fix fast commit inode enqueueing during a full journal commit (bsc#1231636).\n- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible() (bsc#1231637).\n- ext4: fix possible tid_t sequence overflows (bsc#1231634).\n- ext4: fix slab-use-after-free in ext4_split_extent_at() (bsc#1232201)\n- ext4: fix unttached inode after power cut with orphan file feature enabled (bsc#1234009).\n- ext4: mark fc as ineligible using an handle in ext4_xattr_set() (bsc#1231640).\n- ext4: use handle to mark fc as ineligible in __track_dentry_update() (bsc#1231639).\n- f2fs: get out of a repeat loop when getting a locked data page (bsc#1234011).\n- fat: fix uninitialized variable (git-fixes).\n- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (stable-fixes).\n- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (git-fixes).\n- fbdev: sisfb: Fix strbuf array overflow (stable-fixes).\n- fgraph: Change the name of cpuhp state to \"fgraph:online\" (git-fixes).\n- fgraph: Fix missing unlock in register_ftrace_graph() (git-fixes).\n- fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks (git-fixes).\n- filemap: remove use of wait bookmarks (bsc#1224088).\n- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (git-fixes).\n- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (git-fixes).\n- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (git-fixes).\n- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (git-fixes).\n- firmware: google: Unregister driver_info on failure (git-fixes).\n- firmware_loader: Fix possible resource leak in fw_log_firmware_info() (git-fixes).\n- fs/9p: drop inodes immediately on non-.L too (git-fixes).\n- fs/9p: fix the cache always being enabled on files with qid flags (git-fixes).\n- fs/ntfs3: Add more attributes checks in mi_enum_attr() (bsc#1233207)\n- fs/ntfs3: Fixed overflow check in mi_enum_attr() (bsc#1233207)\n- fs/ntfs3: Sequential field availability check in mi_enum_attr() (bsc#1233207)\n- fs: Fix uninitialized value issue in from_kuid and from_kgid (git-fixes).\n- genirq/msi: Fix off-by-one error in msi_domain_alloc() (git-fixes).\n- goldfish: Fix unused const variable 'goldfish_pipe_acpi_match' (git-fixes).\n- gpio: aspeed: Add the flush write to ensure the write complete (git-fixes).\n- gpio: aspeed: Use devm_clk api to manage clock source (git-fixes).\n- gpio: davinci: fix lazy disable (git-fixes).\n- gpio: exar: set value when external pull-up or pull-down is present (git-fixes).\n- gpio: zevio: Add missed label initialisation (git-fixes).\n- gve: Fix XDP TX completion handling when counters overflow (git-fixes).\n- gve: Fix an edge case for TSO skb validity check (git-fixes).\n- gve: ignore nonrelevant GSO type bits when processing TSO headers (git-fixes).\n- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (git-fixes).\n- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (git-fixes).\n- hv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer (git-fixes).\n- hwmon: (adm9240) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (adt7470) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (max16065) Fix alarm attributes (git-fixes).\n- hwmon: (max16065) Remove use of i2c_match_id() (stable-fixes).\n- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list (stable-fixes).\n- hwmon: (nct6775-core) Fix overflows seen when writing limit attributes (git-fixes).\n- hwmon: (tmp513) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (tps23861) Fix reporting of negative temperatures (git-fixes).\n- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature (git-fixes).\n- i2c: core: Setup i2c_adapter runtime-pm before calling device_add() (git-fixes).\n- i2c: core: fix lockdep warning for sparsely nested adapter chain (git-fixes).\n- i2c: cpm: Remove linux,i2c-index conversion from be32 (git-fixes).\n- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set (git-fixes).\n- i2c: exynos5: Calculate t_scl_l, t_scl_h according to i2c spec (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell Precision 3540 (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell XPS 15 7590 (git-fixes).\n- i2c: i801: Use a different adapter-name for IDF adapters (stable-fixes).\n- i2c: i801: add helper i801_restore_regs (git-fixes).\n- i2c: ismt: kill transaction in hardware on timeout (git-fixes).\n- i2c: ocores: Move system PM hooks to the NOIRQ phase (git-fixes).\n- i2c: ocores: Remove #ifdef guards for PM related functions (git-fixes).\n- i2c: omap: switch to NOIRQ_SYSTEM_SLEEP_PM_OPS() and RUNTIME_PM_OPS() (git-fixes).\n- i2c: omap: wakeup the controller during suspend() callback (git-fixes).\n- i2c: rcar: properly format a debug output (git-fixes).\n- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume (git-fixes).\n- i2c: stm32f7: perform most of irq job in threaded handler (git-fixes).\n- i2c: synquacer: Deal with optional PCLK correctly (git-fixes).\n- i2c: synquacer: Remove a clk reference from struct synquacer_i2c (stable-fixes).\n- i2c: xiic: Try re-initialization on bus busy timeout (git-fixes).\n- i2c: xiic: improve error message when transfer fails to start (stable-fixes).\n- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (git-fixes).\n- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition (stable-fixes).\n- i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- i40e: Fix XDP program unloading while removing the driver (git-fixes).\n- i40e: Report MFS in decimal base instead of hex (git-fixes).\n- i40e: fix race condition by adding filter's intermediate sync state (git-fixes).\n- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (git-fixes).\n- iavf: Fix TC config comparison with existing adapter TC config (git-fixes).\n- ice: Fix VSI list rule with ICE_SW_LKUP_LAST type (git-fixes).\n- ice: Fix checking for unsupported keys on non-tunnel device (git-fixes).\n- ice: Fix lldp packets dropping after changing the number of channels (git-fixes).\n- ice: Fix netif_is_ice() in Safe Mode (git-fixes).\n- ice: Fix package download algorithm (git-fixes).\n- ice: Fix recipe read procedure (git-fixes).\n- ice: Fix reset handler (git-fixes).\n- ice: Flush FDB entries before reset (git-fixes).\n- ice: Interpret .set_channels() input differently (git-fixes).\n- ice: Rebuild TC queues on VSI queue reconfiguration (git-fixes).\n- ice: Reject pin requests with unsupported flags (git-fixes).\n- ice: add flag to distinguish reset from .ndo_bpf in XDP rings config (git-fixes).\n- ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (git-fixes).\n- ice: avoid IRQ collision to fix init failure on ACPI S3 resume (git-fixes).\n- ice: clear port vlan config during reset (git-fixes).\n- ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins (git-fixes).\n- ice: do not bring the VSI up, if it was down before the XDP setup (git-fixes).\n- ice: do not busy wait for Rx queue disable in ice_qp_dis() (git-fixes).\n- ice: fix 200G PHY types to link speed mapping (git-fixes).\n- ice: fix 200G link speed message log (git-fixes).\n- ice: fix ICE_LAST_OFFSET formula (git-fixes).\n- ice: fix VLAN replay after reset (git-fixes).\n- ice: fix VSI lists confusion when adding VLANs (git-fixes).\n- ice: fix accounting for filters shared by multiple VSIs (git-fixes).\n- ice: fix accounting if a VLAN already exists (git-fixes).\n- ice: fix iteration of TLVs in Preserved Fields Area (git-fixes).\n- ice: fix page reuse when PAGE_SIZE is over 8k (git-fixes).\n- ice: fix reads from NVM Shadow RAM on E830 and E825-C devices (git-fixes).\n- ice: fix truesize operations for PAGE_SIZE \u003e= 8192 (git-fixes).\n- ice: implement AQ download pkg retry (git-fixes).\n- ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors() (git-fixes).\n- ice: remove af_xdp_zc_qps bitmap (git-fixes).\n- ice: replace synchronize_rcu with synchronize_net (git-fixes).\n- ice: respect netif readiness in AF_XDP ZC related ndo's (git-fixes).\n- ice: set correct dst VSI in only LAN filters (git-fixes).\n- ice: tc: allow zero flags in parsing tc flower (git-fixes).\n- ice: tc: check src_vsi in case of traffic from VF (git-fixes).\n- ice: use proper macro for testing bit (git-fixes).\n- idpf: Interpret .set_channels() input differently (git-fixes).\n- idpf: avoid bloating \u0026idpf_q_vector with big %NR_CPUS (git-fixes).\n- idpf: do not enable NAPI and interrupts prior to allocating Rx buffers (git-fixes).\n- idpf: do not skip over ethtool tcp-data-split setting (git-fixes).\n- idpf: fix UAFs when destroying the queues (git-fixes).\n- idpf: fix memleak in vport interrupt configuration (git-fixes).\n- idpf: fix memory leaks and crashes while performing a soft reset (git-fixes).\n- ieee802154: Fix build error (git-fixes).\n- igb: Always call igb_xdp_ring_update_tail() under Tx lock (git-fixes).\n- igb: Disable threaded IRQ for igb_msix_other (git-fixes).\n- igb: Fix not clearing TimeSync interrupts for 82580 (git-fixes).\n- igc: Fix double reset adapter triggered from a single taprio cmd (git-fixes).\n- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (git-fixes).\n- igc: Fix qbv tx latency by setting gtxoffset (git-fixes).\n- igc: Fix qbv_config_change_errors logics (git-fixes).\n- igc: Fix reset adapter logics when tx mode change (git-fixes).\n- igc: Unlock on error in igc_io_resume() (git-fixes).\n- iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (git-fixes).\n- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling (git-fixes).\n- iio: accel: kx022a: Fix raw read format (git-fixes).\n- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (git-fixes).\n- iio: adc: ad7606: Fix typo in the driver name (git-fixes).\n- iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer (git-fixes).\n- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (git-fixes).\n- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts: Fix uninitialized symbol 'ret' (git-fixes).\n- iio: gts: fix infinite loop for gain_to_scaletables() (git-fixes).\n- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (git-fixes).\n- iio: light: al3010: Fix an error handling path in al3010_probe() (git-fixes).\n- iio: light: opt3001: add missing full-scale range value (git-fixes).\n- iio: light: veml6030: fix ALS sensor resolution (git-fixes).\n- iio: light: veml6030: fix IIO device retrieval from embedded device (git-fixes).\n- iio: light: veml6030: fix microlux value calculation (git-fixes).\n- iio: magnetometer: ak8975: Convert enum-\u003epointer for data in the match tables (stable-fixes).\n- iio: magnetometer: ak8975: Fix 'Unexpected device' error (git-fixes).\n- iio: magnetometer: ak8975: drop incorrect AK09116 compatible (git-fixes).\n- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- ima: fix buffer overrun in ima_eventdigest_init_common (git-fixes).\n- initramfs: avoid filename buffer overrun (bsc#1232436).\n- intel_idle: add Granite Rapids Xeon support (bsc#1231630).\n- intel_idle: fix ACPI _CST matching for newer Xeon platforms (bsc#1231630).\n- io_uring/eventfd: move to more idiomatic RCU free usage (git-fixes).\n- io_uring/io-wq: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/io-wq: inherit cpuset of cgroup in io worker (git-fixes).\n- io_uring/net: harden multishot termination case for recv (git-fixes).\n- io_uring/rw: fix cflags posting for single issue multishot read (git-fixes).\n- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (git-fixes).\n- io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN (git-fixes).\n- io_uring/sqpoll: close race on waiting for sqring entries (git-fixes).\n- io_uring/sqpoll: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/sqpoll: do not put cpumask on stack (git-fixes).\n- io_uring/sqpoll: retain test for whether the CPU is valid (git-fixes).\n- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL (git-fixes).\n- iommu/amd: Allocate the page table root using GFP_KERNEL (git-fixes).\n- iommu/amd: Do not set the D bit on AMD v2 table entries (git-fixes).\n- iommu/amd: Fix typo of , instead of ; (git-fixes).\n- iommu/vt-d: Always reserve a domain ID for identity setup (git-fixes).\n- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (git-fixes).\n- iommufd: Check the domain owner of the parent before creating a nesting domain (git-fixes).\n- iommufd: Protect against overflow of ALIGN() during iova allocation (git-fixes).\n- irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (git-fixes).\n- jbd2: Move j_transaction_overhead_buffers into a hole (bsc#1234042).\n- jbd2: avoid infinite transaction commit loop (bsc#1234039).\n- jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (bsc#1234043).\n- jbd2: avoid mount failed when commit block is partial submitted (bsc#1234040).\n- jbd2: correct the printing of write_flags in jbd2_write_superblock() (bsc#1234045).\n- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit (bsc#1231638).\n- jbd2: fix kernel-doc for j_transaction_overhead_buffers (bsc#1234042).\n- jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (bsc#1234044).\n- jbd2: fix soft lockup in journal_finish_inode_data_buffers() (bsc#1234046).\n- jbd2: make jbd2_journal_get_max_txn_bufs() internal (bsc#1234041).\n- jbd2: precompute number of transaction descriptor blocks (bsc#1234042).\n- jfs: Fix sanity check in dbMount (git-fixes).\n- jfs: Fix uaf in dbFreeBits (git-fixes).\n- jfs: Fix uninit-value access of new_ea in ea_buffer (git-fixes).\n- jfs: UBSAN: shift-out-of-bounds in dbFindBits (git-fixes).\n- jfs: check if leafidx greater than num leaves per dmap tree (git-fixes).\n- jump_label: Fix static_key_slow_dec() yet again (git-fixes).\n- kABI fix of VM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- kABI workaround for ASoC SOF (bsc#1233305).\n- kABI: Restore exported __arm_smccc_sve_check (git-fixes)\n- kABI: bpf: enum bpf_{type_flag,arg_type} kABI workaround (git-fixes).\n- kABI: bpf: struct bpf_insn_acces_aux kABI workaround (git-fixes).\n- kabi, mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes kabi).\n- kasan: Fix Software Tag-Based KASAN with GCC (git-fixes).\n- kasan: move checks to do_strncpy_from_user (git-fixes).\n- kbuild, bpf: Use test-ge check for v1.25-only pahole (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Add module-specific pahole flags for distilled base BTF (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later (bsc#1230414 bsc#1229450).\n- kbuild: avoid too many execution of scripts/pahole-flags.sh (bsc#1230414 bsc#1229450).\n- kbuild: bpf: Tell pahole to DECL_TAG kfuncs (bsc#1230414 bsc#1229450).\n- kconfig: qconf: fix buffer overflow in debug links (git-fixes).\n- kernel-binary: Enable livepatch package only when livepatch is enabled Otherwise the filelist may be empty failing the build (bsc#1218644).\n- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y (git-fixes).\n- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry (git-fixes).\n- keys: Fix overwrite of key expiration on instantiation (git-fixes).\n- kthread: unpark only parked kthread (git-fixes).\n- leds: lp55xx: Remove redundant test for invalid channel number (git-fixes).\n- lib/xarray: introduce a new helper xas_get_order (bsc#1231617).\n- lib: string_helpers: silence snprintf() output truncation warning (git-fixes).\n- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (git-fixes).\n- macsec: do not increment counters for an unrelated SA (git-fixes).\n- mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (git-fixes).\n- maple_tree: correct tree corruption on spanning store (git-fixes).\n- maple_tree: fix alloc node fail issue (git-fixes).\n- maple_tree: refine mas_store_root() on storing NULL (git-fixes).\n- media: Drop the previous HD-audio TAS2781 fix (bsc#1230132)\n- media: adv7604: prevent underflow condition when reporting colorspace (git-fixes).\n- media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: amphion: Set video drvdata before register video device (git-fixes).\n- media: ar0521: do not overflow when checking PLL values (git-fixes).\n- media: atomisp: Add check for rgby_data memory allocation failure (git-fixes).\n- media: bttv: use audio defaults for winfast2000 (git-fixes).\n- media: core: v4l2-ioctl: check if ioctl is known to avoid NULL name (git-fixes).\n- media: cx24116: prevent overflows on SNR calculus (git-fixes).\n- media: dvb_frontend: do not play tricks with underflow values (git-fixes).\n- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (stable-fixes).\n- media: dvbdev: prevent the risk of out of memory access (git-fixes).\n- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (git-fixes).\n- media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: i2c: imx335: Enable regulator supplies (stable-fixes).\n- media: i2c: tc358743: Fix crash in the probe error path when using polling (git-fixes).\n- media: imx-jpeg: Ensure power suppliers be suspended before detach them (git-fixes).\n- media: imx-jpeg: Set video drvdata before register video device (git-fixes).\n- media: imx335: Fix reset-gpio handling (git-fixes).\n- media: mantis: remove orphan mantis_core.h (git-fixes).\n- media: mtk-jpeg: Fix null-ptr-deref during unload module (git-fixes).\n- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (git-fixes).\n- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (git-fixes).\n- media: platform: exynos4-is: Fix an OF node reference leak in fimc_md_is_isp_available (git-fixes).\n- media: pulse8-cec: fix data timestamp at pulse8_setup() (git-fixes).\n- media: s5p-jpeg: prevent buffer overflows (git-fixes).\n- media: stb0899_algo: initialize cfr before using it (git-fixes).\n- media: ts2020: fix null-ptr-deref in ts2020_probe() (git-fixes).\n- media: uvcvideo: Require entities to have a non-zero unique ID (git-fixes).\n- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (git-fixes).\n- media: uvcvideo: Stop stream during unregister (git-fixes).\n- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (git-fixes).\n- media: v4l2-tpg: prevent the risk of a division by zero (git-fixes).\n- media: vb2: Fix comment (git-fixes).\n- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() (stable-fixes).\n- media: videobuf2: fix typo: vb2_dbuf -\u003e vb2_qbuf (git-fixes).\n- media: wl128x: Fix atomicity violation in fmc_send_cmd() (git-fixes).\n- mei: use kvmalloc for read buffer (git-fixes).\n- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).\n- mfd: rt5033: Fix missing regmap_del_irq_chip() (git-fixes).\n- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (git-fixes).\n- minmax: avoid overly complex min()/max() macro arguments in xen (git-fixes).\n- minmax: scsi: fix mis-use of 'clamp()' in sr.c (git-fixes).\n- misc: apds990x: Fix missing pm_runtime_disable() (git-fixes).\n- mlx5: avoid truncating error message (git-fixes).\n- mlx5: stop warning for 64KB pages (git-fixes).\n- mlxbf_gige: disable RX filters until RX path initialized (git-fixes).\n- mm/filemap: optimize filemap folio adding (bsc#1231617).\n- mm/filemap: return early if failed to allocate memory for split (bsc#1231617).\n- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (bsc#1234012).\n- mm: avoid unsafe VMA hook invocation when error arises on mmap hook (git-fixes).\n- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point (git-fixes).\n- mm: mmap: no need to call khugepaged_enter_vma() for stack (jsc#PED-10978).\n- mm: move dummy_vm_ops out of a header (git-fixes prerequisity).\n- mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes).\n- mm: refactor map_deny_write_exec() (git-fixes).\n- mm: resolve faulty mmap_region() error path behaviour (git-fixes).\n- mm: unconditionally close VMAs on error (git-fixes).\n- mmc: core: Further prevent card detect during shutdown (git-fixes).\n- mmc: mmc_spi: drop buggy snprintf() (git-fixes).\n- mmc: sunxi-mmc: Fix A100 compatible description (git-fixes).\n- modpost: fix acpi MODULE_DEVICE_TABLE built with mismatched endianness (git-fixes).\n- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (git-fixes).\n- modpost: remove incorrect code in do_eisa_entry() (git-fixes).\n- module: abort module loading when sysfs setup suffer errors (git-fixes).\n- mtd: rawnand: atmel: Fix possible memory leak (git-fixes).\n- mtd: spi-nor: core: replace dummy buswidth from addr to data (git-fixes).\n- nbd: fix race between timeout and normal completion (bsc#1230918).\n- net/mlx5: Add missing masks and QoS bit masks for scheduling elements (git-fixes).\n- net/mlx5: Added cond_resched() to crdump collection (git-fixes).\n- net/mlx5: Check capability for fw_reset (git-fixes).\n- net/mlx5: Check for invalid vector index on EQ creation (git-fixes).\n- net/mlx5: Explicitly set scheduling element and TSAR type (git-fixes).\n- net/mlx5: Fix command bitmask initialization (git-fixes).\n- net/mlx5: Fix error handling in irq_pool_request_irq (git-fixes).\n- net/mlx5: Lag, do bond only if slaves agree on roce state (git-fixes).\n- net/mlx5: Lag, do not use the hardcoded value of the first port (git-fixes).\n- net/mlx5: Stop waiting for PCI if pci channel is offline (git-fixes).\n- net/mlx5: Unregister notifier on eswitch init failure (git-fixes).\n- net/mlx5: Update the list of the PCI supported devices (git-fixes).\n- net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (git-fixes).\n- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map (git-fixes).\n- net/mlx5e: Add missing link modes to ptys2ethtool_map (git-fixes).\n- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (git-fixes).\n- net/mlx5e: Correctly report errors for ethtool rx flows (git-fixes).\n- net/mlx5e: Do not call cleanup on profile rollback failure (git-fixes).\n- net/mlx5e: Fix IPsec tunnel mode offload feature check (git-fixes).\n- net/mlx5e: Fix UDP GSO for encapsulated packets (git-fixes).\n- net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (git-fixes).\n- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (git-fixes).\n- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (git-fixes).\n- net: mana: Implement get_ringparam/set_ringparam for mana (bsc#1229891).\n- net: mana: Improve mana_set_channels() in low mem conditions (bsc#1230289).\n- net: mdio-ipq4019: add missing error check (git-fixes).\n- net: phy: Remove LED entry from LEDs list on unregister (git-fixes).\n- net: phy: bcm84881: Fix some error handling paths (git-fixes).\n- net: phy: dp83822: Fix reset pin definitions (git-fixes).\n- net: phy: dp83869: fix memory corruption when enabling fiber (git-fixes).\n- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (git-fixes).\n- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (git-fixes).\n- net: qede: use return from qede_parse_actions() (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flow_spec (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flower (git-fixes).\n- net: relax socket state check at accept time (git-fixes).\n- net: stmmac: dwmac-tegra: Fix link bring-up sequence (git-fixes)\n- net: sysfs: Fix /sys/class/net/\u0026lt;iface\u003e path for statistics (git-fixes).\n- net: test for not too small csum_start in virtio_net_hdr_to_skb() (git-fixes).\n- net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (git-fixes).\n- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (git-fixes).\n- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (git-fixes).\n- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (stable-fixes).\n- net: usb: usbnet: fix name regression (get-fixes).\n- net: usb: usbnet: fix race in probe failure (git-fixes).\n- net: wwan: fix global oob in wwan_rtnl_policy (git-fixes).\n- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() (git-fixes).\n- net: xfrm: preserve kabi for xfrm_state (bsc#1233754).\n- netdevsim: copy addresses for both in and out paths (git-fixes).\n- netdevsim: use cond_resched() in nsim_dev_trap_report_work() (git-fixes).\n- netfilter: nf_tables: missing iterator type in lookup walk (git-fixes).\n- nfs: Fix KMSAN warning in decode_getfattr_attrs() (git-fixes).\n- nfs: avoid i_lock contention in nfs_clear_invalid_mapping (git-fixes).\n- nfs: fix memory leak in error path of nfs4_do_reclaim (git-fixes).\n- nfsd: call cache_put if xdr_reserve_space returns NULL (git-fixes).\n- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (git-fixes).\n- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (git-fixes).\n- nfsd: fix refcount leak when file is unhashed after being found (git-fixes).\n- nfsd: map the EBADMSG to nfserr_io to avoid warning (git-fixes).\n- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (git-fixes).\n- nfsd: remove unsafe BUG_ON from set_change_info (bsc#1234121).\n- nfsd: return -EINVAL when namelen is 0 (git-fixes).\n- nilfs2: fix kernel bug due to missing clearing of buffer delay flag (git-fixes).\n- nilfs2: fix potential deadlock with newly created symlinks (git-fixes).\n- nouveau/dmem: Fix privileged error in copy engine channel (git-fixes).\n- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (git-fixes).\n- nouveau/dp: handle retries for AUX CH transfers with GSP (git-fixes).\n- nouveau/gsp: Avoid addressing beyond end of rpc-\u003eentries (stable-fixes).\n- nouveau: fw: sync dma after setup is called (git-fixes).\n- nouveau: handle EBUSY and EAGAIN for GSP aux errors (git-fixes).\n- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- ntfs3: Add bounds checking to mi_enum_attr() (bsc#1233207)\n- nvme-fabrics: fix kernel crash while shutting down controller (git-fixes).\n- nvme-loop: flush off pending I/O while shutting down loop controller (git-fixes).\n- nvme-multipath: suppress partition scan until the disk is ready (bsc#1228244).\n- nvme-pci: fix freeing of the HMB descriptor table (git-fixes).\n- nvme-pci: fix race condition between reset and nvme_dev_disable() (git-fixes).\n- nvme-pci: qdepth 1 quirk (git-fixes).\n- nvme-pci: reverse request order in nvme_queue_rqs (git-fixes).\n- nvme-pci: set doorbell config before unquiescing (git-fixes).\n- nvme/host: Fix RCU list traversal to use SRCU primitive (git-fixes).\n- nvme: disable CC.CRIME (NVME_CC_CRIME) (jsc#PED-9901).\n- nvme: null terminate nvme_tls_attrs (git-fixes).\n- nvme: re-fix error-handling for io_uring nvme-passthrough (git-fixes).\n- nvme: tcp: avoid race between queue_lock lock and destroy (git-fixes).\n- nvmet-auth: assign dh_key to NULL after kfree_sensitive (git-fixes).\n- ocfs2: Drop OCFS2 patch causing a regression (bsc#1233255)\n- ocfs2: fix UBSAN warning in ocfs2_verify_volume() (git-fixes).\n- ocfs2: fix the la space leak when unmounting an ocfs2 volume (git-fixes).\n- ocfs2: fix uninit-value in ocfs2_get_block() (git-fixes).\n- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (git-fixes).\n- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (git-fixes).\n- ocfs2: uncache inode which has failed entering the group (git-fixes).\n- of: Add cleanup.h based auto release via __free(device_node) markings (bsc#1232386)\n- parport: Proper fix for array out-of-bounds access (git-fixes).\n- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check (git-fixes).\n- phy: qcom: qmp-combo: move driver data initialisation earlier (git-fixes).\n- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend (git-fixes).\n- phy: tegra: xusb: Add error pointer check in xusb.c (git-fixes).\n- phy: ti: phy-j721e-wiz: fix usxgmii configuration (git-fixes).\n- pinctrl: apple: check devm_kasprintf() returned value (git-fixes).\n- pinctrl: k210: Undef K210_PC_DEFAULT (git-fixes).\n- pinctrl: ocelot: fix system hang on level based interrupts (stable-fixes).\n- pinctrl: qcom: spmi: fix debugfs drive strength (git-fixes).\n- pinctrl: zynqmp: drop excess struct member description (git-fixes).\n- platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (git-fixes).\n- platform/x86/amd/pmc: Detect when STB is not available (git-fixes).\n- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug (git-fixes).\n- platform/x86: dell-sysman: add support for alienware products (stable-fixes).\n- platform/x86: dell-wmi: Ignore suspend notifications (stable-fixes).\n- platform/x86: lenovo-ymc: Ignore the 0x0 state (stable-fixes).\n- platform/x86: panasonic-laptop: Return errno correctly in show callback (git-fixes).\n- platform/x86: touchscreen_dmi: add nanote-next quirk (stable-fixes).\n- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (bsc#1234098).\n- power: reset: brcmstb: Do not go into infinite loop if reset fails (stable-fixes).\n- power: supply: bq27xxx: Fix registers of bq27426 (git-fixes).\n- power: supply: core: Remove might_sleep() from power_supply_put() (git-fixes).\n- power: supply: rt9471: Fix wrong WDT function regfield declaration (git-fixes).\n- power: supply: rt9471: Use IC status regfield to report real charger status (git-fixes).\n- powercap: intel_rapl: Fix off by one in get_rpi() (git-fixes).\n- powerpc/64: Convert patch_instruction() to patch_u32() (bsc#1194869).\n- powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0 (bsc#1215199).\n- powerpc/atomic: Use YZ constraints for DS-form instructions (bsc#1194869).\n- powerpc/boot: Handle allocation failure in simple_realloc() (bsc#1194869).\n- powerpc/boot: Only free if realloc() succeeds (bsc#1194869).\n- powerpc/code-patching: Add generic memory patching (bsc#1194869).\n- powerpc/code-patching: Perform hwsync in __patch_instruction() in case of failure (bsc#1194869).\n- powerpc/crypto: do not build aes-gcm-p10 by default (bsc#1230501 ltc#208632).\n- powerpc/crypto: fix missing skcipher dependency for aes-gcm-p10 (bsc#1230501 ltc#208632).\n- powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (bsc#1215199).\n- powerpc/fadump: Refactor and prepare fadump_cma_init for late init (bsc#1215199).\n- powerpc/kexec: Fix return of uninitialized variable (bsc#1194869).\n- powerpc/mm/fault: Fix kfence page fault reporting (bsc#1194869).\n- powerpc/mm: Fix boot crash with FLATMEM (bsc#1194869).\n- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL (bsc#1194869).\n- powerpc/powernv: Free name on error in opal_event_init() (bsc#1194869).\n- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (bsc#1194869).\n- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (bsc#1194869).\n- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct (bsc#1215199).\n- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace (bsc#1194869).\n- powerpc/vdso: Inconditionally use CFUNC macro (bsc#1215199).\n- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (bsc#1194869).\n- powerpc/xmon: Fix disassembly CPU feature checks (bsc#1065729).\n- printk: Add notation to console_srcu locking (bsc#1232183).\n- pwm: imx-tpm: Use correct MODULO value for EPWM mode (git-fixes).\n- qed: avoid truncating work queue length (git-fixes).\n- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (bsc#1226631).\n- rcu: Fix buffer overflow in print_cpu_stall_info() (bsc#1226623).\n- regmap: detach regmap from dev on regmap_exit (git-fixes).\n- regmap: irq: Set lockdep class for hierarchical IRQ domains (git-fixes).\n- rpm/check-for-config-changes: add HAVE_RUST and RUSTC_SUPPORTS_ to IGNORED_CONFIGS_RE They depend on SHADOW_CALL_STACK.\n- rpm/release-projects: Add SLFO projects (bsc#1231293).\n- rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation. (bsc#1218644)\n- rpmsg: glink: Handle rejected intent request better (git-fixes).\n- rtc: ab-eoz9: do not fail temperature reads on undervoltage notification (git-fixes).\n- rtc: abx80x: Fix WDT bit position of the status register (git-fixes).\n- rtc: bbnsm: add remove hook (git-fixes).\n- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (git-fixes).\n- rtc: rzn1: fix BCD to rtc_time conversion errors (git-fixes).\n- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- runtime constants: add default dummy infrastructure (git-fixes).\n- runtime constants: add x86 architecture support (git-fixes).\n- s390/mm: Add cond_resched() to cmm_alloc/free_pages() (bsc#1228747).\n- s390/pci: Handle PCI error codes other than 0x3a (git-fixes bsc#1232629).\n- s390/sclp: Deactivate sclp after all its users (git-fixes bsc#1232628).\n- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (git-fixes bsc#1232627).\n- scsi: NCR5380: Check for phase match during PDMA fixup (git-fixes).\n- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers (git-fixes).\n- scsi: Remove scsi device no_start_on_resume flag (git-fixes).\n- scsi: aacraid: Rearrange order of struct aac_srb_unit (git-fixes).\n- scsi: cdrom: kABI: fix cdrom_dev_ops change (git-fixes).\n- scsi: core: Disable CDL by default (git-fixes).\n- scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING (git-fixes).\n- scsi: core: Fix the return value of scsi_logical_block_count() (git-fixes).\n- scsi: core: Handle devices which return an unusually large VPD page count (git-fixes).\n- scsi: core: alua: I/O errors for ALUA state transitions (git-fixes).\n- scsi: fnic: Move flush_work initialization out of if block (bsc#1230055).\n- scsi: hisi_sas: Handle the NCQ error returned by D2H frame (git-fixes).\n- scsi: hpsa: Fix allocation size for Scsi_Host private data (git-fixes).\n- scsi: kABI: restore no_start_on_resume to scsi_device (git-fixes).\n- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (git-fixes).\n- scsi: libsas: Fix the failure of adding phy with zero-address to port (git-fixes).\n- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd() (bsc#1232757).\n- scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Copyright updates for 14.4.0.6 patches (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (bsc#1232757).\n- scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (bsc#1232757).\n- scsi: lpfc: Modify CGN warning signal calculation based on EDC response (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Remove trailing space after \\n newline (bsc#1232757).\n- scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs (bsc#1232757 bsc#1228119).\n- scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to KERN_WARNING (bsc#1232757).\n- scsi: lpfc: Support loopback tests with VMID enabled (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.5 (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.6 (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE (bsc#1232757).\n- scsi: mac_scsi: Disallow bus errors during PDMA send (git-fixes).\n- scsi: mac_scsi: Refactor polling loop (git-fixes).\n- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages (git-fixes).\n- scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (git-fixes).\n- scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (git-fixes).\n- scsi: mpi3mr: Avoid possible run-time warning with long manufacturer strings (git-fixes).\n- scsi: mpi3mr: Fix ATA NCQ priority support (git-fixes).\n- scsi: mpi3mr: Validate SAS port assignments (git-fixes).\n- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (git-fixes).\n- scsi: pm8001: Do not overwrite PCI queue mapping (git-fixes).\n- scsi: pm80xx: Set phy-\u003eenable_completion only when we wait for it (git-fixes).\n- scsi: qedf: Set qed_slowpath_params to zero before use (git-fixes).\n- scsi: scsi_transport_fc: Allow setting rport state to current state (git-fixes).\n- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress (git-fixes).\n- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (git-fixes).\n- scsi: smartpqi: correct stream detection (git-fixes).\n- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly (git-fixes).\n- scsi: spi: Fix sshdr use (git-fixes).\n- scsi: sr: Fix unintentional arithmetic wraparound (git-fixes).\n- scsi: wd33c93: Do not use stale scsi_pointer value (git-fixes).\n- security/keys: fix slab-out-of-bounds in key_task_permission (git-fixes).\n- selftests/bpf: Add a test case to write mtu result into .rodata (git-fixes).\n- selftests/bpf: Add a test case to write strtol result into .rodata (git-fixes).\n- selftests/bpf: Add test for sign extension in coerce_subreg_to_size_sx() (git-fixes).\n- selftests/bpf: Add test for truncation after sign extension in coerce_reg_to_size_sx() (git-fixes).\n- selftests/bpf: Add tests for ldsx of pkt data/data_end/data_meta accesses (git-fixes).\n- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test (git-fixes).\n- selftests/bpf: Rename ARG_PTR_TO_LONG test description (git-fixes).\n- selftests/bpf: test for malformed BPF_CORE_TYPE_ID_LOCAL relocation (git-fixes).\n- serial: 8250: omap: Move pm_runtime_get_sync (git-fixes).\n- serial: imx: Update mctrl old_status on RTSD interrupt (git-fixes).\n- serial: protect uart_port_dtr_rts() in uart_shutdown() too (stable-fixes).\n- signal: Replace BUG_ON()s (bsc#1234093).\n- soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (git-fixes).\n- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (git-fixes).\n- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- soundwire: intel_bus_common: enable interrupts before exiting reset (stable-fixes).\n- spi: Fix acpi deferred irq probe (git-fixes).\n- spi: atmel-quadspi: Fix register name in verbose logging function (git-fixes).\n- spi: atmel-quadspi: Fix wrong register value written to MR (git-fixes).\n- spi: mpc52xx: Add cancel_work_sync before module remove (git-fixes).\n- spi: mtk-snfi: fix kerneldoc for mtk_snand_is_page_ops() (git-fixes).\n- spi: s3c64xx: fix timeout counters in flush_fifo (git-fixes).\n- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select (git-fixes).\n- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- spi: tegra210-quad: Avoid shift-out-of-bounds (git-fixes).\n- splice: always fsnotify_access(in), fsnotify_modify(out) on success (git-fixes).\n- splice: fsnotify_access(fd)/fsnotify_modify(fd) in vmsplice (git-fixes).\n- splice: fsnotify_access(in), fsnotify_modify(out) on success in tee (git-fixes).\n- srcu: Fix callbacks acceleration mishandling (git-fixes).\n- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (git-fixes).\n- sumversion: Fix a memory leak in get_src_version() (git-fixes).\n- supported.conf: mark nhpoly1305 module as supported (bsc#1231035).\n- supported.conf: mark ultravisor userspace access as supported (bsc#1232090).\n- task_work: add kerneldoc annotation for 'data' argument (git-fixes).\n- tcp: Fix refcnt handling in __inet_hash_connect() (git-fixes).\n- thermal: core: Initialize thermal zones before registering them (git-fixes).\n- thermal: int3400: Fix reading of current_uuid for active policy (git-fixes).\n- thermal: intel: int340x: processor: Fix warning during module unload (git-fixes).\n- thunderbolt: Honor TMU requirements in the domain when setting TMU mode (stable-fixes).\n- thunderbolt: Improve DisplayPort tunnel setup process to be more robust (stable-fixes).\n- tools/lib/thermal: Fix sampling handler context ptr (git-fixes).\n- tools/power turbostat: Fix trailing '\\n' parsing (git-fixes).\n- tools/power turbostat: Increase the limit for fd opened (bsc#1233119).\n- tools: hv: rm .*.cmd when make clean (git-fixes).\n- tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1082555 git-fixes).\n- tpm: fix signed/unsigned bug when checking event logs (git-fixes).\n- tracing/hwlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/osnoise: Fix build when timerlat is not enabled (git-fixes).\n- tracing/osnoise: Skip running osnoise if all instances are off (git-fixes).\n- tracing/osnoise: Switch from PF_NO_SETAFFINITY to migrate_disable (git-fixes).\n- tracing/osnoise: Use a cpumask to know what threads are kthreads (git-fixes).\n- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (git-fixes).\n- tracing/timerlat: Add user-space interface (git-fixes).\n- tracing/timerlat: Drop interface_lock in stop_kthread() (git-fixes).\n- tracing/timerlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (git-fixes).\n- tracing/timerlat: Move hrtimer_init to timerlat_fd open() (git-fixes).\n- tracing/timerlat: Only clear timer if a kthread exists (git-fixes).\n- tracing: Consider the NULL character when validating the event length (git-fixes).\n- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (git-fixes).\n- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (stable-fixes).\n- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (git-fixes).\n- ubifs: Fix adding orphan entry twice for the same inode (git-fixes).\n- ubifs: Fix unattached xattr inode if powercut happens after deleting (git-fixes).\n- ubifs: add check for crypto_shash_tfm_digest (git-fixes).\n- ubifs: dbg_orphan_check: Fix missed key type checking (git-fixes).\n- ucounts: fix counter leak in inc_rlimit_get_ucounts() (bsc#1233460).\n- unicode: Do not special case ignorable code points (stable-fixes).\n- unicode: Fix utf8_load() error path (git-fixes).\n- uprobe: avoid out-of-bounds memory access of fetching args (git-fixes).\n- uprobes: encapsulate preparation of uprobe args buffer (git-fixes).\n- uprobes: introduce the global struct vm_special_mapping xol_mapping (bsc#1231114).\n- uprobes: turn xol_area-\u003epages into xol_area-\u003epage (bsc#1231114).\n- usb: chipidea: udc: enable suspend interrupt after usb reset (stable-fixes).\n- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario (stable-fixes).\n- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG (git-fixes).\n- usb: dwc3: core: Stop processing of pending events if controller is halted (git-fixes).\n- usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (git-fixes).\n- usb: dwc3: gadget: Fix checking for number of TRBs left (git-fixes).\n- usb: dwc3: gadget: Fix looping of queued SG entries (git-fixes).\n- usb: ehci-spear: fix call balance of sehci clk handling routines (git-fixes).\n- usb: gadget: core: force synchronous registration (git-fixes).\n- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe (stable-fixes).\n- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler (stable-fixes).\n- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context (git-fixes).\n- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant (stable-fixes).\n- usb: gadget: f_uac2: fix non-newline-terminated function name (stable-fixes).\n- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store (git-fixes).\n- usb: musb: Fix hardware lockup on first Rx endpoint request (git-fixes).\n- usb: musb: sunxi: Fix accessing an released usb phy (git-fixes).\n- usb: phy: Fix API devm_usb_put_phy() can not release the phy (git-fixes).\n- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (stable-fixes).\n- usb: typec: altmode should keep reference to parent (git-fixes).\n- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (git-fixes).\n- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (git-fixes).\n- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (git-fixes).\n- usb: xhci: Fix TD invalidation under pending Set TR Dequeue (git-fixes).\n- usb: xhci: Fix problem with xhci resume from suspend (stable-fixes).\n- usb: xhci: fix loss of data on Cadence xHC (git-fixes).\n- usb: yurex: make waiting on yurex_write interruptible (git-fixes).\n- usbip: tools: Fix detach_port() invalid port error path (git-fixes).\n- usbnet: fix cyclical race on disconnect with work queue (git-fixes).\n- vdpa: Fix an error handling path in eni_vdpa_probe() (git-fixes).\n- vdpa_sim_blk: Fix the potential leak of mgmt_dev (git-fixes).\n- vdpa_sim_blk: allocate the buffer zeroed (git-fixes).\n- vduse: avoid using __GFP_NOFAIL (git-fixes).\n- vfs: dcache: move hashlen_hash() from callers into d_hash() (git-fixes).\n- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (git-fixes).\n- vhost_vdpa: assign irq bypass producer token correctly (git-fixes).\n- virtio_console: fix misc probe bugs (git-fixes).\n- vmalloc: modify the alloc_vmap_area() error message for better diagnostics (jsc#PED-10978).\n- vmxnet3: Add XDP support (bsc#1226498).\n- vmxnet3: Fix missing reserved tailroom (bsc#1226498).\n- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame (bsc#1226498).\n- vmxnet3: add command to allow disabling of offloads (bsc#1226498).\n- vmxnet3: add latency measurement support in vmxnet3 (bsc#1226498).\n- vmxnet3: prepare for version 9 changes (bsc#1226498).\n- vmxnet3: update to version 9 (bsc#1226498).\n- vsock: Update msg_count on read_skb() (git-fixes).\n- vt: prevent kernel-infoleak in con_font_get() (git-fixes).\n- watchdog: apple: Actually flush writes after requesting watchdog restart (git-fixes).\n- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (git-fixes).\n- watchdog: rti: of: honor timeout-sec property (git-fixes).\n- wifi: ath10k: Fix memory leak in management tx (git-fixes).\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (git-fixes).\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (git-fixes).\n- wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (git-fixes).\n- wifi: ath11k: Fix invalid ring usage in full monitor mode (git-fixes).\n- wifi: ath11k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: Skip Rx TID cleanup for self peer (git-fixes).\n- wifi: ath12k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: fix crash when unbinding (git-fixes).\n- wifi: ath12k: fix warning when unbinding (git-fixes).\n- wifi: ath12k: remove msdu_end structure for WCN7850 (git-fixes).\n- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (git-fixes).\n- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (stable-fixes).\n- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (stable-fixes).\n- wifi: brcm80211: BRCM_TRACING should depend on TRACING (git-fixes).\n- wifi: brcmfmac: release 'root' node in all execution paths (git-fixes).\n- wifi: cfg80211: Set correct chandef when starting CAC (stable-fixes).\n- wifi: cfg80211: clear wdev-\u003ecqm_config pointer on free (git-fixes).\n- wifi: cw1200: Fix potential NULL dereference (git-fixes).\n- wifi: iwlegacy: Clear stale interrupts before resuming device (stable-fixes).\n- wifi: iwlegacy: Fix \"field-spanning write\" warning in il_enqueue_hcmd() (git-fixes).\n- wifi: iwlwifi: allow only CN mcc from WRDD (stable-fixes).\n- wifi: iwlwifi: config: label 'gl' devices as discrete (git-fixes).\n- wifi: iwlwifi: mvm: Fix a race in scan abort flow (stable-fixes).\n- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (git-fixes).\n- wifi: iwlwifi: mvm: avoid NULL pointer dereference (stable-fixes).\n- wifi: iwlwifi: mvm: do not add default link in fw restart flow (git-fixes).\n- wifi: iwlwifi: mvm: do not leak a link on AP removal (git-fixes).\n- wifi: iwlwifi: mvm: drop wrong STA selection in TX (stable-fixes).\n- wifi: iwlwifi: mvm: use correct key iteration (stable-fixes).\n- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL (stable-fixes).\n- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (git-fixes).\n- wifi: mac80211: fix RCU list iterations (stable-fixes).\n- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (git-fixes).\n- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation (stable-fixes).\n- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable (stable-fixes).\n- wifi: mt76: mt7915: hold dev-\u003emt76.mutex while disabling tx worker (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (git-fixes).\n- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c (stable-fixes).\n- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons (git-fixes).\n- wifi: rtw88: select WANT_DEV_COREDUMP (stable-fixes).\n- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements (stable-fixes).\n- wifi: rtw89: avoid to add interface to list twice when SER (stable-fixes).\n- wifi: rtw89: correct base HT rate mask for firmware (stable-fixes).\n- wifi: wfx: Fix error handling in wfx_core_init() (git-fixes).\n- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (bsc#1233443).\n- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load (git-fixes).\n- x86/Documentation: Indent 'note::' directive for protocol version number note (git-fixes).\n- x86/PCI: Check pcie_find_root_port() return for NULL (git-fixes).\n- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h (git-fixes).\n- x86/apic: Always explicitly disarm TSC-deadline timer (git-fixes).\n- x86/apic: Make x2apic_disable() work correctly (git-fixes).\n- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (git-fixes).\n- x86/bugs: Skip RSB fill at VMEXIT (git-fixes).\n- x86/cpufeatures: Add a IBPB_NO_RET BUG flag (git-fixes).\n- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (git-fixes).\n- x86/entry: Have entry_ibpb() invalidate return predictions (git-fixes).\n- x86/entry: Remove unwanted instrumentation in common_interrupt() (git-fixes).\n- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency (git-fixes).\n- x86/microcode/intel: Remove unnecessary cache writeback and invalidation (git-fixes).\n- x86/mm: Use IPIs to synchronize LAM enablement (git-fixes).\n- x86/resctrl: Annotate get_mem_config() functions as __init (git-fixes).\n- x86/resctrl: Avoid overflow in MB settings in bw_validate() (git-fixes).\n- x86/resctrl: Remove hard-coded memory bandwidth limit (git-fixes).\n- x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler (git-fixes).\n- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() (git-fixes).\n- x86/tdx: Dynamically disable SEPT violations from causing #VEs (git-fixes).\n- x86/tdx: Enable CPU topology enumeration (git-fixes).\n- x86/tdx: Introduce wrappers to read and write TD metadata (git-fixes).\n- x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup() (git-fixes).\n- x86/traps: move kmsan check after instrumentation_begin (git-fixes).\n- x86: Increase brk randomness entropy for 64-bit systems (git-fixes).\n- x86: do the user address masking outside the user access area (git-fixes).\n- x86: fix off-by-one in access_ok() (git-fixes).\n- x86: fix user address masking non-canonical speculation issue (git-fixes).\n- x86: make the masked_user_access_begin() macro use its argument only once (git-fixes).\n- x86: support user address masking instead of non-speculative conditional (git-fixes).\n- xfrm: Export symbol xfrm_dev_state_delete (bsc#1233754).\n- xfrm: Fix unregister netdevice hang on hardware offload (bsc#1233754).\n- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2 (git-fixes).\n- xfs: check shortform attr entry flags specifically (git-fixes).\n- xfs: convert delayed extents to unwritten when zeroing post eof blocks (git-fixes).\n- xfs: fix finding a last resort AG in xfs_filestream_pick_ag (git-fixes).\n- xfs: fix freeing speculative preallocations for preallocated files (git-fixes).\n- xfs: make sure sb_fdblocks is non-negative (git-fixes).\n- xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional (git-fixes).\n- xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset (git-fixes).\n- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent (git-fixes).\n- xfs: validate recovered name buffers when recovering xattr items (git-fixes).\n- xhci: Add a quirk for writing ERST in high-low order (git-fixes).\n- xhci: Fix Link TRB DMA in command ring stopped completion event (git-fixes).\n- xhci: Fix incorrect stream context type macro (git-fixes).\n- xhci: Mitigate failed set dequeue pointer commands (git-fixes).\n- xhci: Use pm_runtime_get to prevent RPM on unsupported systems (git-fixes).\n- xhci: tegra: fix checked USB2 port number (git-fixes).\n- zonefs: Improve error handling (git-fixes).\n","status":"published","published":"2025-03-27T12:56:21Z","modified":"2026-03-23T04:50:05.866227Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20247-1","title":"Security update for the Linux Kernel","description":"The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).\n- CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).\n- CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).\n- CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).\n- CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).\n- CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).\n- CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink dump (bsc#1223733).\n- CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb-\u003ehead (bsc#1224518).\n- CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).\n- CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).\n- CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).\n- CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).\n- CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742).\n- CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb() (bsc#1225813).\n- CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764).\n- CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (bsc#1226130).\n- CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748).\n- CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio (bsc#1227842).\n- CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).\n- CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).\n- CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command  (bsc#1228620).\n- CVE-2024-42102: Revert \"mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again\" (bsc#1233132).\n- CVE-2024-44958: sched/smt: Fix unbalance sched_smt_present dec/inc (bsc#1230179).\n- CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).\n- CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).\n- CVE-2024-45025: fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (bsc#1230456).\n- CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).\n- CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).\n- CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).\n- CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)\n- CVE-2024-46754: bpf: Remove tst_run from lwt_seg6local_prog_ops (bsc#1230801).\n- CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).\n- CVE-2024-46766: ice: move netif_queue_set_napi to rtnl-protected sections (bsc#1230762).\n- CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763).\n- CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).\n- CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).\n- CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).\n- CVE-2024-46813: drm/amd/display: Check link_index before accessing dc-\u003elinks (bsc#1231191).\n- CVE-2024-46816: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (bsc#1231197).\n- CVE-2024-46826: ELF: fix kernel.randomize_va_space double read (bsc#1231115).\n- CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).\n- CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).\n- CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).\n- CVE-2024-46841: btrfs: do not BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (bsc#1231094).\n- CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100).\n- CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).\n- CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).\n- CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).\n- CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (bsc#1231435).\n- CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (bsc#1231436).\n- CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).\n- CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442).\n- CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).\n- CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode() and iput() (bsc#1231930).\n- CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231987).\n- CVE-2024-47685: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (bsc#1231998).\n- CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003).\n- CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).\n- CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).\n- CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946).\n- CVE-2024-47704: drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944).\n- CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition (bsc#1231872).\n- CVE-2024-47706: block, bfq: fix possible UAF for bfqq-\u003ebic with merge chain (bsc#1231942).\n- CVE-2024-47707: ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (bsc#1231935).\n- CVE-2024-47710: sock_map: Add a cond_resched() in sock_hash_free() (bsc#1232049).\n- CVE-2024-47727: x86/tdx: Fix \"in-kernel MMIO\" check (bsc#1232116).\n- CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).\n- CVE-2024-47731: drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (bsc#1232117).\n- CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).\n- CVE-2024-47741: btrfs: fix race setting file private on concurrent lseek using same fd (bsc#1231869).\n- CVE-2024-47745: mm: call the security_mmap_file() LSM hook in remap_file_pages() (bsc#1232135).\n- CVE-2024-47747: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (bsc#1232145).\n- CVE-2024-47752: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning (bsc#1232130).\n- CVE-2024-47753: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning (bsc#1231868).\n- CVE-2024-47754: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning (bsc#1232131).\n- CVE-2024-49852: scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (bsc#1232819).\n- CVE-2024-49864: rxrpc: Fix a race between socket set up and I/O thread creation (bsc#1232256).\n- CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount (bsc#1232262).\n- CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).\n- CVE-2024-49881: ext4: update orig_path in ext4_find_extent() (bsc#1232201).\n- CVE-2024-49882: ext4: fix double brelse() the buffer of the extents path (bsc#1232200).\n- CVE-2024-49883: ext4: aovid use-after-free in ext4_ext_insert_extent() (bsc#1232199).\n- CVE-2024-49888: bpf: Fix a sdiv overflow issue (bsc#1232208).\n- CVE-2024-49890: drm/amd/pm: ensure the fw_info is not null before using it (bsc#1232217).\n- CVE-2024-49892: drm/amd/display: Initialize get_bytes_per_element's default to 1 (bsc#1232220).\n- CVE-2024-49894: drm/amd/display: Fix index out of bounds in degamma hardware format translation (bsc#1232354).\n- CVE-2024-49895: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (bsc#1232352).\n- CVE-2024-49896: drm/amd/display: Check stream before comparing them (bsc#1232221).\n- CVE-2024-49897: drm/amd/display: Check phantom_stream before it is used (bsc#1232355).\n- CVE-2024-49898: drm/amd/display: Check null-initialized variables (bsc#1232222).\n- CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).\n- CVE-2024-49901: drm/msm/adreno: Assign msm_gpu-\u003epdev earlier to avoid nullptrs (bsc#1232305).\n- CVE-2024-49906: drm/amd/display: Check null pointer before try to access it (bsc#1232332).\n- CVE-2024-49907: drm/amd/display: Check null pointers before using dc-\u003eclk_mgr (bsc#1232334).\n- CVE-2024-49909: drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func (bsc#1232337).\n- CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (bsc#1232366).\n- CVE-2024-49912: drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (bsc#1232367).\n- CVE-2024-49913: drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (bsc#1232307).\n- CVE-2024-49914: drm/amd/display: Add null check for pipe_ctx-\u003eplane_state in (bsc#1232369).\n- CVE-2024-49917: drm/amd/display: Add NULL check for clk_mgr and clk_mgr-\u003efuncs in dcn30_init_hw (bsc#1231965).\n- CVE-2024-49918: drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer (bsc#1231967).\n- CVE-2024-49919: drm/amd/display: Add null check for head_pipe in dcn201_acquire_free_pipe_for_layer (bsc#1231968).\n- CVE-2024-49920: drm/amd/display: Check null pointers before multiple uses (bsc#1232313).\n- CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).\n- CVE-2024-49922: drm/amd/display: Check null pointers before using them (bsc#1232374).\n- CVE-2024-49923: drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags (bsc#1232361).\n- CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)\n- CVE-2024-49933: blk_iocost: fix more out of bound shifts (bsc#1232368).\n- CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387).\n- CVE-2024-49936: net/xen-netback: prevent UAF in xenvif_flush_hash() (bsc#1232424).\n- CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).\n- CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).\n- CVE-2024-49946: ppp: do not assume bh is held in ppp_channel_bridge_input() (bsc#1232164).\n- CVE-2024-49949: net: avoid potential underflow in qdisc_pkt_len_init() with UFO (bsc#1232160).\n- CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).\n- CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).\n- CVE-2024-49953: net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice (bsc#1232156).\n- CVE-2024-49954: static_call: Replace pointless WARN_ON() in static_call_module_notify() (bsc#1232155).\n- CVE-2024-49958: ocfs2: reserve space for inline xattr before attaching reflink tree (bsc#1232151).\n- CVE-2024-49959: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (bsc#1232149).\n- CVE-2024-49960: ext4: fix timer use-after-free on failed mount (bsc#1232395).\n- CVE-2024-49967: ext4: no need to continue when the number of entries is 1 (bsc#1232140).\n- CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264).\n- CVE-2024-49969: drm/amd/display: Fix index out of bounds in DCN30 color transformation (bsc#1232519).\n- CVE-2024-49972: drm/amd/display: Deallocate DML memory if allocation fails (bsc#1232315).\n- CVE-2024-49973: r8169: add tally counter fields added with RTL8125 (bsc#1232105).\n- CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383).\n- CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096).\n- CVE-2024-49986: platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors (bsc#1232093).\n- CVE-2024-49987: bpftool: Fix undefined behavior in qsort(NULL, 0, ...) (bsc#1232258).\n- CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).\n- CVE-2024-49991: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer (bsc#1232282).\n- CVE-2024-49993: iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (bsc#1232316).\n- CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).\n- CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).\n- CVE-2024-50000: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (bsc#1232085).\n- CVE-2024-50001: net/mlx5: Fix error path in multi-packet WQE transmit (bsc#1232084).\n- CVE-2024-50002: static_call: Handle module init failure correctly in static_call_del_module() (bsc#1232083).\n- CVE-2024-50003: drm/amd/display: Fix system hang while resume with TBT monitor (bsc#1232385).\n- CVE-2024-50004: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 (bsc#1232396).\n- CVE-2024-50006: ext4: fix i_data_sem unlock order in ext4_ind_migrate() (bsc#1232442).\n- CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318).\n- CVE-2024-50012: cpufreq: Avoid a bad reference count on CPU node (bsc#1232386).\n- CVE-2024-50014: ext4: fix access to uninitialised lock in fc replay path (bsc#1232446).\n- CVE-2024-50015: ext4: dax: fix overflowing extents beyond inode size when partially writing (bsc#1232079).\n- CVE-2024-50020: ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() (bsc#1231989).\n- CVE-2024-50021: ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() (bsc#1231957).\n- CVE-2024-50022: device-dax: correct pgoff align in dax_set_mapping() (bsc#1231956).\n- CVE-2024-50024: net: Fix an unsafe loop on the list (bsc#1231954).\n- CVE-2024-50027: thermal: core: Free tzp copy along with the thermal zone (bsc#1231951).\n- CVE-2024-50028: thermal: core: Reference count the zone in thermal_zone_get_by_id() (bsc#1231950).\n- CVE-2024-50033: slip: make slhc_remember() more robust against malicious packets (bsc#1231914).\n- CVE-2024-50035: ppp: fix ppp_async_encode() illegal access (bsc#1232392).\n- CVE-2024-50040: igb: Do not bring the device up after non-fatal error (bsc#1231908).\n- CVE-2024-50041: i40e: Fix macvlan leak by synchronizing access to mac_filter_hash (bsc#1231907).\n- CVE-2024-50042: ice: Fix increasing MSI-X on VF (bsc#1231906).\n- CVE-2024-50045: netfilter: br_netfilter: fix panic with metadata_dst skb (bsc#1231903).\n- CVE-2024-50046: NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (bsc#1231902).\n- CVE-2024-50047: smb: client: fix UAF in async decryption (bsc#1232418).\n- CVE-2024-50059: ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (bsc#1232345).\n- CVE-2024-50060: io_uring: check if we need to reschedule during overflow flush (bsc#1232417).\n- CVE-2024-50063: bpf: Prevent tail call between progs attached to different hooks (bsc#1232435).\n- CVE-2024-50064: zram: free secondary algorithms names (bsc#1231901).\n- CVE-2024-50080: ublk: do not allow user copy for unprivileged device (bsc#1232502).\n- CVE-2024-50081: blk-mq: setup queue -\u003etag_set before initializing hctx (bsc#1232501).\n- CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500).\n- CVE-2024-50084: net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() (bsc#1232494).\n- CVE-2024-50087: btrfs: fix uninitialized pointer free on read_alloc_one_name() error (bsc#1232499).\n- CVE-2024-50088: btrfs: fix uninitialized pointer free in add_inode_ref() (bsc#1232498).\n- CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).\n- CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).\n- CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).\n- CVE-2024-50124: Bluetooth: ISO: Fix UAF on iso_sock_timeout (bsc#1232926).\n- CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928).\n- CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).\n- CVE-2024-50128: net: wwan: fix global oob in wwan_rtnl_policy (bsc#1232905).\n- CVE-2024-50130: netfilter: bpf: must hold reference on net namespace (bsc#1232894).\n- CVE-2024-50138: bpf: Use raw_spinlock_t in ringbuf (bsc#1232935).\n- CVE-2024-50139: KVM: arm64: Fix shift-out-of-bounds bug (bsc#1233062).\n- CVE-2024-50145: octeon_ep: add SKB allocation failures handling in __octep_oq_process_rx() (bsc#1233044).\n- CVE-2024-50153: scsi: target: core: Fix null-ptr-deref in target_alloc_device() (bsc#1233061).\n- CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070).\n- CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050).\n- CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049).\n- CVE-2024-50169: vsock: Update rx_bytes on read_skb() (bsc#1233320).\n- CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057).\n- CVE-2024-50177: drm/amd/display: fix a UBSAN warning in DML2.1 (bsc#1233115).\n- CVE-2024-50182: secretmem: disable memfd_secret() if arch cannot set direct map (bsc#1233129).\n- CVE-2024-50184: virtio_pmem: Check device status before requesting flush (bsc#1233135).\n- CVE-2024-50186: net: explicitly clear the sk pointer, when pf-\u003ecreate fails (bsc#1233110).\n- CVE-2024-50192: irqchip/gic-v4: Do not allow a VMOVP on a dying VPE (bsc#1233106).\n- CVE-2024-50225: btrfs: fix error propagation of split bios (bsc#1233193).\n- CVE-2024-50228: mm: shmem: fix data-race in shmem_getattr() (bsc#1233204).\n- CVE-2024-50230: nilfs2: fix kernel bug due to missing clearing of checked flag (bsc#1233206).\n- CVE-2024-50245: fs/ntfs3: Fix possible deadlock in mi_read (bsc#1233203).\n- CVE-2024-50246: fs/ntfs3: Add rough attr alloc_size check (bsc#1233207).\n- CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233226).\n- CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).\n- CVE-2024-50257: netfilter: Fix use-after-free in get_info() (bsc#1233244).\n- CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (bsc#1233253).\n- CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-\u003etrans (bsc#1233453).\n- CVE-2024-50271: signal: restore the override_rlimit logic (bsc#1233460).\n- CVE-2024-50273: btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1233462).\n- CVE-2024-50274: idpf: avoid vport access in idpf_get_link_ksettings (bsc#1233463).\n- CVE-2024-50275: arm64/sve: Discard stale CPU state when handling SVE traps (bsc#1233464).\n- CVE-2024-50276: net: vertexcom: mse102x: Fix possible double free of TX skb (bsc#1233465).\n- CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).\n- CVE-2024-50289: media: av7110: fix a spectre vulnerability (bsc#1233478).\n- CVE-2024-50295: net: arc: fix the device for dma_map_single/dma_unmap_single (bsc#1233484).\n- CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).\n- CVE-2024-50298: net: enetc: allocate vf_state during PF probes (bsc#1233487).\n- CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233540).\n- CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).\n- CVE-2024-53048: ice: fix crash on probe for DPLL enabled E810 LOM (bsc#1233721).\n- CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).\n- CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).\n- CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).\n- CVE-2024-53058: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (bsc#1233552).\n- CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (bsc#1233570).\n- CVE-2024-53082: virtio_net: Add hash_key_length check (bsc#1233573).\n- CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).\n- CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (bsc#1234085).\n- CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (bsc#1234078).\n- CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1234223).\n\nThe following non-security bugs were fixed:\n\n- 9p: explicitly deny setlease attempts (git-fixes).\n- ACPI: CPPC: Add support for setting EPP register in FFH (stable-fixes).\n- ACPI: CPPC: Fix _CPC register setting issue (git-fixes).\n- ACPI: CPPC: Make rmw_lock a raw_spin_lock (git-fixes).\n- ACPI: EC: Do not release locks during operation region accesses (stable-fixes).\n- ACPI: PAD: fix crash in exit_round_robin() (stable-fixes).\n- ACPI: PRM: Clean up guid type in struct prm_handler_info (git-fixes).\n- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (git-fixes).\n- ACPI: battery: Fix possible crash when unregistering a battery hook (git-fixes).\n- ACPI: battery: Simplify battery hook locking (stable-fixes).\n- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (stable-fixes).\n- ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add another DMI match for the TongFang GMxXGxx (stable-fixes).\n- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (stable-fixes).\n- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (stable-fixes).\n- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (stable-fixes).\n- ACPICA: iasl: handle empty connection_node (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: cleanup sdw_intel_scan_controller (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: fetch fwnode once in sdw_intel_scan_controller() (stable-fixes).\n- ALSA/hda: intel-sdw-acpi: simplify sdw-master-count property read (stable-fixes).\n- ALSA: 6fire: Release resources at card release (git-fixes).\n- ALSA: Reorganize kerneldoc parameter names (stable-fixes).\n- ALSA: ac97: bus: Fix the mistake in the comment (git-fixes).\n- ALSA: asihpi: Fix potential OOB array access (stable-fixes).\n- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ALSA: core: add isascii() check to card ID generator (stable-fixes).\n- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (git-fixes).\n- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (git-fixes).\n- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (stable-fixes).\n- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (git-fixes).\n- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (git-fixes).\n- ALSA: hda/conexant: fix Z60MR100 startup pop issue (stable-fixes).\n- ALSA: hda/conexant: fix some typos (stable-fixes).\n- ALSA: hda/cs8409: Fix possible NULL dereference (git-fixes).\n- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs (bsc#1219803).\n- ALSA: hda/realtek - Fixed Clevo platform headset Mic issue (stable-fixes).\n- ALSA: hda/realtek - update set GPIO3 to default for Thinkpad with ALC1318 (git-fixes).\n- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200 (stable-fixes).\n- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (stable-fixes).\n- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (stable-fixes).\n- ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (stable-fixes).\n- ALSA: hda/realtek: Apply quirk for Medion E15433 (bsc#1233298).\n- ALSA: hda/realtek: Enable mic on Vaio VJFH52 (stable-fixes).\n- ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (stable-fixes).\n- ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform (bsc#1233298).\n- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (bsc#1233298).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 (stable-fixes).\n- ALSA: hda/realtek: Fix the push button function for the ALC257 (git-fixes).\n- ALSA: hda/realtek: Limit internal Mic boost on Dell platform (stable-fixes).\n- ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init (stable-fixes).\n- ALSA: hda/realtek: Set PCBeep to default value for ALC274 (stable-fixes).\n- ALSA: hda/realtek: Update ALC225 depop procedure (git-fixes).\n- ALSA: hda/realtek: Update ALC256 depop procedure (git-fixes).\n- ALSA: hda/realtek: Update default depop procedure (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8 (stable-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10 (stable-fixes).\n- ALSA: hda/realtek: tas2781: Fix ROG ALLY X audio (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop (stable-fixes).\n- ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects (stable-fixes).\n- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE (git-fixes).\n- ALSA: hda: Poll jack events for LS7A HD-Audio (stable-fixes).\n- ALSA: hda: Show the codec quirk info at probing (stable-fixes).\n- ALSA: hda: Sound support for HP Spectre x360 16 inch model 2024 (stable-fixes).\n- ALSA: hda: tas2781: Fix missing setup at runtime PM (bsc#1230132).\n- ALSA: hdsp: Break infinite MIDI input flush loop (stable-fixes).\n- ALSA: ice1712: Remove redundant code in stac9460_dac_vol_put (stable-fixes).\n- ALSA: line6: add hw monitor volume control to POD HD500X (stable-fixes).\n- ALSA: line6: update contact information (stable-fixes).\n- ALSA: mixer_oss: Remove some incorrect kfree_const() usages (git-fixes).\n- ALSA: pcm: Add sanity NULL check for the default mmap fault handler (stable-fixes).\n- ALSA: silence integer wrapping warning (stable-fixes).\n- ALSA: ump: Fix evaluation of MIDI 1.0 FB info (git-fixes).\n- ALSA: us122l: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ALSA: usb-audio: Add Pioneer DJ/AlphaTheta DJM-A9 Mixer (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET (stable-fixes).\n- ALSA: usb-audio: Add input value sanity checks for standard types (stable-fixes).\n- ALSA: usb-audio: Add logitech Audio profile quirk (stable-fixes).\n- ALSA: usb-audio: Add native DSD support for Luxman D-08u (stable-fixes).\n- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1232768).\n- ALSA: usb-audio: Add quirks for Dell WD19 dock (stable-fixes).\n- ALSA: usb-audio: Define macros for quirk table entries (stable-fixes).\n- ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (stable-fixes).\n- ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).\n- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (stable-fixes).\n- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (git-fixes).\n- ALSA: usb-audio: Make mic volume workarounds globally applicable (stable-fixes).\n- ALSA: usb-audio: Replace complex quirk lines with macros (stable-fixes).\n- ALSA: usb-audio: Use snprintf instead of sprintf in build_mixer_unit_ctl (stable-fixes).\n- ALSA: usb-audio: add mixer mapping for Corsair HS80 (stable-fixes).\n- ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (git-fixes).\n- ASoC: Intel: avs: da7219: Remove suspend_pre() and resume_post() (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (stable-fixes).\n- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (stable-fixes).\n- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (git-fixes).\n- ASoC: Intel: sst: Support LPE0F28 ACPI HID (stable-fixes).\n- ASoC: SOF: Add i2s bt dai configuration support for AMD platforms (bsc#1233305).\n- ASoC: SOF: Add support for configuring PDM interface from topology (bsc#1233305).\n- ASoC: SOF: Deprecate invalid enums in IPC3 (bsc#1233305).\n- ASoC: SOF: IPC4: get pipeline priority from topology (bsc#1233305).\n- ASoC: SOF: IPC4: synchronize fw_config_params with fw definitions (bsc#1233305).\n- ASoC: SOF: Refactor sof_i2s_tokens reading to update acpbt dai (bsc#1233305).\n- ASoC: SOF: Rename amd_bt sof_dai_type (bsc#1233305).\n- ASoC: SOF: Wire up buffer flags (bsc#1233305).\n- ASoC: SOF: add alignment for topology header file struct definition (bsc#1233305).\n- ASoC: SOF: align topology header file with sof topology header (bsc#1233305).\n- ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index (git-fixes).\n- ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai() (git-fixes).\n- ASoC: SOF: ipc4-control: Add support for ALSA enum control (bsc#1233305).\n- ASoC: SOF: ipc4-control: Add support for ALSA switch control (bsc#1233305).\n- ASoC: SOF: ipc4-mtrace: move debug slot related definitions to header.h (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add deep buffer size to debug prints (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Add module ID print during module set up (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Helper to find an swidget by module/instance id (bsc#1233305).\n- ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (bsc#1233305).\n- ASoC: SOF: ipc4-topology: change chain_dma handling in dai_config (bsc#1233305).\n- ASoC: SOF: ipc4-topology: export sof_ipc4_copier_is_single_format (bsc#1233305).\n- ASoC: SOF: ipc4-topology: set config_length based on device_count (bsc#1233305).\n- ASoC: SOF: ipc4: Add data struct for module notification message from firmware (bsc#1233305).\n- ASoC: SOF: ipc4: Add new message type: SOF_IPC4_GLB_LOAD_LIBRARY_PREPARE (bsc#1233305).\n- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits (git-fixes).\n- ASoC: SOF: topology: Parse DAI type token for dspless mode (bsc#1233305).\n- ASoC: SOF: topology: dynamically allocate and store DAI widget-\u003eprivate (bsc#1233305).\n- ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA (stable-fixes).\n- ASoC: amd: yc: Add quirk for HP Dragonfly pro one (stable-fixes).\n- ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (git-fixes).\n- ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA (stable-fixes).\n- ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6 (stable-fixes).\n- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022 (stable-fixes).\n- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized (git-fixes).\n- ASoC: audio-graph-card2: Purge absent supplies for device tree nodes (stable-fixes).\n- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (git-fixes).\n- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (stable-fixes).\n- ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work() (stable-fixes).\n- ASoC: codecs: wsa883x: Handle reading version failure (stable-fixes).\n- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (git-fixes).\n- ASoC: dapm: fix bounds checker error in dapm_widget_list_create (git-fixes).\n- ASoC: fsl_micfil: Add sample rate constraint (stable-fixes).\n- ASoC: fsl_micfil: fix regmap_write_bits usage (git-fixes).\n- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (stable-fixes).\n- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m (git-fixes).\n- ASoC: max98388: Fix missing increment of variable slot_found (git-fixes).\n- ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec (git-fixes).\n- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (git-fixes).\n- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (stable-fixes).\n- ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c (git-fixes).\n- ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue (stable-fixes).\n- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (git-fixes).\n- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (stable-fixes).\n- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (stable-fixes).\n- ASoC: tas2781: Add new driver version for tas2563 \u0026 tas2781 qfn chip (stable-fixes).\n- ASoC: tas2781: Use of_property_read_reg() (stable-fixes).\n- Bluetooth: Call iso_exit() on module unload (git-fixes).\n- Bluetooth: ISO: Fix multiple init when debugfs is disabled (git-fixes).\n- Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (git-fixes).\n- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (git-fixes).\n- Bluetooth: Remove debugfs directory on module init failure (git-fixes).\n- Bluetooth: bnep: fix wild-memory-access in proto_unregister (git-fixes).\n- Bluetooth: btintel: Direct exception event to bluetooth stack (git-fixes).\n- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test (bsc#1230557)\n- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 (stable-fixes).\n- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (git-fixes).\n- Bluetooth: fix use-after-free in device_for_each_child() (git-fixes).\n- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (git-fixes).\n- Bluetooth: hci_core: Fix calling mgmt_device_connected (git-fixes).\n- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (git-fixes).\n- Documentation: kgdb: Correct parameter error (git-fixes).\n- HID: Ignore battery for all ELAN I2C-HID devices (stable-fixes).\n- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (git-fixes).\n- HID: core: zero-initialize the report buffer (git-fixes).\n- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk (stable-fixes).\n- HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (stable-fixes).\n- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (stable-fixes).\n- HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (stable-fixes).\n- HID: multitouch: Add support for B2402FVA track point (stable-fixes).\n- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (stable-fixes).\n- HID: multitouch: Add support for lenovo Y9000P Touchpad (stable-fixes).\n- HID: plantronics: Workaround for an unexcepted opposite volume key (stable-fixes).\n- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (git-fixes).\n- HID: wacom: fix when get product name maybe null pointer (git-fixes).\n- Input: adp5589-keys - fix NULL pointer dereference (git-fixes).\n- Input: adp5589-keys - fix adp5589_gpio_get_value() (git-fixes).\n- Input: edt-ft5x06 - fix regmap leak when probe fails (git-fixes).\n- Input: hideep - add missing dependency on REGMAP_I2C (git-fixes).\n- Input: hycon-hy46xx - add missing dependency on REGMAP_I2C (git-fixes).\n- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (stable-fixes).\n- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (stable-fixes).\n- Input: xpad - add GameSir T4 Kaleid Controller support (git-fixes).\n- Input: xpad - add GameSir VID for Xbox One controllers (git-fixes).\n- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller (git-fixes).\n- Input: xpad - add support for MSI Claw A1M (git-fixes).\n- Input: xpad - add support for Machenike G5 Pro Controller (git-fixes).\n- Input: xpad - fix support for some third-party controllers (git-fixes).\n- Input: xpad - sort xpad_device by vendor and product ID (git-fixes).\n- Input: xpad - spelling fixes for \"Xbox\" (git-fixes).\n- KVM: Fix coalesced_mmio_has_room() to avoid premature userspace exit (git-fixes).\n- KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending doorbells (bsc#1215199).\n- KVM: PPC: Book3S HV: Stop using vc-\u003edpdes for nested KVM guests (bsc#1215199).\n- KVM: PPC: Book3S HV: remove unused varible (bsc#1194869).\n- KVM: SEV-ES: Fix svm_get_msr()/svm_set_msr() for KVM_SEV_ES_INIT guests (bsc#1232207).\n- KVM: SEV-ES: Prevent MSR access post VMSA encryption (bsc#1232207).\n- KVM: SVM: Disallow guest from changing userspace's MSR_AMD64_DE_CFG value (git-fixes).\n- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock (git-fixes).\n- KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled (git-fixes).\n- KVM: VMX: Set PFERR_GUEST_{FINAL,PAGE}_MASK if and only if the GVA is valid (git-fixes).\n- KVM: Write the per-page \"segment\" when clearing (part of) a guest page (git-fixes).\n- KVM: s390: Change virtual to physical address access in diag 0x258 handler (git-fixes bsc#1232626).\n- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (git-fixes bsc#1231276).\n- KVM: s390: gaccess: Check if guest address is in memslot (git-fixes bsc#1232623).\n- KVM: x86/mmu: Skip emulation on page fault iff 1+ SPs were unprotected (git-fixes).\n- KVM: x86/mmu: Trigger unprotect logic only on write-protection page faults (git-fixes).\n- KVM: x86: Dedup fastpath MSR post-handling logic (git-fixes).\n- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits (git-fixes).\n- KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (git-fixes).\n- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode() (git-fixes).\n- KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (git-fixes).\n- KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- NFS: Avoid unnecessary rescanning of the per-server delegation list (git-fixes).\n- NFS: remove revoked delegation from server's delegation list (git-fixes).\n- NFSD: Fix NFSv4's PUTPUBFH operation (git-fixes).\n- NFSD: Mark filecache \"down\" if init fails (git-fixes).\n- NFSv3: only use NFS timeout for MOUNT when protocols are compatible (bsc#1231016).\n- NFSv4: Fix clearing of layout segments in layoutreturn (git-fixes).\n- PCI: Add ACS quirk for Qualcomm SA8775P (stable-fixes).\n- PCI: Add T_PVPERL macro (git-fixes).\n- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip (stable-fixes).\n- PCI: Fix pci_enable_acs() support for the ACS quirks (bsc#1229019).\n- PCI: Fix reset_method_store() memory leak (git-fixes).\n- PCI: Mark Creative Labs EMU20k2 INTx masking as broken (stable-fixes).\n- PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf() (git-fixes).\n- PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds (git-fixes).\n- PCI: keystone: Add link up check to ks_pcie_other_map_bus() (git-fixes).\n- PCI: keystone: Set mode as Root Complex for \"ti,keystone-pcie\" compatible (git-fixes).\n- PCI: rockchip-ep: Fix address translation unit programming (git-fixes).\n- RAS/AMD/ATL: Add amd_atl pr_fmt() prefix (jsc#PED-10559).\n- RAS/AMD/ATL: Expand helpers for adding and removing base and hole (jsc#PED-10559).\n- RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization (jsc#PED-10559).\n- RAS/AMD/ATL: Read DRAM hole base early (jsc#PED-10559).\n- RAS/AMD/ATL: Validate address map when information is gathered (jsc#PED-10559).\n- RDMA/bnxt_re: Add a check for memory allocation (git-fixes)\n- RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (git-fixes)\n- RDMA/bnxt_re: Change the sequence of updating the CQ toggle value (git-fixes)\n- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (git-fixes)\n- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (git-fixes)\n- RDMA/bnxt_re: Fix a possible memory leak (git-fixes)\n- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (git-fixes)\n- RDMA/bnxt_re: Fix incorrect dereference of srq in async event (git-fixes)\n- RDMA/bnxt_re: Fix out of bound check (git-fixes)\n- RDMA/bnxt_re: Fix the GID table length (git-fixes)\n- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters (git-fixes)\n- RDMA/bnxt_re: Fix the usage of control path spin locks (git-fixes)\n- RDMA/bnxt_re: Return more meaningful error (git-fixes)\n- RDMA/bnxt_re: synchronize the qp-handle table array (git-fixes)\n- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)\n- RDMA/cxgb4: Dump vendor specific QP details (git-fixes)\n- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (git-fixes)\n- RDMA/hns: Add mutex_destroy() (git-fixes)\n- RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset (git-fixes)\n- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (git-fixes)\n- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci (git-fixes)\n- RDMA/hns: Fix cpu stuck caused by printings during reset (git-fixes)\n- RDMA/hns: Fix different dgids mapping to the same dip_idx (git-fixes)\n- RDMA/hns: Fix flush cqe error when racing with destroy qp (git-fixes)\n- RDMA/hns: Fix out-of-order issue of requester when setting FENCE (git-fixes)\n- RDMA/hns: Use dev_* printings in hem code instead of ibdev_* (git-fixes)\n- RDMA/hns: Use macro instead of magic number (git-fixes)\n- RDMA/irdma: Fix misspelling of \"accept*\" (git-fixes)\n- RDMA/mad: Improve handling of timed out WRs of mad agent (git-fixes)\n- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (git-fixes).\n- RDMA/mana_ib: use the correct page table index based on hardware page size (git-fixes).\n- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults (git-fixes)\n- RDMA/mlx5: Move events notifier registration to be after device registration (git-fixes)\n- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (git-fixes)\n- RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled (git-fixes).\n- RDMA/rtrs-srv: Avoid null pointer deref during path establishment (git-fixes)\n- RDMA/rxe: Fix the qp flush warnings in req (git-fixes)\n- RDMA/rxe: Set queue pair cur_qp_state when being queried (git-fixes)\n- RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES (git-fixes)\n- RDMA/srpt: Make slab cache names unique (git-fixes)\n- SUNRPC: Fix integer overflow in decode_rc_list() (git-fixes).\n- SUNRPC: Fixup gss_status tracepoint error output (git-fixes).\n- SUNRPC: Remove BUG_ON call sites (git-fixes).\n- SUNRPC: clnt.c: Remove misleading comment (git-fixes).\n- USB: appledisplay: close race between probe and completion handler (git-fixes).\n- USB: chaoskey: Fix possible deadlock chaoskey_list_lock (git-fixes).\n- USB: chaoskey: fail open after removal (git-fixes).\n- USB: gadget: dummy-hcd: Fix \"task hung\" problem (git-fixes).\n- USB: misc: cypress_cy7c63: check for short transfer (git-fixes).\n- USB: misc: yurex: fix race between read and write (git-fixes).\n- USB: serial: ftdi_sio: Fix atomicity violation in get_serial_info() (git-fixes).\n- USB: serial: io_edgeport: fix use after free in debug printk (git-fixes).\n- USB: serial: option: add Fibocom FG132 0x0112 composition (stable-fixes).\n- USB: serial: option: add Quectel RG650V (stable-fixes).\n- USB: serial: option: add Telit FN920C04 MBIM compositions (stable-fixes).\n- USB: serial: option: add support for Quectel EG916Q-GL (stable-fixes).\n- USB: serial: qcserial: add support for Sierra Wireless EM86xx (stable-fixes).\n- Use pahole -j1 option for reproducible builds (bsc#1230414 bsc#1229450).\n- accel/qaic: Fix the for loop used to walk SG table (git-fixes).\n- accel: Use XArray instead of IDR for minors (jsc#PED-11580).\n- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (git-fixes).\n- ad7780: fix division by zero in ad7780_write_raw() (git-fixes).\n- aes-gcm-p10: Use the correct bit to test for P10 (bsc#1232704).\n- amd-pstate: Set min_perf to nominal_perf for active mode performance gov (git-fixes).\n- apparmor: fix 'Do simple duplicate message elimination' (git-fixes).\n- apparmor: test: Fix memory leak for aa_unpack_strdup() (git-fixes).\n- apparmor: use kvfree_sensitive to free data-\u003edata (git-fixes).\n- arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (git-fixes)\n- arm64: cputype: Add Neoverse-N3 definitions (git-fixes)\n- arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (git-fixes)\n- arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay (git-fixes)\n- arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay (git-fixes)\n- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (git-fixes)\n- arm64: dts: imx8qxp: Add VPU subsystem file (git-fixes)\n- arm64: dts: imx93: add nvmem property for eqos (git-fixes)\n- arm64: dts: imx93: add nvmem property for fec1 (git-fixes)\n- arm64: dts: imx93: add ocotp node (git-fixes)\n- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus (git-fixes)\n- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes (git-fixes)\n- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (git-fixes)\n- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (git-fixes)\n- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo (git-fixes)\n- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes (git-fixes)\n- arm64: dts: rockchip: Fix rt5651 compatible value on (git-fixes)\n- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610 (git-fixes)\n- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node (git-fixes)\n- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma (git-fixes)\n- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (git-fixes)\n- arm64: dts: rockchip: Remove undocumented supports-emmc property (git-fixes)\n- arm64: dts: rockchip: fix i2c2 pinctrl-names property on (git-fixes)\n- arm64: dts: rockchip: remove num-slots property from (git-fixes)\n- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone (git-fixes)\n- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (git-fixes).\n- arm64: errata: Expand speculative SSBS workaround once more (git-fixes)\n- arm64: esr: Define ESR_ELx_EC_* constants as UL (git-fixes)\n- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (git-fixes)\n- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS (git-fixes).\n- arm64: probes: Fix simulate_ldr*_literal() (git-fixes)\n- arm64: probes: Fix uprobes for big-endian kernels (git-fixes)\n- arm64: probes: Remove broken LDR (literal) uprobe support (git-fixes)\n- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (git-fixes)\n- arm64: smccc: replace custom COUNT_ARGS() \u0026 CONCATENATE() (git-fixes)\n- arm64: tegra: Move AGX Orin nodes to correct location (git-fixes)\n- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (git-fixes)\n- ata: libata: Set DID_TIME_OUT for commands that actually timed out (git-fixes).\n- ata: libata: avoid superfluous disk spin down + spin up during hibernation (git-fixes).\n- audit: do not WARN_ON_ONCE(!current-\u003emm) in audit_exe_compare() (git-fixes).\n- audit: do not take task_lock() in audit_exe_compare() code path (git-fixes).\n- block: print symbolic error name instead of error code (bsc#1231872).\n- block: sed-opal: add ioctl IOC_OPAL_SET_SID_PW (bsc#1229677).\n- bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response (git-fixes).\n- bnxt_en: Fix error recovery for 5760X (P7) chips (git-fixes).\n- bnxt_en: Fix the PCI-AER routines (git-fixes).\n- bnxt_en: Restore PTP tx_avail count in case of skb_pad() error (git-fixes).\n- bnxt_en: refactor reset close code (git-fixes).\n- bpf, arm64: Fix address emission with tag-based KASAN enabled (git-fixes)\n- bpf, arm64: Remove garbage frame for struct_ops trampoline (git-fixes)\n- bpf, lsm: Add disabled BPF LSM hook list (git-fixes).\n- bpf, net: Fix a potential race in do_sock_getsockopt() (git-fixes).\n- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock (git-fixes).\n- bpf, verifier: Correct tail_call_reachable for bpf prog (git-fixes).\n- bpf, vsock: Drop static vsock_bpf_prot initialization (git-fixes).\n- bpf, x64: Remove tail call detection (git-fixes).\n- bpf,perf: Fix perf_event_detach_bpf_prog error handling (git-fixes).\n- bpf: Fail verification for sign-extension of packet data/data_end/data_meta (git-fixes).\n- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (git-fixes).\n- bpf: Fix error message on kfunc arg type mismatch (git-fixes).\n- bpf: Fix helper writes to read-only maps (git-fixes).\n- bpf: Fix tailcall cases in test_bpf (git-fixes).\n- bpf: Fix truncation bug in coerce_reg_to_size_sx() (git-fixes).\n- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types (git-fixes).\n- bpf: Remove truncation test in bpf_strtol and bpf_strtoul helpers (git-fixes).\n- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error (git-fixes).\n- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos (git-fixes).\n- btf, scripts: rust: drop is_rust_module.sh (bsc#1230414 bsc#1229450).\n- btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io() (bsc#1233193)\n- btrfs: send: fix invalid clone operation for file that got its size decreased (git-fixes).\n- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (git-fixes).\n- can: c_can: fix {rx,tx}_errors statistics (git-fixes).\n- can: dev: can_set_termination(): allow sleeping GPIOs (git-fixes).\n- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: hi311x: hi3110_can_ist(): fix potential use-after-free (git-fixes).\n- can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics (git-fixes).\n- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: j1939: j1939_session_new(): fix skb reference counting (git-fixes).\n- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation (git-fixes).\n- can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6 (git-fixes).\n- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes (git-fixes).\n- can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode (stable-fixes).\n- can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (git-fixes).\n- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (git-fixes).\n- ceph: fix cap ref leak via netfs init_request (bsc#1231384).\n- cgroup/bpf: only cgroup v2 can be attached by bpf programs (bsc#1234108).\n- clk: bcm: bcm53573: fix OF node leak in init (stable-fixes).\n- clk: clk-apple-nco: Add NULL check in applnco_probe (git-fixes).\n- clk: clk-axi-clkgen: make sure to enable the AXI bus clock (git-fixes).\n- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (stable-fixes).\n- clk: imx: clk-scu: fix clk enable state save and restore (git-fixes).\n- clk: imx: fracn-gppll: correct PLL initialization flow (git-fixes).\n- clk: imx: fracn-gppll: fix pll power up (git-fixes).\n- clk: imx: lpcg-scu: SW workaround for errata (e10858) (git-fixes).\n- clk: qcom: clk-alpha-pll: drop lucid-evo pll enabled warning (git-fixes).\n- clk: qcom: clk-alpha-pll: fix lucid 5lpe pll enabled check (git-fixes).\n- clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (git-fixes).\n- clk: renesas: rzg2l: Fix FOUTPOSTDIV clk (git-fixes).\n- clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset (git-fixes).\n- comedi: Flush partial mappings in error case (git-fixes).\n- comedi: ni_routing: tools: Check when the file could not be opened (stable-fixes).\n- config s390x: build ultravisor userspace access into the kernel (bsc#1232090)\n- config.sh: Remove Arm build project, we do not build armv7 configs\n- config: Disable LAM on x86 (bsc#1217845)\n- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems (git-fixes).\n- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost() (git-fixes).\n- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw() (git-fixes).\n- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost() (git-fixes).\n- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power() (git-fixes).\n- cpufreq: loongson2: Unregister platform_driver on failure (git-fixes).\n- cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (git-fixes).\n- crypto: aes-gcm-p10 - Use the correct bit to test for P10 (bsc#1232704).\n- crypto: api - Fix liveliness check in crypto_alg_tested (stable-fixes).\n- crypto: bcm - add error check in the ahash_hmac_init function (git-fixes).\n- crypto: caam - Fix the pointer passed to caam_qi_shutdown() (git-fixes).\n- crypto: caam - add error check to caam_rsa_set_priv_key_form (git-fixes).\n- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (git-fixes).\n- crypto: cavium - Fix the if condition to exit loop after timeout (git-fixes).\n- crypto: hisilicon/qm - flush all work before driver removed (bsc#1232075)\n- crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() (git-fixes).\n- crypto: octeontx - Fix authenc setkey (stable-fixes).\n- crypto: octeontx* - Select CRYPTO_AUTHENC (git-fixes).\n- crypto: octeontx2 - Fix authenc setkey (stable-fixes).\n- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (git-fixes).\n- crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTO_SIMD and re-enable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10 (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (bsc#1230501 ltc#208632).\n- crypto: powerpc/p10-aes-gcm - Register modules as SIMD (bsc#1230501 ltc#208632).\n- crypto: qat - remove check after debugfs_create_dir() (git-fixes).\n- crypto: qat - remove faulty arbiter config reset (git-fixes).\n- crypto: qat/qat_4xxx - fix off by one in uof_get_name() (git-fixes).\n- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (git-fixes).\n- cxgb4: Properly lock TX queue for the selftest (git-fixes).\n- cxgb4: add forgotten u64 ivlan cast before shift (git-fixes).\n- cxgb4: unnecessary check for 0 in the free_sge_txq_uld() function (git-fixes).\n- cxl: downgrade a warning message to debug level in cxl_probe_component_regs() (bsc#1229165).\n- dcache: keep dentry_hashtable or d_hash_shift even when not used (git-fixes).\n- debugfs: fix automount d_fsdata usage (git-fixes).\n- devlink: Fix command annotation documentation (git-fixes).\n- dma-fence: Fix reference leak on fence merge failure path (git-fixes).\n- dma-fence: Use kernel's sort for merging fences (git-fixes).\n- dmaengine: sh: rz-dmac: handle configs where one address is zero (git-fixes).\n- dmaengine: ti: k3-udma: Set EOP for all TRs in cyclic BCDMA transfer (git-fixes).\n- doc: rcu: update printed dynticks counter bits (git-fixes).\n- driver core: bus: Fix double free in driver API bus_register() (stable-fixes).\n- driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (stable-fixes).\n- drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() (git-fixes).\n- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring (git-fixes).\n- drm/amd/display: Add HDMI DSC native YCbCr422 support (stable-fixes).\n- drm/amd/display: Add disable timeout option (bsc#1231435)\n- drm/amd/display: Adjust VSDB parser for replay feature (stable-fixes).\n- drm/amd/display: Check link_res-\u003ehpo_dp_link_enc before using it (bsc#1231944)\n- drm/amd/display: Check null pointer before dereferencing se (stable-fixes).\n- drm/amd/display: Clean up dsc blocks in accelerated mode (stable-fixes).\n- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (stable-fixes).\n- drm/amd/display: Fix brightness level not retained over reboot (git-fixes).\n- drm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe (git-fixes).\n- drm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in hwss_setup_dpp (git-fixes).\n- drm/amd/display: Remove a redundant check in authenticated_dp (stable-fixes).\n- drm/amd/display: Revert \"Check HDCP returned status\" (stable-fixes).\n- drm/amd/display: Round calculated vtotal (stable-fixes).\n- drm/amd/display: Skip to enable dsc if it has been off (stable-fixes).\n- drm/amd/display: Validate backlight caps are sane (stable-fixes).\n- drm/amd/pm: Vangogh: Fix kernel memory out of bounds write (git-fixes).\n- drm/amd: Add some missing straps from NBIO 7.11.0 (git-fixes).\n- drm/amd: Fix initialization mistake for NBIO 7.7.0 (stable-fixes).\n- drm/amd: Guard against bad data for ATIF ACPI method (git-fixes).\n- drm/amdgpu/swsmu: Only force workload setup on init (git-fixes).\n- drm/amdgpu/vcn: enable AV1 on both instances (stable-fixes).\n- drm/amdgpu: Adjust debugfs eviction and IB access permissions (stable-fixes).\n- drm/amdgpu: Adjust debugfs register access permissions (stable-fixes).\n- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (git-fixes).\n- drm/amdgpu: Fix JPEG v4.0.3 register write (git-fixes).\n- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (stable-fixes).\n- drm/amdgpu: fix check in gmc_v9_0_get_vm_pte() (git-fixes).\n- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (git-fixes).\n- drm/amdkfd: Accounting pdd vram_usage for svm (stable-fixes).\n- drm/amdkfd: Fix wrong usage of INIT_WORK() (git-fixes).\n- drm/bridge: anx7625: Drop EDID cache on bridge power off (git-fixes).\n- drm/bridge: it6505: Drop EDID cache on bridge power off (git-fixes).\n- drm/bridge: tc358767: Fix link properties discovery (git-fixes).\n- drm/bridge: tc358768: Fix DSI command tx (git-fixes).\n- drm/etnaviv: Request pages from DMA32 zone on addressing_limited (git-fixes).\n- drm/etnaviv: hold GPU lock across perfmon sampling (git-fixes).\n- drm/i915/gem: fix bitwise and logical AND mixup (git-fixes).\n- drm/i915/hdcp: fix connector refcounting (git-fixes).\n- drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/mediatek: Fix child node refcount handling in early exit (git-fixes).\n- drm/mediatek: Fix get efuse issue for MT8188 DPTX (git-fixes).\n- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (git-fixes).\n- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (git-fixes).\n- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds() (git-fixes).\n- drm/msm/dpu: do not always program merge_3d block (git-fixes).\n- drm/msm/dpu: drop LM_3 / LM_4 on MSM8998 (git-fixes).\n- drm/msm/dpu: drop LM_3 / LM_4 on SDM845 (git-fixes).\n- drm/msm/dpu: make sure phys resources are properly initialized (git-fixes).\n- drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check (git-fixes).\n- drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block (git-fixes).\n- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (git-fixes).\n- drm/msm/dsi: improve/fix dsc pclk calculation (git-fixes).\n- drm/msm/gpu: Check the status of registration to PM QoS (git-fixes).\n- drm/msm: Allocate memory for disp snapshot with kvzalloc() (git-fixes).\n- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (git-fixes).\n- drm/msm: Fix some typos in comment (git-fixes).\n- drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new() (git-fixes).\n- drm/omap: Fix locking in omap_gem_new_dmabuf() (git-fixes).\n- drm/omap: Fix possible NULL dereference (git-fixes).\n- drm/panfrost: Add missing OPP table refcnt decremental (git-fixes).\n- drm/panfrost: Remove unused id_mask from struct panfrost_model (git-fixes).\n- drm/radeon: Fix encoder-\u003epossible_clones (git-fixes).\n- drm/rockchip: vop: Fix a dereferenced before check warning (git-fixes).\n- drm/sched: Add locking to drm_sched_entity_modify_sched (git-fixes).\n- drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job (git-fixes).\n- drm/sti: Add __iomem for mixer_dbg_mxn's parameter (git-fixes).\n- drm/sti: avoid potential dereference of error pointers (git-fixes).\n- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (git-fixes).\n- drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (git-fixes).\n- drm/v3d: Address race-condition in MMU flush (git-fixes).\n- drm/v3d: Enable Performance Counters before clearing them (git-fixes).\n- drm/v3d: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (stable-fixes).\n- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush (git-fixes).\n- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load (git-fixes).\n- drm/vc4: Stop the active perfmon before being destroyed (git-fixes).\n- drm/vc4: hdmi: Avoid hang with debug registers when suspended (git-fixes).\n- drm/vc4: hvs: Correct logic on stopping an HVS channel (git-fixes).\n- drm/vc4: hvs: Do not write gamma luts on 2711 (git-fixes).\n- drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer (git-fixes).\n- drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function (git-fixes).\n- drm/vkms: Drop unnecessary call to drm_crtc_cleanup() (git-fixes).\n- drm/vmwgfx: Handle surface check failure correctly (git-fixes).\n- drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (stable-fixes).\n- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS (git-fixes).\n- drm: Expand max DRM device number to full MINORBITS (jsc#PED-11580).\n- drm: Use XArray instead of IDR for minors (jsc#PED-11580).\n- drm: use ATOMIC64_INIT() for atomic64_t (git-fixes).\n- drm: xlnx: zynqmp_dpsub: fix hotplug detection (git-fixes).\n- drm: zynqmp_kms: Unplug DRM device before removal (git-fixes).\n- e1000e: Fix S0ix residency on corporate systems (git-fixes).\n- e1000e: Remove Meteor Lake SMBUS workarounds (git-fixes).\n- e1000e: change I219 (19) devices to ADP (git-fixes).\n- e1000e: fix force smbus during suspend flow (git-fixes).\n- e1000e: move force SMBUS near the end of enable_ulp function (git-fixes).\n- efi/libstub: Free correct pointer on failure (git-fixes).\n- efi/libstub: fix efi_parse_options() ignoring the default command line (git-fixes).\n- efi/libstub: zboot.lds: Discard .discard sections (stable-fixes).\n- efi/memattr: Ignore table if the size is clearly bogus (bsc#1231465).\n- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (stable-fixes).\n- eth: bnxt: fix counting packets discarded due to OOM and netpoll (git-fixes).\n- ext4: do not track ranges in fast_commit if inode has inlined data (bsc#1231635).\n- ext4: fix fast commit inode enqueueing during a full journal commit (bsc#1231636).\n- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible() (bsc#1231637).\n- ext4: fix possible tid_t sequence overflows (bsc#1231634).\n- ext4: fix slab-use-after-free in ext4_split_extent_at() (bsc#1232201)\n- ext4: fix unttached inode after power cut with orphan file feature enabled (bsc#1234009).\n- ext4: mark fc as ineligible using an handle in ext4_xattr_set() (bsc#1231640).\n- ext4: use handle to mark fc as ineligible in __track_dentry_update() (bsc#1231639).\n- f2fs: get out of a repeat loop when getting a locked data page (bsc#1234011).\n- fat: fix uninitialized variable (git-fixes).\n- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (stable-fixes).\n- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (git-fixes).\n- fbdev: sisfb: Fix strbuf array overflow (stable-fixes).\n- fgraph: Change the name of cpuhp state to \"fgraph:online\" (git-fixes).\n- fgraph: Fix missing unlock in register_ftrace_graph() (git-fixes).\n- fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks (git-fixes).\n- filemap: remove use of wait bookmarks (bsc#1224088).\n- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (git-fixes).\n- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() (git-fixes).\n- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (git-fixes).\n- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (git-fixes).\n- firmware: google: Unregister driver_info on failure (git-fixes).\n- firmware_loader: Fix possible resource leak in fw_log_firmware_info() (git-fixes).\n- fs/9p: drop inodes immediately on non-.L too (git-fixes).\n- fs/9p: fix the cache always being enabled on files with qid flags (git-fixes).\n- fs/ntfs3: Add more attributes checks in mi_enum_attr() (bsc#1233207)\n- fs/ntfs3: Fixed overflow check in mi_enum_attr() (bsc#1233207)\n- fs/ntfs3: Sequential field availability check in mi_enum_attr() (bsc#1233207)\n- fs: Fix uninitialized value issue in from_kuid and from_kgid (git-fixes).\n- genirq/msi: Fix off-by-one error in msi_domain_alloc() (git-fixes).\n- goldfish: Fix unused const variable 'goldfish_pipe_acpi_match' (git-fixes).\n- gpio: aspeed: Add the flush write to ensure the write complete (git-fixes).\n- gpio: aspeed: Use devm_clk api to manage clock source (git-fixes).\n- gpio: davinci: fix lazy disable (git-fixes).\n- gpio: exar: set value when external pull-up or pull-down is present (git-fixes).\n- gpio: zevio: Add missed label initialisation (git-fixes).\n- gve: Fix XDP TX completion handling when counters overflow (git-fixes).\n- gve: Fix an edge case for TSO skb validity check (git-fixes).\n- gve: ignore nonrelevant GSO type bits when processing TSO headers (git-fixes).\n- hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (git-fixes).\n- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (git-fixes).\n- hv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer (git-fixes).\n- hwmon: (adm9240) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (adt7470) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (max16065) Fix alarm attributes (git-fixes).\n- hwmon: (max16065) Remove use of i2c_match_id() (stable-fixes).\n- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list (stable-fixes).\n- hwmon: (nct6775-core) Fix overflows seen when writing limit attributes (git-fixes).\n- hwmon: (tmp513) Add missing dependency on REGMAP_I2C (git-fixes).\n- hwmon: (tps23861) Fix reporting of negative temperatures (git-fixes).\n- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature (git-fixes).\n- i2c: core: Setup i2c_adapter runtime-pm before calling device_add() (git-fixes).\n- i2c: core: fix lockdep warning for sparsely nested adapter chain (git-fixes).\n- i2c: cpm: Remove linux,i2c-index conversion from be32 (git-fixes).\n- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set (git-fixes).\n- i2c: exynos5: Calculate t_scl_l, t_scl_h according to i2c spec (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell Precision 3540 (git-fixes).\n- i2c: i801: Add lis3lv02d for Dell XPS 15 7590 (git-fixes).\n- i2c: i801: Use a different adapter-name for IDF adapters (stable-fixes).\n- i2c: i801: add helper i801_restore_regs (git-fixes).\n- i2c: ismt: kill transaction in hardware on timeout (git-fixes).\n- i2c: ocores: Move system PM hooks to the NOIRQ phase (git-fixes).\n- i2c: ocores: Remove #ifdef guards for PM related functions (git-fixes).\n- i2c: omap: switch to NOIRQ_SYSTEM_SLEEP_PM_OPS() and RUNTIME_PM_OPS() (git-fixes).\n- i2c: omap: wakeup the controller during suspend() callback (git-fixes).\n- i2c: rcar: properly format a debug output (git-fixes).\n- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume (git-fixes).\n- i2c: stm32f7: perform most of irq job in threaded handler (git-fixes).\n- i2c: synquacer: Deal with optional PCLK correctly (git-fixes).\n- i2c: synquacer: Remove a clk reference from struct synquacer_i2c (stable-fixes).\n- i2c: xiic: Try re-initialization on bus busy timeout (git-fixes).\n- i2c: xiic: improve error message when transfer fails to start (stable-fixes).\n- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (git-fixes).\n- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition (stable-fixes).\n- i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- i40e: Fix XDP program unloading while removing the driver (git-fixes).\n- i40e: Report MFS in decimal base instead of hex (git-fixes).\n- i40e: fix race condition by adding filter's intermediate sync state (git-fixes).\n- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (git-fixes).\n- iavf: Fix TC config comparison with existing adapter TC config (git-fixes).\n- ice: Fix VSI list rule with ICE_SW_LKUP_LAST type (git-fixes).\n- ice: Fix checking for unsupported keys on non-tunnel device (git-fixes).\n- ice: Fix lldp packets dropping after changing the number of channels (git-fixes).\n- ice: Fix netif_is_ice() in Safe Mode (git-fixes).\n- ice: Fix package download algorithm (git-fixes).\n- ice: Fix recipe read procedure (git-fixes).\n- ice: Fix reset handler (git-fixes).\n- ice: Flush FDB entries before reset (git-fixes).\n- ice: Interpret .set_channels() input differently (git-fixes).\n- ice: Rebuild TC queues on VSI queue reconfiguration (git-fixes).\n- ice: Reject pin requests with unsupported flags (git-fixes).\n- ice: add flag to distinguish reset from .ndo_bpf in XDP rings config (git-fixes).\n- ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (git-fixes).\n- ice: avoid IRQ collision to fix init failure on ACPI S3 resume (git-fixes).\n- ice: clear port vlan config during reset (git-fixes).\n- ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins (git-fixes).\n- ice: do not bring the VSI up, if it was down before the XDP setup (git-fixes).\n- ice: do not busy wait for Rx queue disable in ice_qp_dis() (git-fixes).\n- ice: fix 200G PHY types to link speed mapping (git-fixes).\n- ice: fix 200G link speed message log (git-fixes).\n- ice: fix ICE_LAST_OFFSET formula (git-fixes).\n- ice: fix VLAN replay after reset (git-fixes).\n- ice: fix VSI lists confusion when adding VLANs (git-fixes).\n- ice: fix accounting for filters shared by multiple VSIs (git-fixes).\n- ice: fix accounting if a VLAN already exists (git-fixes).\n- ice: fix iteration of TLVs in Preserved Fields Area (git-fixes).\n- ice: fix page reuse when PAGE_SIZE is over 8k (git-fixes).\n- ice: fix reads from NVM Shadow RAM on E830 and E825-C devices (git-fixes).\n- ice: fix truesize operations for PAGE_SIZE \u003e= 8192 (git-fixes).\n- ice: implement AQ download pkg retry (git-fixes).\n- ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors() (git-fixes).\n- ice: remove af_xdp_zc_qps bitmap (git-fixes).\n- ice: replace synchronize_rcu with synchronize_net (git-fixes).\n- ice: respect netif readiness in AF_XDP ZC related ndo's (git-fixes).\n- ice: set correct dst VSI in only LAN filters (git-fixes).\n- ice: tc: allow zero flags in parsing tc flower (git-fixes).\n- ice: tc: check src_vsi in case of traffic from VF (git-fixes).\n- ice: use proper macro for testing bit (git-fixes).\n- idpf: Interpret .set_channels() input differently (git-fixes).\n- idpf: avoid bloating \u0026idpf_q_vector with big %NR_CPUS (git-fixes).\n- idpf: do not enable NAPI and interrupts prior to allocating Rx buffers (git-fixes).\n- idpf: do not skip over ethtool tcp-data-split setting (git-fixes).\n- idpf: fix UAFs when destroying the queues (git-fixes).\n- idpf: fix memleak in vport interrupt configuration (git-fixes).\n- idpf: fix memory leaks and crashes while performing a soft reset (git-fixes).\n- ieee802154: Fix build error (git-fixes).\n- igb: Always call igb_xdp_ring_update_tail() under Tx lock (git-fixes).\n- igb: Disable threaded IRQ for igb_msix_other (git-fixes).\n- igb: Fix not clearing TimeSync interrupts for 82580 (git-fixes).\n- igc: Fix double reset adapter triggered from a single taprio cmd (git-fixes).\n- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (git-fixes).\n- igc: Fix qbv tx latency by setting gtxoffset (git-fixes).\n- igc: Fix qbv_config_change_errors logics (git-fixes).\n- igc: Fix reset adapter logics when tx mode change (git-fixes).\n- igc: Unlock on error in igc_io_resume() (git-fixes).\n- iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name() (git-fixes).\n- iio: accel: bma400: Fix uninitialized variable field_value in tap event handling (git-fixes).\n- iio: accel: kx022a: Fix raw read format (git-fixes).\n- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (git-fixes).\n- iio: adc: ad7606: Fix typo in the driver name (git-fixes).\n- iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer (git-fixes).\n- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (git-fixes).\n- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (git-fixes).\n- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig (git-fixes).\n- iio: gts-helper: Fix memory leaks for the error path of iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table() (git-fixes).\n- iio: gts: Fix uninitialized symbol 'ret' (git-fixes).\n- iio: gts: fix infinite loop for gain_to_scaletables() (git-fixes).\n- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (git-fixes).\n- iio: light: al3010: Fix an error handling path in al3010_probe() (git-fixes).\n- iio: light: opt3001: add missing full-scale range value (git-fixes).\n- iio: light: veml6030: fix ALS sensor resolution (git-fixes).\n- iio: light: veml6030: fix IIO device retrieval from embedded device (git-fixes).\n- iio: light: veml6030: fix microlux value calculation (git-fixes).\n- iio: magnetometer: ak8975: Convert enum-\u003epointer for data in the match tables (stable-fixes).\n- iio: magnetometer: ak8975: Fix 'Unexpected device' error (git-fixes).\n- iio: magnetometer: ak8975: drop incorrect AK09116 compatible (git-fixes).\n- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (git-fixes).\n- ima: fix buffer overrun in ima_eventdigest_init_common (git-fixes).\n- initramfs: avoid filename buffer overrun (bsc#1232436).\n- intel_idle: add Granite Rapids Xeon support (bsc#1231630).\n- intel_idle: fix ACPI _CST matching for newer Xeon platforms (bsc#1231630).\n- io_uring/eventfd: move to more idiomatic RCU free usage (git-fixes).\n- io_uring/io-wq: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/io-wq: inherit cpuset of cgroup in io worker (git-fixes).\n- io_uring/net: harden multishot termination case for recv (git-fixes).\n- io_uring/rw: fix cflags posting for single issue multishot read (git-fixes).\n- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (git-fixes).\n- io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN (git-fixes).\n- io_uring/sqpoll: close race on waiting for sqring entries (git-fixes).\n- io_uring/sqpoll: do not allow pinning outside of cpuset (git-fixes).\n- io_uring/sqpoll: do not put cpumask on stack (git-fixes).\n- io_uring/sqpoll: retain test for whether the CPU is valid (git-fixes).\n- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL (git-fixes).\n- iommu/amd: Allocate the page table root using GFP_KERNEL (git-fixes).\n- iommu/amd: Do not set the D bit on AMD v2 table entries (git-fixes).\n- iommu/amd: Fix typo of , instead of ; (git-fixes).\n- iommu/vt-d: Always reserve a domain ID for identity setup (git-fixes).\n- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (git-fixes).\n- iommufd: Check the domain owner of the parent before creating a nesting domain (git-fixes).\n- iommufd: Protect against overflow of ALIGN() during iova allocation (git-fixes).\n- irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (git-fixes).\n- jbd2: Move j_transaction_overhead_buffers into a hole (bsc#1234042).\n- jbd2: avoid infinite transaction commit loop (bsc#1234039).\n- jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (bsc#1234043).\n- jbd2: avoid mount failed when commit block is partial submitted (bsc#1234040).\n- jbd2: correct the printing of write_flags in jbd2_write_superblock() (bsc#1234045).\n- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit (bsc#1231638).\n- jbd2: fix kernel-doc for j_transaction_overhead_buffers (bsc#1234042).\n- jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (bsc#1234044).\n- jbd2: fix soft lockup in journal_finish_inode_data_buffers() (bsc#1234046).\n- jbd2: make jbd2_journal_get_max_txn_bufs() internal (bsc#1234041).\n- jbd2: precompute number of transaction descriptor blocks (bsc#1234042).\n- jfs: Fix sanity check in dbMount (git-fixes).\n- jfs: Fix uaf in dbFreeBits (git-fixes).\n- jfs: Fix uninit-value access of new_ea in ea_buffer (git-fixes).\n- jfs: UBSAN: shift-out-of-bounds in dbFindBits (git-fixes).\n- jfs: check if leafidx greater than num leaves per dmap tree (git-fixes).\n- jump_label: Fix static_key_slow_dec() yet again (git-fixes).\n- kABI fix of VM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).\n- kABI workaround for ASoC SOF (bsc#1233305).\n- kABI: Restore exported __arm_smccc_sve_check (git-fixes)\n- kABI: bpf: enum bpf_{type_flag,arg_type} kABI workaround (git-fixes).\n- kABI: bpf: struct bpf_insn_acces_aux kABI workaround (git-fixes).\n- kabi, mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes kabi).\n- kasan: Fix Software Tag-Based KASAN with GCC (git-fixes).\n- kasan: move checks to do_strncpy_from_user (git-fixes).\n- kbuild, bpf: Use test-ge check for v1.25-only pahole (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Add module-specific pahole flags for distilled base BTF (bsc#1230414 bsc#1229450).\n- kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later (bsc#1230414 bsc#1229450).\n- kbuild: avoid too many execution of scripts/pahole-flags.sh (bsc#1230414 bsc#1229450).\n- kbuild: bpf: Tell pahole to DECL_TAG kfuncs (bsc#1230414 bsc#1229450).\n- kconfig: qconf: fix buffer overflow in debug links (git-fixes).\n- kernel-binary: Enable livepatch package only when livepatch is enabled Otherwise the filelist may be empty failing the build (bsc#1218644).\n- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y (git-fixes).\n- keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry (git-fixes).\n- keys: Fix overwrite of key expiration on instantiation (git-fixes).\n- kthread: unpark only parked kthread (git-fixes).\n- leds: lp55xx: Remove redundant test for invalid channel number (git-fixes).\n- lib/xarray: introduce a new helper xas_get_order (bsc#1231617).\n- lib: string_helpers: silence snprintf() output truncation warning (git-fixes).\n- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (git-fixes).\n- macsec: do not increment counters for an unrelated SA (git-fixes).\n- mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (git-fixes).\n- maple_tree: correct tree corruption on spanning store (git-fixes).\n- maple_tree: fix alloc node fail issue (git-fixes).\n- maple_tree: refine mas_store_root() on storing NULL (git-fixes).\n- media: adv7604: prevent underflow condition when reporting colorspace (git-fixes).\n- media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: amphion: Set video drvdata before register video device (git-fixes).\n- media: ar0521: do not overflow when checking PLL values (git-fixes).\n- media: atomisp: Add check for rgby_data memory allocation failure (git-fixes).\n- media: bttv: use audio defaults for winfast2000 (git-fixes).\n- media: core: v4l2-ioctl: check if ioctl is known to avoid NULL name (git-fixes).\n- media: cx24116: prevent overflows on SNR calculus (git-fixes).\n- media: dvb_frontend: do not play tricks with underflow values (git-fixes).\n- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (stable-fixes).\n- media: dvbdev: prevent the risk of out of memory access (git-fixes).\n- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (git-fixes).\n- media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: i2c: imx335: Enable regulator supplies (stable-fixes).\n- media: i2c: tc358743: Fix crash in the probe error path when using polling (git-fixes).\n- media: imx-jpeg: Ensure power suppliers be suspended before detach them (git-fixes).\n- media: imx-jpeg: Set video drvdata before register video device (git-fixes).\n- media: imx335: Fix reset-gpio handling (git-fixes).\n- media: mantis: remove orphan mantis_core.h (git-fixes).\n- media: mtk-jpeg: Fix null-ptr-deref during unload module (git-fixes).\n- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (git-fixes).\n- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (git-fixes).\n- media: platform: exynos4-is: Fix an OF node reference leak in fimc_md_is_isp_available (git-fixes).\n- media: pulse8-cec: fix data timestamp at pulse8_setup() (git-fixes).\n- media: s5p-jpeg: prevent buffer overflows (git-fixes).\n- media: stb0899_algo: initialize cfr before using it (git-fixes).\n- media: ts2020: fix null-ptr-deref in ts2020_probe() (git-fixes).\n- media: uvcvideo: Require entities to have a non-zero unique ID (git-fixes).\n- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (git-fixes).\n- media: uvcvideo: Stop stream during unregister (git-fixes).\n- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (git-fixes).\n- media: v4l2-tpg: prevent the risk of a division by zero (git-fixes).\n- media: vb2: Fix comment (git-fixes).\n- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() (stable-fixes).\n- media: videobuf2: fix typo: vb2_dbuf -\u003e vb2_qbuf (git-fixes).\n- media: wl128x: Fix atomicity violation in fmc_send_cmd() (git-fixes).\n- mei: use kvmalloc for read buffer (git-fixes).\n- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).\n- mfd: rt5033: Fix missing regmap_del_irq_chip() (git-fixes).\n- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (git-fixes).\n- minmax: avoid overly complex min()/max() macro arguments in xen (git-fixes).\n- minmax: scsi: fix mis-use of 'clamp()' in sr.c (git-fixes).\n- misc: apds990x: Fix missing pm_runtime_disable() (git-fixes).\n- mlx5: avoid truncating error message (git-fixes).\n- mlx5: stop warning for 64KB pages (git-fixes).\n- mlxbf_gige: disable RX filters until RX path initialized (git-fixes).\n- mm/filemap: optimize filemap folio adding (bsc#1231617).\n- mm/filemap: return early if failed to allocate memory for split (bsc#1231617).\n- mm/hugetlb: fix nodes huge page allocation when there are surplus pages (bsc#1234012).\n- mm: avoid unsafe VMA hook invocation when error arises on mmap hook (git-fixes).\n- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace point (git-fixes).\n- mm: mmap: no need to call khugepaged_enter_vma() for stack (jsc#PED-10978).\n- mm: move dummy_vm_ops out of a header (git-fixes prerequisity).\n- mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (git-fixes).\n- mm: refactor map_deny_write_exec() (git-fixes).\n- mm: resolve faulty mmap_region() error path behaviour (git-fixes).\n- mm: unconditionally close VMAs on error (git-fixes).\n- mmc: core: Further prevent card detect during shutdown (git-fixes).\n- mmc: mmc_spi: drop buggy snprintf() (git-fixes).\n- mmc: sunxi-mmc: Fix A100 compatible description (git-fixes).\n- modpost: fix acpi MODULE_DEVICE_TABLE built with mismatched endianness (git-fixes).\n- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (git-fixes).\n- modpost: remove incorrect code in do_eisa_entry() (git-fixes).\n- module: abort module loading when sysfs setup suffer errors (git-fixes).\n- mtd: rawnand: atmel: Fix possible memory leak (git-fixes).\n- mtd: spi-nor: core: replace dummy buswidth from addr to data (git-fixes).\n- nbd: fix race between timeout and normal completion (bsc#1230918).\n- net/mlx5: Add missing masks and QoS bit masks for scheduling elements (git-fixes).\n- net/mlx5: Added cond_resched() to crdump collection (git-fixes).\n- net/mlx5: Check capability for fw_reset (git-fixes).\n- net/mlx5: Check for invalid vector index on EQ creation (git-fixes).\n- net/mlx5: Explicitly set scheduling element and TSAR type (git-fixes).\n- net/mlx5: Fix command bitmask initialization (git-fixes).\n- net/mlx5: Fix error handling in irq_pool_request_irq (git-fixes).\n- net/mlx5: Lag, do bond only if slaves agree on roce state (git-fixes).\n- net/mlx5: Lag, do not use the hardcoded value of the first port (git-fixes).\n- net/mlx5: Stop waiting for PCI if pci channel is offline (git-fixes).\n- net/mlx5: Unregister notifier on eswitch init failure (git-fixes).\n- net/mlx5: Update the list of the PCI supported devices (git-fixes).\n- net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (git-fixes).\n- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map (git-fixes).\n- net/mlx5e: Add missing link modes to ptys2ethtool_map (git-fixes).\n- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (git-fixes).\n- net/mlx5e: Correctly report errors for ethtool rx flows (git-fixes).\n- net/mlx5e: Do not call cleanup on profile rollback failure (git-fixes).\n- net/mlx5e: Fix IPsec tunnel mode offload feature check (git-fixes).\n- net/mlx5e: Fix UDP GSO for encapsulated packets (git-fixes).\n- net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (git-fixes).\n- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (git-fixes).\n- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (git-fixes).\n- net: mana: Implement get_ringparam/set_ringparam for mana (bsc#1229891).\n- net: mana: Improve mana_set_channels() in low mem conditions (bsc#1230289).\n- net: mdio-ipq4019: add missing error check (git-fixes).\n- net: phy: Remove LED entry from LEDs list on unregister (git-fixes).\n- net: phy: bcm84881: Fix some error handling paths (git-fixes).\n- net: phy: dp83822: Fix reset pin definitions (git-fixes).\n- net: phy: dp83869: fix memory corruption when enabling fiber (git-fixes).\n- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (git-fixes).\n- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (git-fixes).\n- net: qede: use return from qede_parse_actions() (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flow_spec (git-fixes).\n- net: qede: use return from qede_parse_flow_attr() for flower (git-fixes).\n- net: relax socket state check at accept time (git-fixes).\n- net: stmmac: dwmac-tegra: Fix link bring-up sequence (git-fixes)\n- net: sysfs: Fix /sys/class/net/\u0026lt;iface\u003e path for statistics (git-fixes).\n- net: test for not too small csum_start in virtio_net_hdr_to_skb() (git-fixes).\n- net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (git-fixes).\n- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (git-fixes).\n- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (git-fixes).\n- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (stable-fixes).\n- net: usb: usbnet: fix name regression (get-fixes).\n- net: usb: usbnet: fix race in probe failure (git-fixes).\n- net: wwan: fix global oob in wwan_rtnl_policy (git-fixes).\n- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() (git-fixes).\n- net: xfrm: preserve kabi for xfrm_state (bsc#1233754).\n- netdevsim: copy addresses for both in and out paths (git-fixes).\n- netdevsim: use cond_resched() in nsim_dev_trap_report_work() (git-fixes).\n- netfilter: nf_tables: missing iterator type in lookup walk (git-fixes).\n- nfs: Fix KMSAN warning in decode_getfattr_attrs() (git-fixes).\n- nfs: avoid i_lock contention in nfs_clear_invalid_mapping (git-fixes).\n- nfs: fix memory leak in error path of nfs4_do_reclaim (git-fixes).\n- nfsd: call cache_put if xdr_reserve_space returns NULL (git-fixes).\n- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (git-fixes).\n- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (git-fixes).\n- nfsd: fix refcount leak when file is unhashed after being found (git-fixes).\n- nfsd: map the EBADMSG to nfserr_io to avoid warning (git-fixes).\n- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (git-fixes).\n- nfsd: remove unsafe BUG_ON from set_change_info (bsc#1234121).\n- nfsd: return -EINVAL when namelen is 0 (git-fixes).\n- nilfs2: fix kernel bug due to missing clearing of buffer delay flag (git-fixes).\n- nilfs2: fix potential deadlock with newly created symlinks (git-fixes).\n- nouveau/dmem: Fix privileged error in copy engine channel (git-fixes).\n- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (git-fixes).\n- nouveau/dp: handle retries for AUX CH transfers with GSP (git-fixes).\n- nouveau/gsp: Avoid addressing beyond end of rpc-\u003eentries (stable-fixes).\n- nouveau: fw: sync dma after setup is called (git-fixes).\n- nouveau: handle EBUSY and EAGAIN for GSP aux errors (git-fixes).\n- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- ntfs3: Add bounds checking to mi_enum_attr() (bsc#1233207)\n- nvme-fabrics: fix kernel crash while shutting down controller (git-fixes).\n- nvme-loop: flush off pending I/O while shutting down loop controller (git-fixes).\n- nvme-multipath: suppress partition scan until the disk is ready (bsc#1228244).\n- nvme-pci: fix freeing of the HMB descriptor table (git-fixes).\n- nvme-pci: fix race condition between reset and nvme_dev_disable() (git-fixes).\n- nvme-pci: qdepth 1 quirk (git-fixes).\n- nvme-pci: reverse request order in nvme_queue_rqs (git-fixes).\n- nvme-pci: set doorbell config before unquiescing (git-fixes).\n- nvme/host: Fix RCU list traversal to use SRCU primitive (git-fixes).\n- nvme: disable CC.CRIME (NVME_CC_CRIME) (jsc#PED-9901).\n- nvme: null terminate nvme_tls_attrs (git-fixes).\n- nvme: re-fix error-handling for io_uring nvme-passthrough (git-fixes).\n- nvme: tcp: avoid race between queue_lock lock and destroy (git-fixes).\n- nvmet-auth: assign dh_key to NULL after kfree_sensitive (git-fixes).\n- ocfs2: fix UBSAN warning in ocfs2_verify_volume() (git-fixes).\n- ocfs2: fix the la space leak when unmounting an ocfs2 volume (git-fixes).\n- ocfs2: fix uninit-value in ocfs2_get_block() (git-fixes).\n- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (git-fixes).\n- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (git-fixes).\n- ocfs2: uncache inode which has failed entering the group (git-fixes).\n- of: Add cleanup.h based auto release via __free(device_node) markings (bsc#1232386)\n- parport: Proper fix for array out-of-bounds access (git-fixes).\n- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check (git-fixes).\n- phy: qcom: qmp-combo: move driver data initialisation earlier (git-fixes).\n- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend (git-fixes).\n- phy: tegra: xusb: Add error pointer check in xusb.c (git-fixes).\n- phy: ti: phy-j721e-wiz: fix usxgmii configuration (git-fixes).\n- pinctrl: apple: check devm_kasprintf() returned value (git-fixes).\n- pinctrl: k210: Undef K210_PC_DEFAULT (git-fixes).\n- pinctrl: ocelot: fix system hang on level based interrupts (stable-fixes).\n- pinctrl: qcom: spmi: fix debugfs drive strength (git-fixes).\n- pinctrl: zynqmp: drop excess struct member description (git-fixes).\n- platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (git-fixes).\n- platform/x86/amd/pmc: Detect when STB is not available (git-fixes).\n- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug (git-fixes).\n- platform/x86: dell-sysman: add support for alienware products (stable-fixes).\n- platform/x86: dell-wmi: Ignore suspend notifications (stable-fixes).\n- platform/x86: lenovo-ymc: Ignore the 0x0 state (stable-fixes).\n- platform/x86: panasonic-laptop: Return errno correctly in show callback (git-fixes).\n- platform/x86: touchscreen_dmi: add nanote-next quirk (stable-fixes).\n- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (bsc#1234098).\n- power: reset: brcmstb: Do not go into infinite loop if reset fails (stable-fixes).\n- power: supply: bq27xxx: Fix registers of bq27426 (git-fixes).\n- power: supply: core: Remove might_sleep() from power_supply_put() (git-fixes).\n- power: supply: rt9471: Fix wrong WDT function regfield declaration (git-fixes).\n- power: supply: rt9471: Use IC status regfield to report real charger status (git-fixes).\n- powercap: intel_rapl: Fix off by one in get_rpi() (git-fixes).\n- powerpc/64: Convert patch_instruction() to patch_u32() (bsc#1194869).\n- powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0 (bsc#1215199).\n- powerpc/atomic: Use YZ constraints for DS-form instructions (bsc#1194869).\n- powerpc/boot: Handle allocation failure in simple_realloc() (bsc#1194869).\n- powerpc/boot: Only free if realloc() succeeds (bsc#1194869).\n- powerpc/code-patching: Add generic memory patching (bsc#1194869).\n- powerpc/code-patching: Perform hwsync in __patch_instruction() in case of failure (bsc#1194869).\n- powerpc/crypto: do not build aes-gcm-p10 by default (bsc#1230501 ltc#208632).\n- powerpc/crypto: fix missing skcipher dependency for aes-gcm-p10 (bsc#1230501 ltc#208632).\n- powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (bsc#1215199).\n- powerpc/fadump: Refactor and prepare fadump_cma_init for late init (bsc#1215199).\n- powerpc/kexec: Fix return of uninitialized variable (bsc#1194869).\n- powerpc/mm/fault: Fix kfence page fault reporting (bsc#1194869).\n- powerpc/mm: Fix boot crash with FLATMEM (bsc#1194869).\n- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL (bsc#1194869).\n- powerpc/powernv: Free name on error in opal_event_init() (bsc#1194869).\n- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (bsc#1194869).\n- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (bsc#1194869).\n- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct (bsc#1215199).\n- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace (bsc#1194869).\n- powerpc/vdso: Inconditionally use CFUNC macro (bsc#1215199).\n- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (bsc#1194869).\n- powerpc/xmon: Fix disassembly CPU feature checks (bsc#1065729).\n- printk: Add notation to console_srcu locking (bsc#1232183).\n- pwm: imx-tpm: Use correct MODULO value for EPWM mode (git-fixes).\n- qed: avoid truncating work queue length (git-fixes).\n- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (bsc#1226631).\n- rcu: Fix buffer overflow in print_cpu_stall_info() (bsc#1226623).\n- regmap: detach regmap from dev on regmap_exit (git-fixes).\n- regmap: irq: Set lockdep class for hierarchical IRQ domains (git-fixes).\n- rpm/check-for-config-changes: add HAVE_RUST and RUSTC_SUPPORTS_ to IGNORED_CONFIGS_RE They depend on SHADOW_CALL_STACK.\n- rpm/release-projects: Add SLFO projects (bsc#1231293).\n- rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation. (bsc#1218644)\n- rpmsg: glink: Handle rejected intent request better (git-fixes).\n- rtc: ab-eoz9: do not fail temperature reads on undervoltage notification (git-fixes).\n- rtc: abx80x: Fix WDT bit position of the status register (git-fixes).\n- rtc: bbnsm: add remove hook (git-fixes).\n- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (git-fixes).\n- rtc: rzn1: fix BCD to rtc_time conversion errors (git-fixes).\n- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- runtime constants: add default dummy infrastructure (git-fixes).\n- runtime constants: add x86 architecture support (git-fixes).\n- s390/mm: Add cond_resched() to cmm_alloc/free_pages() (bsc#1228747).\n- s390/pci: Handle PCI error codes other than 0x3a (git-fixes bsc#1232629).\n- s390/sclp: Deactivate sclp after all its users (git-fixes bsc#1232628).\n- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (git-fixes bsc#1232627).\n- scsi: NCR5380: Check for phase match during PDMA fixup (git-fixes).\n- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers (git-fixes).\n- scsi: Remove scsi device no_start_on_resume flag (git-fixes).\n- scsi: aacraid: Rearrange order of struct aac_srb_unit (git-fixes).\n- scsi: cdrom: kABI: fix cdrom_dev_ops change (git-fixes).\n- scsi: core: Disable CDL by default (git-fixes).\n- scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING (git-fixes).\n- scsi: core: Fix the return value of scsi_logical_block_count() (git-fixes).\n- scsi: core: Handle devices which return an unusually large VPD page count (git-fixes).\n- scsi: core: alua: I/O errors for ALUA state transitions (git-fixes).\n- scsi: fnic: Move flush_work initialization out of if block (bsc#1230055).\n- scsi: hisi_sas: Handle the NCQ error returned by D2H frame (git-fixes).\n- scsi: hpsa: Fix allocation size for Scsi_Host private data (git-fixes).\n- scsi: kABI: restore no_start_on_resume to scsi_device (git-fixes).\n- scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (git-fixes).\n- scsi: libsas: Fix the failure of adding phy with zero-address to port (git-fixes).\n- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd() (bsc#1232757).\n- scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Copyright updates for 14.4.0.6 patches (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (bsc#1232757).\n- scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (bsc#1232757).\n- scsi: lpfc: Modify CGN warning signal calculation based on EDC response (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Remove trailing space after \\n newline (bsc#1232757).\n- scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs (bsc#1232757 bsc#1228119).\n- scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to KERN_WARNING (bsc#1232757).\n- scsi: lpfc: Support loopback tests with VMID enabled (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.5 (bsc#1232757).\n- scsi: lpfc: Update lpfc version to 14.4.0.6 (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (bsc#1233241 jsc#PED-9943).\n- scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE (bsc#1232757).\n- scsi: mac_scsi: Disallow bus errors during PDMA send (git-fixes).\n- scsi: mac_scsi: Refactor polling loop (git-fixes).\n- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages (git-fixes).\n- scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (git-fixes).\n- scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (git-fixes).\n- scsi: mpi3mr: Avoid possible run-time warning with long manufacturer strings (git-fixes).\n- scsi: mpi3mr: Fix ATA NCQ priority support (git-fixes).\n- scsi: mpi3mr: Validate SAS port assignments (git-fixes).\n- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (git-fixes).\n- scsi: pm8001: Do not overwrite PCI queue mapping (git-fixes).\n- scsi: pm80xx: Set phy-\u003eenable_completion only when we wait for it (git-fixes).\n- scsi: qedf: Set qed_slowpath_params to zero before use (git-fixes).\n- scsi: scsi_transport_fc: Allow setting rport state to current state (git-fixes).\n- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress (git-fixes).\n- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (git-fixes).\n- scsi: smartpqi: correct stream detection (git-fixes).\n- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly (git-fixes).\n- scsi: spi: Fix sshdr use (git-fixes).\n- scsi: sr: Fix unintentional arithmetic wraparound (git-fixes).\n- scsi: wd33c93: Do not use stale scsi_pointer value (git-fixes).\n- security/keys: fix slab-out-of-bounds in key_task_permission (git-fixes).\n- selftests/bpf: Add a test case to write mtu result into .rodata (git-fixes).\n- selftests/bpf: Add a test case to write strtol result into .rodata (git-fixes).\n- selftests/bpf: Add test for sign extension in coerce_subreg_to_size_sx() (git-fixes).\n- selftests/bpf: Add test for truncation after sign extension in coerce_reg_to_size_sx() (git-fixes).\n- selftests/bpf: Add tests for ldsx of pkt data/data_end/data_meta accesses (git-fixes).\n- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test (git-fixes).\n- selftests/bpf: Rename ARG_PTR_TO_LONG test description (git-fixes).\n- selftests/bpf: test for malformed BPF_CORE_TYPE_ID_LOCAL relocation (git-fixes).\n- serial: 8250: omap: Move pm_runtime_get_sync (git-fixes).\n- serial: imx: Update mctrl old_status on RTSD interrupt (git-fixes).\n- serial: protect uart_port_dtr_rts() in uart_shutdown() too (stable-fixes).\n- signal: Replace BUG_ON()s (bsc#1234093).\n- soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (git-fixes).\n- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (git-fixes).\n- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- soundwire: intel_bus_common: enable interrupts before exiting reset (stable-fixes).\n- spi: Fix acpi deferred irq probe (git-fixes).\n- spi: atmel-quadspi: Fix register name in verbose logging function (git-fixes).\n- spi: atmel-quadspi: Fix wrong register value written to MR (git-fixes).\n- spi: mpc52xx: Add cancel_work_sync before module remove (git-fixes).\n- spi: mtk-snfi: fix kerneldoc for mtk_snand_is_page_ops() (git-fixes).\n- spi: s3c64xx: fix timeout counters in flush_fifo (git-fixes).\n- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select (git-fixes).\n- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled (git-fixes).\n- spi: tegra210-quad: Avoid shift-out-of-bounds (git-fixes).\n- splice: always fsnotify_access(in), fsnotify_modify(out) on success (git-fixes).\n- splice: fsnotify_access(fd)/fsnotify_modify(fd) in vmsplice (git-fixes).\n- splice: fsnotify_access(in), fsnotify_modify(out) on success in tee (git-fixes).\n- srcu: Fix callbacks acceleration mishandling (git-fixes).\n- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (git-fixes).\n- sumversion: Fix a memory leak in get_src_version() (git-fixes).\n- supported.conf: mark nhpoly1305 module as supported (bsc#1231035)\n- supported.conf: mark ultravisor userspace access as supported (bsc#1232090)\n- task_work: add kerneldoc annotation for 'data' argument (git-fixes).\n- tcp: Fix refcnt handling in __inet_hash_connect() (git-fixes).\n- thermal: core: Initialize thermal zones before registering them (git-fixes).\n- thermal: int3400: Fix reading of current_uuid for active policy (git-fixes).\n- thermal: intel: int340x: processor: Fix warning during module unload (git-fixes).\n- thunderbolt: Honor TMU requirements in the domain when setting TMU mode (stable-fixes).\n- thunderbolt: Improve DisplayPort tunnel setup process to be more robust (stable-fixes).\n- tools/lib/thermal: Fix sampling handler context ptr (git-fixes).\n- tools/power turbostat: Fix trailing '\\n' parsing (git-fixes).\n- tools/power turbostat: Increase the limit for fd opened (bsc#1233119).\n- tools: hv: rm .*.cmd when make clean (git-fixes).\n- tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1082555 git-fixes).\n- tpm: fix signed/unsigned bug when checking event logs (git-fixes).\n- tracing/hwlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/osnoise: Fix build when timerlat is not enabled (git-fixes).\n- tracing/osnoise: Skip running osnoise if all instances are off (git-fixes).\n- tracing/osnoise: Switch from PF_NO_SETAFFINITY to migrate_disable (git-fixes).\n- tracing/osnoise: Use a cpumask to know what threads are kthreads (git-fixes).\n- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (git-fixes).\n- tracing/timerlat: Add user-space interface (git-fixes).\n- tracing/timerlat: Drop interface_lock in stop_kthread() (git-fixes).\n- tracing/timerlat: Fix a race during cpuhp processing (git-fixes).\n- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (git-fixes).\n- tracing/timerlat: Move hrtimer_init to timerlat_fd open() (git-fixes).\n- tracing/timerlat: Only clear timer if a kthread exists (git-fixes).\n- tracing: Consider the NULL character when validating the event length (git-fixes).\n- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (git-fixes).\n- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (stable-fixes).\n- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (git-fixes).\n- ubifs: Fix adding orphan entry twice for the same inode (git-fixes).\n- ubifs: Fix unattached xattr inode if powercut happens after deleting (git-fixes).\n- ubifs: add check for crypto_shash_tfm_digest (git-fixes).\n- ubifs: dbg_orphan_check: Fix missed key type checking (git-fixes).\n- ucounts: fix counter leak in inc_rlimit_get_ucounts() (bsc#1233460).\n- unicode: Do not special case ignorable code points (stable-fixes).\n- unicode: Fix utf8_load() error path (git-fixes).\n- uprobe: avoid out-of-bounds memory access of fetching args (git-fixes).\n- uprobes: encapsulate preparation of uprobe args buffer (git-fixes).\n- uprobes: introduce the global struct vm_special_mapping xol_mapping (bsc#1231114).\n- uprobes: turn xol_area-\u003epages into xol_area-\u003epage (bsc#1231114).\n- usb: chipidea: udc: enable suspend interrupt after usb reset (stable-fixes).\n- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario (stable-fixes).\n- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG (git-fixes).\n- usb: dwc3: core: Stop processing of pending events if controller is halted (git-fixes).\n- usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (git-fixes).\n- usb: dwc3: gadget: Fix checking for number of TRBs left (git-fixes).\n- usb: dwc3: gadget: Fix looping of queued SG entries (git-fixes).\n- usb: ehci-spear: fix call balance of sehci clk handling routines (git-fixes).\n- usb: gadget: core: force synchronous registration (git-fixes).\n- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe (stable-fixes).\n- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler (stable-fixes).\n- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context (git-fixes).\n- usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant (stable-fixes).\n- usb: gadget: f_uac2: fix non-newline-terminated function name (stable-fixes).\n- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store (git-fixes).\n- usb: musb: Fix hardware lockup on first Rx endpoint request (git-fixes).\n- usb: musb: sunxi: Fix accessing an released usb phy (git-fixes).\n- usb: phy: Fix API devm_usb_put_phy() can not release the phy (git-fixes).\n- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (stable-fixes).\n- usb: typec: altmode should keep reference to parent (git-fixes).\n- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (git-fixes).\n- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (git-fixes).\n- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (git-fixes).\n- usb: xhci: Fix TD invalidation under pending Set TR Dequeue (git-fixes).\n- usb: xhci: Fix problem with xhci resume from suspend (stable-fixes).\n- usb: xhci: fix loss of data on Cadence xHC (git-fixes).\n- usb: yurex: make waiting on yurex_write interruptible (git-fixes).\n- usbip: tools: Fix detach_port() invalid port error path (git-fixes).\n- usbnet: fix cyclical race on disconnect with work queue (git-fixes).\n- vdpa: Fix an error handling path in eni_vdpa_probe() (git-fixes).\n- vdpa_sim_blk: Fix the potential leak of mgmt_dev (git-fixes).\n- vdpa_sim_blk: allocate the buffer zeroed (git-fixes).\n- vduse: avoid using __GFP_NOFAIL (git-fixes).\n- vfs: dcache: move hashlen_hash() from callers into d_hash() (git-fixes).\n- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (git-fixes).\n- vhost_vdpa: assign irq bypass producer token correctly (git-fixes).\n- virtio_console: fix misc probe bugs (git-fixes).\n- vmalloc: modify the alloc_vmap_area() error message for better diagnostics (jsc#PED-10978).\n- vmxnet3: Add XDP support (bsc#1226498).\n- vmxnet3: Fix missing reserved tailroom (bsc#1226498).\n- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame (bsc#1226498).\n- vmxnet3: add command to allow disabling of offloads (bsc#1226498).\n- vmxnet3: add latency measurement support in vmxnet3 (bsc#1226498).\n- vmxnet3: prepare for version 9 changes (bsc#1226498).\n- vmxnet3: update to version 9 (bsc#1226498).\n- vsock: Update msg_count on read_skb() (git-fixes).\n- vt: prevent kernel-infoleak in con_font_get() (git-fixes).\n- watchdog: apple: Actually flush writes after requesting watchdog restart (git-fixes).\n- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (git-fixes).\n- watchdog: rti: of: honor timeout-sec property (git-fixes).\n- wifi: ath10k: Fix memory leak in management tx (git-fixes).\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (git-fixes).\n- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (git-fixes).\n- wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (git-fixes).\n- wifi: ath11k: Fix invalid ring usage in full monitor mode (git-fixes).\n- wifi: ath11k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: Skip Rx TID cleanup for self peer (git-fixes).\n- wifi: ath12k: fix array out-of-bound access in SoC stats (stable-fixes).\n- wifi: ath12k: fix crash when unbinding (git-fixes).\n- wifi: ath12k: fix warning when unbinding (git-fixes).\n- wifi: ath12k: remove msdu_end structure for WCN7850 (git-fixes).\n- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (git-fixes).\n- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (stable-fixes).\n- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (stable-fixes).\n- wifi: brcm80211: BRCM_TRACING should depend on TRACING (git-fixes).\n- wifi: brcmfmac: release 'root' node in all execution paths (git-fixes).\n- wifi: cfg80211: Set correct chandef when starting CAC (stable-fixes).\n- wifi: cfg80211: clear wdev-\u003ecqm_config pointer on free (git-fixes).\n- wifi: cw1200: Fix potential NULL dereference (git-fixes).\n- wifi: iwlegacy: Clear stale interrupts before resuming device (stable-fixes).\n- wifi: iwlegacy: Fix \"field-spanning write\" warning in il_enqueue_hcmd() (git-fixes).\n- wifi: iwlwifi: allow only CN mcc from WRDD (stable-fixes).\n- wifi: iwlwifi: config: label 'gl' devices as discrete (git-fixes).\n- wifi: iwlwifi: mvm: Fix a race in scan abort flow (stable-fixes).\n- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (git-fixes).\n- wifi: iwlwifi: mvm: avoid NULL pointer dereference (stable-fixes).\n- wifi: iwlwifi: mvm: do not add default link in fw restart flow (git-fixes).\n- wifi: iwlwifi: mvm: do not leak a link on AP removal (git-fixes).\n- wifi: iwlwifi: mvm: drop wrong STA selection in TX (stable-fixes).\n- wifi: iwlwifi: mvm: use correct key iteration (stable-fixes).\n- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL (stable-fixes).\n- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (git-fixes).\n- wifi: mac80211: fix RCU list iterations (stable-fixes).\n- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (git-fixes).\n- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation (stable-fixes).\n- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable (stable-fixes).\n- wifi: mt76: mt7915: hold dev-\u003emt76.mutex while disabling tx worker (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (stable-fixes).\n- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (git-fixes).\n- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).\n- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c (stable-fixes).\n- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons (git-fixes).\n- wifi: rtw88: select WANT_DEV_COREDUMP (stable-fixes).\n- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements (stable-fixes).\n- wifi: rtw89: avoid to add interface to list twice when SER (stable-fixes).\n- wifi: rtw89: correct base HT rate mask for firmware (stable-fixes).\n- wifi: wfx: Fix error handling in wfx_core_init() (git-fixes).\n- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (bsc#1233443).\n- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load (git-fixes).\n- x86/Documentation: Indent 'note::' directive for protocol version number note (git-fixes).\n- x86/PCI: Check pcie_find_root_port() return for NULL (git-fixes).\n- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h (git-fixes).\n- x86/apic: Always explicitly disarm TSC-deadline timer (git-fixes).\n- x86/apic: Make x2apic_disable() work correctly (git-fixes).\n- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (git-fixes).\n- x86/bugs: Skip RSB fill at VMEXIT (git-fixes).\n- x86/cpufeatures: Add a IBPB_NO_RET BUG flag (git-fixes).\n- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (git-fixes).\n- x86/entry: Have entry_ibpb() invalidate return predictions (git-fixes).\n- x86/entry: Remove unwanted instrumentation in common_interrupt() (git-fixes).\n- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency (git-fixes).\n- x86/microcode/intel: Remove unnecessary cache writeback and invalidation (git-fixes).\n- x86/mm: Use IPIs to synchronize LAM enablement (git-fixes).\n- x86/resctrl: Annotate get_mem_config() functions as __init (git-fixes).\n- x86/resctrl: Avoid overflow in MB settings in bw_validate() (git-fixes).\n- x86/resctrl: Remove hard-coded memory bandwidth limit (git-fixes).\n- x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler (git-fixes).\n- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() (git-fixes).\n- x86/tdx: Dynamically disable SEPT violations from causing #VEs (git-fixes).\n- x86/tdx: Enable CPU topology enumeration (git-fixes).\n- x86/tdx: Introduce wrappers to read and write TD metadata (git-fixes).\n- x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup() (git-fixes).\n- x86/traps: move kmsan check after instrumentation_begin (git-fixes).\n- x86: Increase brk randomness entropy for 64-bit systems (git-fixes).\n- x86: do the user address masking outside the user access area (git-fixes).\n- x86: fix off-by-one in access_ok() (git-fixes).\n- x86: fix user address masking non-canonical speculation issue (git-fixes).\n- x86: make the masked_user_access_begin() macro use its argument only once (git-fixes).\n- x86: support user address masking instead of non-speculative conditional (git-fixes).\n- xfrm: Export symbol xfrm_dev_state_delete (bsc#1233754).\n- xfrm: Fix unregister netdevice hang on hardware offload (bsc#1233754).\n- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2 (git-fixes).\n- xfs: check shortform attr entry flags specifically (git-fixes).\n- xfs: convert delayed extents to unwritten when zeroing post eof blocks (git-fixes).\n- xfs: fix finding a last resort AG in xfs_filestream_pick_ag (git-fixes).\n- xfs: fix freeing speculative preallocations for preallocated files (git-fixes).\n- xfs: make sure sb_fdblocks is non-negative (git-fixes).\n- xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional (git-fixes).\n- xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset (git-fixes).\n- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent (git-fixes).\n- xfs: validate recovered name buffers when recovering xattr items (git-fixes).\n- xhci: Add a quirk for writing ERST in high-low order (git-fixes).\n- xhci: Fix Link TRB DMA in command ring stopped completion event (git-fixes).\n- xhci: Fix incorrect stream context type macro (git-fixes).\n- xhci: Mitigate failed set dequeue pointer commands (git-fixes).\n- xhci: Use pm_runtime_get to prevent RPM on unsupported systems (git-fixes).\n- xhci: tegra: fix checked USB2 port number (git-fixes).\n- zonefs: Improve error handling (git-fixes).\n","status":"published","published":"2025-03-27T14:05:14Z","modified":"2026-03-23T04:48:55.574247Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-7301-1","title":"linux, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities","description":"Attila Szász discovered that the HFS+ file system implementation in the\nLinux Kernel contained a heap overflow vulnerability. An attacker could use\na specially crafted file system image that, when mounted, could cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2025-0927)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Drivers core;\n  - ATA over ethernet (AOE) driver;\n  - Network block device driver;\n  - TPM device driver;\n  - Hardware crypto device drivers;\n  - ARM SCMI message protocol;\n  - EFI core;\n  - GPU drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - IOMMU subsystem;\n  - Mailbox framework;\n  - Media drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - STMicroelectronics network drivers;\n  - NTB driver;\n  - PCI subsystem;\n  - Alibaba DDR Sub-System Driveway PMU driver;\n  - x86 platform drivers;\n  - Powercap sysfs driver;\n  - Remote Processor subsystem;\n  - SCSI subsystem;\n  - USB Device Class drivers;\n  - vDPA drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - AFS file system;\n  - BTRFS file system;\n  - File systems infrastructure;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - Virtio network driver;\n  - TCP network protocol;\n  - Perf events;\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Arbitrary resource management;\n  - Static call mechanism;\n  - Tracing infrastructure;\n  - Memory management;\n  - Bluetooth subsystem;\n  - CAN network layer;\n  - Networking core;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - TIPC protocol;\n  - Wireless networking;\n  - AudioScience HPI driver;\n  - KVM core;\n(CVE-2024-47748, CVE-2024-49935, CVE-2024-49892, CVE-2024-49960,\nCVE-2024-49886, CVE-2024-47757, CVE-2024-47741, CVE-2024-49879,\nCVE-2024-49983, CVE-2024-47687, CVE-2024-49948, CVE-2024-49902,\nCVE-2024-49969, CVE-2024-49903, CVE-2024-47675, CVE-2024-47713,\nCVE-2024-47750, CVE-2024-49951, CVE-2024-49936, CVE-2024-49913,\nCVE-2024-47684, CVE-2024-49917, CVE-2024-47693, CVE-2024-49871,\nCVE-2024-47740, CVE-2024-49927, CVE-2024-47698, CVE-2024-49996,\nCVE-2024-47682, CVE-2024-49889, CVE-2024-49888, CVE-2024-47737,\nCVE-2024-49881, CVE-2023-52917, CVE-2024-47695, CVE-2024-50015,\nCVE-2024-49965, CVE-2024-50179, CVE-2024-47677, CVE-2024-50013,\nCVE-2024-49855, CVE-2024-47751, CVE-2024-49895, CVE-2024-49930,\nCVE-2024-49905, CVE-2024-47709, CVE-2024-49953, CVE-2024-49896,\nCVE-2024-47688, CVE-2024-47712, CVE-2024-49907, CVE-2024-49955,\nCVE-2024-49933, CVE-2024-49880, CVE-2024-49860, CVE-2024-50176,\nCVE-2024-47727, CVE-2024-47673, CVE-2024-49878, CVE-2024-49862,\nCVE-2024-49911, CVE-2024-47734, CVE-2024-49995, CVE-2024-49924,\nCVE-2024-49925, CVE-2024-47749, CVE-2024-49945, CVE-2024-49950,\nCVE-2024-49891, CVE-2024-49915, CVE-2024-50006, CVE-2024-49962,\nCVE-2024-49952, CVE-2024-49982, CVE-2024-49939, CVE-2024-49985,\nCVE-2024-49928, CVE-2024-47692, CVE-2024-49884, CVE-2024-47756,\nCVE-2024-49918, CVE-2024-49976, CVE-2024-47671, CVE-2024-49859,\nCVE-2024-47705, CVE-2024-49864, CVE-2024-47733, CVE-2024-49961,\nCVE-2024-49973, CVE-2024-49989, CVE-2024-47719, CVE-2024-47685,\nCVE-2024-49988, CVE-2024-49975, CVE-2024-47681, CVE-2024-49944,\nCVE-2024-47718, CVE-2024-47689, CVE-2024-50008, CVE-2024-49959,\nCVE-2024-49868, CVE-2024-47743, CVE-2024-49885, CVE-2024-47742,\nCVE-2024-49946, CVE-2024-49876, CVE-2024-49875, CVE-2024-49894,\nCVE-2024-49957, CVE-2024-49980, CVE-2024-49851, CVE-2024-47732,\nCVE-2024-47716, CVE-2024-49938, CVE-2024-50016, CVE-2024-47735,\nCVE-2024-47696, CVE-2024-47691, CVE-2024-49994, CVE-2024-49863,\nCVE-2024-50000, CVE-2024-49919, CVE-2024-49947, CVE-2024-50001,\nCVE-2024-47678, CVE-2024-49870, CVE-2024-53144, CVE-2024-49929,\nCVE-2024-47730, CVE-2024-47700, CVE-2024-49900, CVE-2024-47723,\nCVE-2024-49934, CVE-2024-49883, CVE-2024-49897, CVE-2024-49912,\nCVE-2024-49991, CVE-2024-47701, CVE-2024-49987, CVE-2024-47753,\nCVE-2024-49923, CVE-2024-47707, CVE-2024-49853, CVE-2024-47720,\nCVE-2024-49999, CVE-2024-49958, CVE-2024-49861, CVE-2024-49937,\nCVE-2024-49852, CVE-2024-47703, CVE-2024-47710, CVE-2024-49942,\nCVE-2024-49963, CVE-2024-47697, CVE-2024-50175, CVE-2024-47745,\nCVE-2024-49909, CVE-2024-49997, CVE-2024-49874, CVE-2024-47706,\nCVE-2024-49922, CVE-2024-47739, CVE-2024-49974, CVE-2024-47744,\nCVE-2024-47754, CVE-2024-49931, CVE-2024-47690, CVE-2024-49986,\nCVE-2024-47715, CVE-2024-50014, CVE-2024-49898, CVE-2024-47731,\nCVE-2024-47670, CVE-2024-49877, CVE-2024-50007, CVE-2024-47699,\nCVE-2024-49998, CVE-2024-41016, CVE-2024-49850, CVE-2024-47752,\nCVE-2024-49901, CVE-2024-47728, CVE-2024-49856, CVE-2024-49992,\nCVE-2024-49926, CVE-2024-49978, CVE-2024-47672, CVE-2024-49954,\nCVE-2024-47704, CVE-2024-47747, CVE-2024-47738, CVE-2024-49966,\nCVE-2024-47714, CVE-2024-47686, CVE-2024-47702, CVE-2024-49882,\nCVE-2024-49858, CVE-2024-50002, CVE-2024-49866, CVE-2024-49981,\nCVE-2024-50012, CVE-2024-50017, CVE-2024-49890, CVE-2024-49977,\nCVE-2024-49949, CVE-2024-50005, CVE-2024-47679, CVE-2024-49867)\n","status":"published","published":"2025-02-25T17:02:56Z","modified":"2026-10-29T20:02:50.830388961Z","updated_at":"2026-11-02T16:58:18.876384Z"},{"id":"USN-7303-1","title":"linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Drivers core;\n  - ATA over ethernet (AOE) driver;\n  - Network block device driver;\n  - TPM device driver;\n  - Hardware crypto device drivers;\n  - ARM SCMI message protocol;\n  - EFI core;\n  - GPU drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - IOMMU subsystem;\n  - Mailbox framework;\n  - Media drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - STMicroelectronics network drivers;\n  - NTB driver;\n  - PCI subsystem;\n  - Alibaba DDR Sub-System Driveway PMU driver;\n  - x86 platform drivers;\n  - Powercap sysfs driver;\n  - Remote Processor subsystem;\n  - SCSI subsystem;\n  - USB Device Class drivers;\n  - vDPA drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - AFS file system;\n  - BTRFS file system;\n  - File systems infrastructure;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - Virtio network driver;\n  - TCP network protocol;\n  - Perf events;\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Arbitrary resource management;\n  - Static call mechanism;\n  - Tracing infrastructure;\n  - Memory management;\n  - Bluetooth subsystem;\n  - CAN network layer;\n  - Networking core;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - TIPC protocol;\n  - Wireless networking;\n  - AudioScience HPI driver;\n  - KVM core;\n(CVE-2024-49852, CVE-2024-50175, CVE-2024-47709, CVE-2024-47671,\nCVE-2024-50179, CVE-2024-47743, CVE-2024-47687, CVE-2024-49934,\nCVE-2024-47700, CVE-2024-49892, CVE-2024-49866, CVE-2024-50012,\nCVE-2024-49860, CVE-2024-49948, CVE-2024-49882, CVE-2024-47744,\nCVE-2024-49905, CVE-2024-47728, CVE-2024-49874, CVE-2024-47678,\nCVE-2024-47688, CVE-2024-47737, CVE-2024-49859, CVE-2024-49947,\nCVE-2024-49994, CVE-2024-49986, CVE-2024-49917, CVE-2024-50000,\nCVE-2024-49962, CVE-2024-47733, CVE-2024-47741, CVE-2024-47685,\nCVE-2024-47752, CVE-2024-49960, CVE-2024-47754, CVE-2024-47675,\nCVE-2024-49958, CVE-2024-47748, CVE-2024-47679, CVE-2024-47690,\nCVE-2024-47740, CVE-2024-47672, CVE-2024-49883, CVE-2024-49928,\nCVE-2024-49961, CVE-2024-47677, CVE-2024-47706, CVE-2024-49955,\nCVE-2024-49907, CVE-2024-47745, CVE-2024-49963, CVE-2024-47723,\nCVE-2024-49897, CVE-2024-49927, CVE-2024-50008, CVE-2024-47713,\nCVE-2024-49894, CVE-2024-49903, CVE-2024-47747, CVE-2024-47705,\nCVE-2024-49976, CVE-2024-53144, CVE-2024-49983, CVE-2024-49937,\nCVE-2024-49953, CVE-2024-41016, CVE-2024-49969, CVE-2024-49982,\nCVE-2024-50007, CVE-2024-50015, CVE-2024-49889, CVE-2024-49923,\nCVE-2024-49850, CVE-2024-47720, CVE-2024-49973, CVE-2024-49991,\nCVE-2024-49901, CVE-2024-49881, CVE-2024-49911, CVE-2024-47710,\nCVE-2024-49981, CVE-2024-49918, CVE-2024-49861, CVE-2024-49959,\nCVE-2024-50005, CVE-2024-47701, CVE-2024-49855, CVE-2024-49987,\nCVE-2024-47704, CVE-2024-49977, CVE-2024-47670, CVE-2024-47707,\nCVE-2024-47735, CVE-2024-49996, CVE-2024-49868, CVE-2024-47749,\nCVE-2024-49985, CVE-2024-47753, CVE-2024-49877, CVE-2024-47716,\nCVE-2024-47731, CVE-2024-49880, CVE-2024-47715, CVE-2024-49931,\nCVE-2024-49856, CVE-2024-49929, CVE-2024-47689, CVE-2024-49885,\nCVE-2024-50002, CVE-2024-49999, CVE-2024-47734, CVE-2024-49909,\nCVE-2024-49871, CVE-2024-49915, CVE-2024-50013, CVE-2024-47682,\nCVE-2024-49864, CVE-2024-49949, CVE-2024-49933, CVE-2024-49975,\nCVE-2024-49863, CVE-2024-49867, CVE-2024-49951, CVE-2024-50014,\nCVE-2024-47739, CVE-2024-49886, CVE-2024-49891, CVE-2024-49879,\nCVE-2024-47696, CVE-2024-49896, CVE-2024-49988, CVE-2024-47691,\nCVE-2024-47732, CVE-2024-47742, CVE-2024-47698, CVE-2024-49925,\nCVE-2024-47695, CVE-2024-49898, CVE-2024-49989, CVE-2024-49913,\nCVE-2024-49935, CVE-2024-50017, CVE-2024-47703, CVE-2024-49954,\nCVE-2024-49875, CVE-2024-49858, CVE-2024-49997, CVE-2024-49895,\nCVE-2024-47719, CVE-2024-47750, CVE-2024-47693, CVE-2024-49926,\nCVE-2024-50001, CVE-2024-47718, CVE-2024-47714, CVE-2024-49919,\nCVE-2024-49938, CVE-2024-49952, CVE-2024-49942, CVE-2024-49957,\nCVE-2024-49930, CVE-2024-47702, CVE-2024-50006, CVE-2024-49888,\nCVE-2024-47756, CVE-2024-49890, CVE-2024-50176, CVE-2024-47686,\nCVE-2024-49978, CVE-2024-47697, CVE-2024-49974, CVE-2024-47751,\nCVE-2024-47712, CVE-2024-47727, CVE-2023-52917, CVE-2024-49980,\nCVE-2024-49965, CVE-2024-49878, CVE-2024-50016, CVE-2024-47738,\nCVE-2024-47681, CVE-2024-47699, CVE-2024-49998, CVE-2024-49902,\nCVE-2024-49966, CVE-2024-49884, CVE-2024-49936, CVE-2024-47757,\nCVE-2024-49851, CVE-2024-49924, CVE-2024-49944, CVE-2024-49912,\nCVE-2024-49992, CVE-2024-47684, CVE-2024-49950, CVE-2024-49939,\nCVE-2024-47730, CVE-2024-49853, CVE-2024-49862, CVE-2024-49900,\nCVE-2024-49876, CVE-2024-49945, CVE-2024-47673, CVE-2024-49870,\nCVE-2024-47692, CVE-2024-49946, CVE-2024-49995, CVE-2024-49922)\n","status":"published","published":"2025-02-26T10:38:31Z","modified":"2026-10-29T20:02:51.708551667Z","updated_at":"2026-11-02T16:58:18.876384Z"},{"id":"USN-7303-2","title":"linux-oracle, linux-oracle-6.8 vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Drivers core;\n  - ATA over ethernet (AOE) driver;\n  - Network block device driver;\n  - TPM device driver;\n  - Hardware crypto device drivers;\n  - ARM SCMI message protocol;\n  - EFI core;\n  - GPU drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - IOMMU subsystem;\n  - Mailbox framework;\n  - Media drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - STMicroelectronics network drivers;\n  - NTB driver;\n  - PCI subsystem;\n  - Alibaba DDR Sub-System Driveway PMU driver;\n  - x86 platform drivers;\n  - Powercap sysfs driver;\n  - Remote Processor subsystem;\n  - SCSI subsystem;\n  - USB Device Class drivers;\n  - vDPA drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - AFS file system;\n  - BTRFS file system;\n  - File systems infrastructure;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - Virtio network driver;\n  - TCP network protocol;\n  - Perf events;\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Arbitrary resource management;\n  - Static call mechanism;\n  - Tracing infrastructure;\n  - Memory management;\n  - Bluetooth subsystem;\n  - CAN network layer;\n  - Networking core;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - TIPC protocol;\n  - Wireless networking;\n  - AudioScience HPI driver;\n  - KVM core;\n(CVE-2024-47718, CVE-2024-49942, CVE-2024-49897, CVE-2024-49871,\nCVE-2024-47687, CVE-2024-47692, CVE-2024-47740, CVE-2024-47691,\nCVE-2024-49973, CVE-2024-49958, CVE-2024-49889, CVE-2024-49927,\nCVE-2024-49883, CVE-2024-49885, CVE-2024-49912, CVE-2024-47686,\nCVE-2024-49985, CVE-2024-47732, CVE-2024-47685, CVE-2024-49935,\nCVE-2024-49995, CVE-2024-47731, CVE-2024-49931, CVE-2024-49886,\nCVE-2024-53144, CVE-2024-49917, CVE-2024-49868, CVE-2024-49999,\nCVE-2024-47684, CVE-2024-50013, CVE-2024-49962, CVE-2024-49981,\nCVE-2024-49858, CVE-2024-49878, CVE-2024-49852, CVE-2024-49928,\nCVE-2024-50006, CVE-2024-49988, CVE-2024-47697, CVE-2024-49923,\nCVE-2024-47704, CVE-2024-49947, CVE-2024-47751, CVE-2024-47672,\nCVE-2024-47737, CVE-2024-49909, CVE-2024-49992, CVE-2024-49944,\nCVE-2024-49950, CVE-2024-49850, CVE-2024-49951, CVE-2024-49996,\nCVE-2024-49934, CVE-2024-47705, CVE-2024-47741, CVE-2024-49957,\nCVE-2024-47682, CVE-2024-49976, CVE-2024-49895, CVE-2024-47689,\nCVE-2024-49937, CVE-2024-47702, CVE-2024-49959, CVE-2024-47719,\nCVE-2024-49922, CVE-2024-47743, CVE-2024-47696, CVE-2024-50017,\nCVE-2024-49864, CVE-2024-47747, CVE-2024-47748, CVE-2024-47701,\nCVE-2024-49915, CVE-2024-49877, CVE-2024-41016, CVE-2024-49961,\nCVE-2024-47730, CVE-2024-49924, CVE-2024-49974, CVE-2024-49875,\nCVE-2024-49918, CVE-2024-47712, CVE-2024-50014, CVE-2024-47679,\nCVE-2024-49894, CVE-2024-49911, CVE-2024-49855, CVE-2024-49948,\nCVE-2024-49955, CVE-2023-52917, CVE-2024-50015, CVE-2024-47754,\nCVE-2024-49929, CVE-2024-50005, CVE-2024-47742, CVE-2024-49991,\nCVE-2024-49913, CVE-2024-49980, CVE-2024-47749, CVE-2024-49975,\nCVE-2024-47671, CVE-2024-47677, CVE-2024-47727, CVE-2024-47716,\nCVE-2024-47707, CVE-2024-49870, CVE-2024-47703, CVE-2024-47710,\nCVE-2024-49977, CVE-2024-49997, CVE-2024-49853, CVE-2024-47681,\nCVE-2024-49986, CVE-2024-49969, CVE-2024-50000, CVE-2024-47690,\nCVE-2024-47709, CVE-2024-47713, CVE-2024-47720, CVE-2024-49879,\nCVE-2024-47699, CVE-2024-47714, CVE-2024-50012, CVE-2024-49880,\nCVE-2024-49946, CVE-2024-47735, CVE-2024-49876, CVE-2024-49963,\nCVE-2024-50176, CVE-2024-49952, CVE-2024-49881, CVE-2024-49987,\nCVE-2024-49919, CVE-2024-49860, CVE-2024-47744, CVE-2024-47723,\nCVE-2024-50001, CVE-2024-47756, CVE-2024-49867, CVE-2024-47728,\nCVE-2024-49933, CVE-2024-47752, CVE-2024-49998, CVE-2024-50179,\nCVE-2024-47706, CVE-2024-49989, CVE-2024-47670, CVE-2024-49965,\nCVE-2024-47673, CVE-2024-47700, CVE-2024-47688, CVE-2024-49953,\nCVE-2024-50016, CVE-2024-49907, CVE-2024-49930, CVE-2024-50002,\nCVE-2024-49859, CVE-2024-49939, CVE-2024-47675, CVE-2024-49861,\nCVE-2024-50175, CVE-2024-47757, CVE-2024-49900, CVE-2024-49954,\nCVE-2024-49982, CVE-2024-49891, CVE-2024-47678, CVE-2024-49936,\nCVE-2024-49901, CVE-2024-49898, CVE-2024-47693, CVE-2024-50007,\nCVE-2024-49896, CVE-2024-49863, CVE-2024-47750, CVE-2024-49949,\nCVE-2024-49888, CVE-2024-47739, CVE-2024-49983, CVE-2024-47695,\nCVE-2024-47738, CVE-2024-47734, CVE-2024-49892, CVE-2024-47698,\nCVE-2024-49902, CVE-2024-47715, CVE-2024-49926, CVE-2024-49882,\nCVE-2024-49978, CVE-2024-49945, CVE-2024-49925, CVE-2024-47733,\nCVE-2024-49874, CVE-2024-49856, CVE-2024-49966, CVE-2024-49960,\nCVE-2024-49905, CVE-2024-49866, CVE-2024-49903, CVE-2024-49862,\nCVE-2024-50008, CVE-2024-49994, CVE-2024-49851, CVE-2024-47745,\nCVE-2024-49884, CVE-2024-47753, CVE-2024-49938, CVE-2024-49890)\n","status":"published","published":"2025-02-28T10:53:13Z","modified":"2026-10-29T20:02:42.114843211Z","updated_at":"2026-11-02T16:58:18.876384Z"},{"id":"USN-7303-3","title":"linux-gcp-6.8, linux-raspi vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Drivers core;\n  - ATA over ethernet (AOE) driver;\n  - Network block device driver;\n  - TPM device driver;\n  - Hardware crypto device drivers;\n  - ARM SCMI message protocol;\n  - EFI core;\n  - GPU drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - IOMMU subsystem;\n  - Mailbox framework;\n  - Media drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - STMicroelectronics network drivers;\n  - NTB driver;\n  - PCI subsystem;\n  - Alibaba DDR Sub-System Driveway PMU driver;\n  - x86 platform drivers;\n  - Powercap sysfs driver;\n  - Remote Processor subsystem;\n  - SCSI subsystem;\n  - USB Device Class drivers;\n  - vDPA drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - AFS file system;\n  - BTRFS file system;\n  - File systems infrastructure;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - Virtio network driver;\n  - TCP network protocol;\n  - Perf events;\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Arbitrary resource management;\n  - Static call mechanism;\n  - Tracing infrastructure;\n  - Memory management;\n  - Bluetooth subsystem;\n  - CAN network layer;\n  - Networking core;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - TIPC protocol;\n  - Wireless networking;\n  - AudioScience HPI driver;\n  - KVM core;\n(CVE-2024-47709, CVE-2024-49889, CVE-2024-49931, CVE-2024-50008,\nCVE-2024-49969, CVE-2024-49975, CVE-2024-49958, CVE-2024-47756,\nCVE-2024-49944, CVE-2024-47707, CVE-2024-47693, CVE-2024-47686,\nCVE-2024-47734, CVE-2024-47750, CVE-2024-50179, CVE-2024-49942,\nCVE-2024-49864, CVE-2024-49891, CVE-2024-49965, CVE-2024-49905,\nCVE-2024-47719, CVE-2024-49877, CVE-2024-47688, CVE-2024-47691,\nCVE-2024-47710, CVE-2024-47748, CVE-2024-49948, CVE-2024-49998,\nCVE-2024-47673, CVE-2024-47738, CVE-2024-47701, CVE-2024-47705,\nCVE-2024-49930, CVE-2024-49985, CVE-2024-50016, CVE-2024-53144,\nCVE-2023-52917, CVE-2024-47690, CVE-2024-47675, CVE-2024-50176,\nCVE-2024-49922, CVE-2024-47704, CVE-2024-49982, CVE-2024-47741,\nCVE-2024-49991, CVE-2024-49902, CVE-2024-49883, CVE-2024-49892,\nCVE-2024-50002, CVE-2024-49945, CVE-2024-49959, CVE-2024-47732,\nCVE-2024-49856, CVE-2024-47677, CVE-2024-49978, CVE-2024-49966,\nCVE-2024-49937, CVE-2024-47744, CVE-2024-49890, CVE-2024-47739,\nCVE-2024-50012, CVE-2024-47742, CVE-2024-49980, CVE-2024-47706,\nCVE-2024-49994, CVE-2024-50017, CVE-2024-47697, CVE-2024-49996,\nCVE-2024-49953, CVE-2024-49871, CVE-2024-47723, CVE-2024-49987,\nCVE-2024-49917, CVE-2024-49888, CVE-2024-49866, CVE-2024-50005,\nCVE-2024-47681, CVE-2024-49870, CVE-2024-49898, CVE-2024-49981,\nCVE-2024-49947, CVE-2024-49918, CVE-2024-49983, CVE-2024-47698,\nCVE-2024-49850, CVE-2024-50007, CVE-2024-49900, CVE-2024-49923,\nCVE-2024-49909, CVE-2024-47687, CVE-2024-50015, CVE-2024-47715,\nCVE-2024-47745, CVE-2024-49926, CVE-2024-49879, CVE-2024-49986,\nCVE-2024-49929, CVE-2024-49949, CVE-2024-49976, CVE-2024-47749,\nCVE-2024-47689, CVE-2024-47720, CVE-2024-47743, CVE-2024-49878,\nCVE-2024-49935, CVE-2024-49955, CVE-2024-49997, CVE-2024-49860,\nCVE-2024-47703, CVE-2024-50175, CVE-2024-49855, CVE-2024-49861,\nCVE-2024-49951, CVE-2024-49863, CVE-2024-49882, CVE-2024-50000,\nCVE-2024-49912, CVE-2024-49974, CVE-2024-49977, CVE-2024-47752,\nCVE-2024-47700, CVE-2024-49911, CVE-2024-49852, CVE-2024-47740,\nCVE-2024-47671, CVE-2024-49988, CVE-2024-47699, CVE-2024-47757,\nCVE-2024-49933, CVE-2024-49913, CVE-2024-49907, CVE-2024-49881,\nCVE-2024-47751, CVE-2024-47753, CVE-2024-47731, CVE-2024-47730,\nCVE-2024-49934, CVE-2024-49957, CVE-2024-49938, CVE-2024-47728,\nCVE-2024-49867, CVE-2024-47754, CVE-2024-49919, CVE-2024-49992,\nCVE-2024-49950, CVE-2024-49954, CVE-2024-49924, CVE-2024-47670,\nCVE-2024-50014, CVE-2024-47684, CVE-2024-49884, CVE-2024-47678,\nCVE-2024-49894, CVE-2024-49859, CVE-2024-47735, CVE-2024-47696,\nCVE-2024-49999, CVE-2024-49880, CVE-2024-47747, CVE-2024-49885,\nCVE-2024-49963, CVE-2024-49995, CVE-2024-49897, CVE-2024-49868,\nCVE-2024-49862, CVE-2024-49928, CVE-2024-47685, CVE-2024-47692,\nCVE-2024-49927, CVE-2024-47695, CVE-2024-49896, CVE-2024-49875,\nCVE-2024-49853, CVE-2024-47714, CVE-2024-49989, CVE-2024-49858,\nCVE-2024-49952, CVE-2024-49973, CVE-2024-49925, CVE-2024-49851,\nCVE-2024-47712, CVE-2024-49961, CVE-2024-47713, CVE-2024-47718,\nCVE-2024-49962, CVE-2024-47737, CVE-2024-50001, CVE-2024-49876,\nCVE-2024-49903, CVE-2024-49939, CVE-2024-49886, CVE-2024-47679,\nCVE-2024-50006, CVE-2024-49874, CVE-2024-47716, CVE-2024-49895,\nCVE-2024-47727, CVE-2024-47672, CVE-2024-49901, CVE-2024-47733,\nCVE-2024-47682, CVE-2024-47702, CVE-2024-50013, CVE-2024-41016,\nCVE-2024-49960, CVE-2024-49936, CVE-2024-49946, CVE-2024-49915)\n","status":"published","published":"2025-03-03T18:27:41Z","modified":"2026-10-29T20:02:41.955489796Z","updated_at":"2026-11-02T16:58:18.876384Z"},{"id":"USN-7304-1","title":"linux-gcp, linux-gke, linux-gkeop vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Drivers core;\n  - ATA over ethernet (AOE) driver;\n  - Network block device driver;\n  - TPM device driver;\n  - Hardware crypto device drivers;\n  - ARM SCMI message protocol;\n  - EFI core;\n  - GPU drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - IOMMU subsystem;\n  - Mailbox framework;\n  - Media drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - STMicroelectronics network drivers;\n  - NTB driver;\n  - PCI subsystem;\n  - Alibaba DDR Sub-System Driveway PMU driver;\n  - x86 platform drivers;\n  - Powercap sysfs driver;\n  - Remote Processor subsystem;\n  - SCSI subsystem;\n  - USB Device Class drivers;\n  - vDPA drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - AFS file system;\n  - BTRFS file system;\n  - File systems infrastructure;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - Virtio network driver;\n  - TCP network protocol;\n  - Perf events;\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Arbitrary resource management;\n  - Static call mechanism;\n  - Tracing infrastructure;\n  - Memory management;\n  - Bluetooth subsystem;\n  - CAN network layer;\n  - Networking core;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - TIPC protocol;\n  - Wireless networking;\n  - AudioScience HPI driver;\n  - KVM core;\n(CVE-2024-47678, CVE-2024-49952, CVE-2024-47682, CVE-2024-47679,\nCVE-2024-47748, CVE-2024-47728, CVE-2024-49953, CVE-2024-49883,\nCVE-2024-47742, CVE-2024-50000, CVE-2024-47733, CVE-2024-47752,\nCVE-2024-49927, CVE-2024-47713, CVE-2024-49853, CVE-2024-49998,\nCVE-2024-47672, CVE-2024-49900, CVE-2024-49884, CVE-2024-49876,\nCVE-2024-47673, CVE-2024-49958, CVE-2024-50274, CVE-2024-49980,\nCVE-2024-47703, CVE-2024-49891, CVE-2024-47716, CVE-2024-49903,\nCVE-2024-49868, CVE-2024-47699, CVE-2024-50015, CVE-2024-49896,\nCVE-2024-49867, CVE-2024-50016, CVE-2024-49862, CVE-2024-49947,\nCVE-2024-47714, CVE-2024-50179, CVE-2024-50006, CVE-2024-49881,\nCVE-2024-49933, CVE-2024-49882, CVE-2024-47709, CVE-2024-47686,\nCVE-2024-49859, CVE-2024-49992, CVE-2024-49957, CVE-2024-47691,\nCVE-2024-49936, CVE-2024-49878, CVE-2024-49879, CVE-2024-49997,\nCVE-2024-47697, CVE-2024-49963, CVE-2024-49938, CVE-2024-47723,\nCVE-2024-47700, CVE-2024-49999, CVE-2024-49923, CVE-2024-49991,\nCVE-2024-50013, CVE-2024-47730, CVE-2024-47718, CVE-2024-47671,\nCVE-2024-49977, CVE-2024-53144, CVE-2024-49922, CVE-2024-49985,\nCVE-2024-47712, CVE-2024-49962, CVE-2024-49907, CVE-2024-49886,\nCVE-2024-49976, CVE-2024-49902, CVE-2024-47732, CVE-2024-49995,\nCVE-2024-49942, CVE-2024-47706, CVE-2024-47747, CVE-2024-49949,\nCVE-2024-49911, CVE-2024-49929, CVE-2024-47737, CVE-2024-47720,\nCVE-2024-47756, CVE-2024-47688, CVE-2024-47753, CVE-2024-49937,\nCVE-2024-47684, CVE-2024-47690, CVE-2024-49897, CVE-2024-47705,\nCVE-2024-49852, CVE-2024-49930, CVE-2024-47681, CVE-2024-50175,\nCVE-2024-49863, CVE-2024-49969, CVE-2024-49894, CVE-2024-49928,\nCVE-2024-47698, CVE-2024-47710, CVE-2024-49931, CVE-2024-50008,\nCVE-2024-49939, CVE-2024-49915, CVE-2024-47757, CVE-2024-49912,\nCVE-2024-47696, CVE-2024-47702, CVE-2024-49877, CVE-2024-49974,\nCVE-2024-49919, CVE-2024-49888, CVE-2024-49871, CVE-2024-47685,\nCVE-2024-47734, CVE-2024-49965, CVE-2024-47707, CVE-2024-49987,\nCVE-2024-47745, CVE-2024-50001, CVE-2024-49960, CVE-2024-50014,\nCVE-2024-49994, CVE-2024-49875, CVE-2024-49856, CVE-2024-49926,\nCVE-2024-47701, CVE-2024-47749, CVE-2024-47715, CVE-2024-49981,\nCVE-2024-49935, CVE-2024-47754, CVE-2024-47692, CVE-2024-49864,\nCVE-2024-49983, CVE-2024-49950, CVE-2024-49917, CVE-2024-49924,\nCVE-2024-47743, CVE-2024-47693, CVE-2024-50176, CVE-2024-47670,\nCVE-2024-47727, CVE-2024-47739, CVE-2024-49978, CVE-2024-49858,\nCVE-2024-49861, CVE-2024-49946, CVE-2024-50012, CVE-2024-49934,\nCVE-2024-49986, CVE-2023-52917, CVE-2024-49870, CVE-2024-49892,\nCVE-2024-47741, CVE-2024-47731, CVE-2024-47675, CVE-2024-49898,\nCVE-2024-49959, CVE-2024-49988, CVE-2024-49918, CVE-2024-50002,\nCVE-2024-49954, CVE-2024-49944, CVE-2024-49996, CVE-2024-49982,\nCVE-2024-49948, CVE-2024-49901, CVE-2024-47735, CVE-2024-49851,\nCVE-2024-50007, CVE-2024-49895, CVE-2024-47744, CVE-2024-49889,\nCVE-2024-50017, CVE-2024-49945, CVE-2024-49890, CVE-2024-49850,\nCVE-2024-47677, CVE-2024-47704, CVE-2024-49874, CVE-2024-49860,\nCVE-2024-49961, CVE-2024-49975, CVE-2024-41016, CVE-2024-49951,\nCVE-2024-49909, CVE-2024-49955, CVE-2024-49885, CVE-2024-50005,\nCVE-2024-47750, CVE-2024-47695, CVE-2024-49913, CVE-2024-49925,\nCVE-2024-47689, CVE-2024-49866, CVE-2024-49973, CVE-2024-47751,\nCVE-2024-49880, CVE-2024-49855, CVE-2024-49989, CVE-2024-47740,\nCVE-2024-47687, CVE-2024-47738, CVE-2024-47719, CVE-2024-49905,\nCVE-2024-53064, CVE-2024-49966)\n","status":"published","published":"2025-02-26T10:58:00Z","modified":"2026-10-29T20:02:51.173670159Z","updated_at":"2026-11-02T16:58:18.876384Z"},{"id":"USN-7310-1","title":"linux-oem-6.11 vulnerabilities","description":"Attila Szász discovered that the HFS+ file system implementation in the\nLinux Kernel contained a heap overflow vulnerability. An attacker could use\na specially crafted file system image that, when mounted, could cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2025-0927)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - PowerPC architecture;\n  - RISC-V architecture;\n  - S390 architecture;\n  - SuperH RISC architecture;\n  - User-Mode Linux (UML);\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - Compute Acceleration Framework;\n  - ACPI drivers;\n  - Drivers core;\n  - ATA over ethernet (AOE) driver;\n  - RAM backed block device driver;\n  - Network block device driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - Bluetooth drivers;\n  - TPM device driver;\n  - Clock framework and drivers;\n  - Data acquisition framework and drivers;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - CXL (Compute Express Link) drivers;\n  - DAX dirext access to differentiated memory framework;\n  - Buffer Sharing and Synchronization framework;\n  - EDAC drivers;\n  - FireWire subsystem;\n  - ARM SCMI message protocol;\n  - ARM SCPI message protocol;\n  - EFI core;\n  - Qualcomm firmware drivers;\n  - GPIO subsystem;\n  - GPU drivers;\n  - HID subsystem;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO ADC drivers;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Mailbox framework;\n  - Multiple devices driver;\n  - Media drivers;\n  - Multifunction device drivers;\n  - MMC subsystem;\n  - MTD block device drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - STMicroelectronics network drivers;\n  - NTB driver;\n  - Virtio pmem driver;\n  - NVME drivers;\n  - Parport drivers;\n  - PCI subsystem;\n  - Alibaba DDR Sub-System Driveway PMU driver;\n  - PHY drivers;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - i.MX PM domains;\n  - Powercap sysfs driver;\n  - Voltage and Current Regulator drivers;\n  - Remote Processor subsystem;\n  - StarFive reset controller drivers;\n  - Real Time Clock drivers;\n  - SCSI subsystem;\n  - SuperH / SH-Mobile drivers;\n  - QCOM SoC drivers;\n  - Xilinx SoC drivers;\n  - SPI subsystem;\n  - Direct Digital Synthesis drivers;\n  - Media staging drivers;\n  - TCM subsystem;\n  - Thermal drivers;\n  - Thunderbolt and USB4 drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - USB Device Class drivers;\n  - DesignWare USB3 driver;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - USB Dual Role (OTG-ready) Controller drivers;\n  - USB Serial drivers;\n  - USB Type-C support driver;\n  - USB Type-C Port Controller Manager driver;\n  - TI TPS6598x USB Power Delivery controller driver;\n  - USB Type-C Connector System Software Interface driver;\n  - vDPA drivers;\n  - VFIO drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - Virtio drivers;\n  - Xen hypervisor drivers;\n  - AFS file system;\n  - BTRFS file system;\n  - File systems infrastructure;\n  - Ceph distributed file system;\n  - EROFS file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - GFS2 file system;\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - File system notification infrastructure;\n  - NTFS3 file system;\n  - Proc file system;\n  - SMB network file system;\n  - UBI file system;\n  - BPF subsystem;\n  - Network file system (NFS) superblock;\n  - Virtio network driver;\n  - Bluetooth subsystem;\n  - Network traffic control;\n  - Network sockets;\n  - TCP network protocol;\n  - Tracing infrastructure;\n  - User-space API (UAPI);\n  - Kernel init infrastructure;\n  - io_uring subsystem;\n  - IPC subsystem;\n  - Perf events;\n  - Kernel fork() syscall;\n  - Kernel thread helper (kthread);\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Arbitrary resource management;\n  - Scheduler infrastructure;\n  - Signal handling mechanism;\n  - Static call mechanism;\n  - Task handling mechanism;\n  - Timer substystem drivers;\n  - Maple Tree data structure library;\n  - Memory management;\n  - 9P file system network protocol;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Networking core;\n  - DCCP (Datagram Congestion Control Protocol);\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - IUCV driver;\n  - L2TP protocol;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - Netfilter;\n  - Netlink;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - SMC sockets;\n  - Sun RPC protocol;\n  - TIPC protocol;\n  - Unix domain sockets;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - eXpress Data Path;\n  - XFRM subsystem;\n  - AppArmor security module;\n  - Integrity Measurement Architecture(IMA) framework;\n  - Key management;\n  - ALSA framework;\n  - FireWire sound drivers;\n  - AudioScience HPI driver;\n  - HD-audio driver;\n  - SoC Audio for Freescale CPUs drivers;\n  - MediaTek ASoC drivers;\n  - QCOM ASoC drivers;\n  - SoC audio core drivers;\n  - STMicroelectronics SoC drivers;\n  - USB sound devices;\n  - KVM core;\n(CVE-2024-50244, CVE-2024-56754, CVE-2024-50082, CVE-2024-47737,\nCVE-2024-50300, CVE-2024-49872, CVE-2024-50180, CVE-2024-50218,\nCVE-2024-49956, CVE-2024-53189, CVE-2024-56705, CVE-2024-50119,\nCVE-2024-53192, CVE-2024-49950, CVE-2024-56722, CVE-2024-49943,\nCVE-2024-50031, CVE-2024-47685, CVE-2024-50296, CVE-2024-49939,\nCVE-2024-47696, CVE-2024-47752, CVE-2024-49937, CVE-2024-53140,\nCVE-2024-50236, CVE-2024-50151, CVE-2024-50069, CVE-2024-50170,\nCVE-2024-50246, CVE-2024-50217, CVE-2024-53125, CVE-2024-50084,\nCVE-2024-50005, CVE-2024-53137, CVE-2024-50233, CVE-2024-49991,\nCVE-2024-50067, CVE-2024-50290, CVE-2024-47735, CVE-2024-53133,\nCVE-2024-50289, CVE-2024-49855, CVE-2024-49868, CVE-2024-56728,\nCVE-2024-56726, CVE-2024-50012, CVE-2024-53078, CVE-2024-50223,\nCVE-2024-50143, CVE-2024-50287, CVE-2024-49971, CVE-2024-49900,\nCVE-2024-50263, CVE-2024-50206, CVE-2024-47707, CVE-2024-47751,\nCVE-2024-56747, CVE-2024-50260, CVE-2024-50173, CVE-2024-47680,\nCVE-2024-50009, CVE-2024-53219, CVE-2024-53144, CVE-2024-50008,\nCVE-2024-53208, CVE-2024-49966, CVE-2024-50104, CVE-2024-50030,\nCVE-2024-53049, CVE-2024-53201, CVE-2024-50130, CVE-2024-49856,\nCVE-2024-53095, CVE-2024-50033, CVE-2024-47730, CVE-2024-53216,\nCVE-2024-50286, CVE-2024-50284, CVE-2024-47744, CVE-2023-52917,\nCVE-2024-50275, CVE-2024-53114, CVE-2024-49968, CVE-2024-50111,\nCVE-2024-50000, CVE-2024-53081, CVE-2024-49857, CVE-2024-50262,\nCVE-2024-50281, CVE-2024-53156, CVE-2024-50225, CVE-2024-53239,\nCVE-2024-50036, CVE-2024-50187, CVE-2024-53165, CVE-2024-49931,\nCVE-2024-53111, CVE-2024-49862, CVE-2024-47701, CVE-2024-53091,\nCVE-2024-50103, CVE-2024-53046, CVE-2024-56678, CVE-2024-56749,\nCVE-2024-53175, CVE-2024-49970, CVE-2024-50035, CVE-2024-50088,\nCVE-2024-50297, CVE-2024-47721, CVE-2024-50240, CVE-2024-50076,\nCVE-2024-56683, CVE-2024-53120, CVE-2024-50074, CVE-2024-50095,\nCVE-2024-49963, CVE-2024-50158, CVE-2024-50020, CVE-2024-53083,\nCVE-2024-50029, CVE-2024-56755, CVE-2024-49969, CVE-2024-50022,\nCVE-2024-50278, CVE-2024-50125, CVE-2024-47706, CVE-2024-50204,\nCVE-2024-56543, CVE-2024-53108, CVE-2024-49885, CVE-2024-50128,\nCVE-2024-50062, CVE-2024-50139, CVE-2024-50183, CVE-2024-50288,\nCVE-2024-56729, CVE-2024-49945, CVE-2024-47695, CVE-2024-56533,\nCVE-2024-53234, CVE-2024-50002, CVE-2024-50040, CVE-2024-49903,\nCVE-2024-47702, CVE-2024-47728, CVE-2024-49874, CVE-2024-47718,\nCVE-2024-53142, CVE-2024-49983, CVE-2024-50211, CVE-2024-50294,\nCVE-2024-50132, CVE-2024-53236, CVE-2024-50042, CVE-2024-49999,\nCVE-2024-50001, CVE-2024-50046, CVE-2024-50133, CVE-2024-50256,\nCVE-2024-49869, CVE-2024-49852, CVE-2024-47717, CVE-2024-56704,\nCVE-2024-50102, CVE-2024-50150, CVE-2024-49880, CVE-2024-50235,\nCVE-2024-49892, CVE-2024-53194, CVE-2024-53104, CVE-2024-50232,\nCVE-2024-50226, CVE-2024-56684, CVE-2024-47713, CVE-2024-50191,\nCVE-2024-49850, CVE-2024-50277, CVE-2024-53113, CVE-2024-50013,\nCVE-2024-53221, CVE-2024-50220, CVE-2024-49960, CVE-2024-53228,\nCVE-2024-50152, CVE-2024-56689, CVE-2024-53220, CVE-2024-50209,\nCVE-2024-50285, CVE-2024-50197, CVE-2024-53072, CVE-2024-50273,\nCVE-2024-49928, CVE-2024-53132, CVE-2024-56720, CVE-2024-50194,\nCVE-2024-50112, CVE-2024-53079, CVE-2024-56696, CVE-2024-47750,\nCVE-2024-53212, CVE-2024-56541, CVE-2024-50024, CVE-2024-53168,\nCVE-2024-50247, CVE-2024-50193, CVE-2024-47754, CVE-2024-56540,\nCVE-2024-50026, CVE-2024-53047, CVE-2024-53151, CVE-2024-50176,\nCVE-2024-49975, CVE-2024-50034, CVE-2024-50126, CVE-2024-49863,\nCVE-2024-47693, CVE-2024-49954, CVE-2024-49938, CVE-2024-50171,\nCVE-2024-50185, CVE-2024-50200, CVE-2024-50201, CVE-2024-53184,\nCVE-2024-47709, CVE-2024-50138, CVE-2024-49935, CVE-2024-50049,\nCVE-2024-56537, CVE-2024-50057, CVE-2024-56677, CVE-2024-47743,\nCVE-2024-50293, CVE-2024-50099, CVE-2024-47720, CVE-2024-50021,\nCVE-2024-50059, CVE-2024-49871, CVE-2024-49884, CVE-2024-47694,\nCVE-2024-56723, CVE-2024-47724, CVE-2024-50038, CVE-2024-53123,\nCVE-2024-53177, CVE-2024-49932, CVE-2024-50196, CVE-2024-50234,\nCVE-2024-50078, CVE-2024-53043, CVE-2024-49926, CVE-2024-49988,\nCVE-2024-53187, CVE-2024-53056, CVE-2024-53217, CVE-2024-56745,\nCVE-2024-47726, CVE-2024-50063, CVE-2024-49987, CVE-2024-49955,\nCVE-2024-50179, CVE-2024-49866, CVE-2024-50283, CVE-2024-49997,\nCVE-2024-47742, CVE-2024-56691, CVE-2024-50253, CVE-2024-56690,\nCVE-2024-47710, CVE-2024-53129, CVE-2024-50190, CVE-2024-50090,\nCVE-2024-56702, CVE-2024-50148, CVE-2024-53183, CVE-2024-50070,\nCVE-2024-50154, CVE-2024-50243, CVE-2024-50003, CVE-2024-50117,\nCVE-2024-56751, CVE-2024-56697, CVE-2024-53166, CVE-2024-53196,\nCVE-2024-47677, CVE-2024-56679, CVE-2024-49996, CVE-2024-47681,\nCVE-2024-53181, CVE-2024-47700, CVE-2024-53071, CVE-2024-50015,\nCVE-2024-53126, CVE-2024-50165, CVE-2024-50172, CVE-2024-53063,\nCVE-2024-53200, CVE-2024-53135, CVE-2024-49974, CVE-2024-53088,\nCVE-2024-49936, CVE-2024-53121, CVE-2024-50166, CVE-2024-50087,\nCVE-2024-53065, CVE-2024-53214, CVE-2024-53076, CVE-2024-53059,\nCVE-2024-50230, CVE-2024-49985, CVE-2024-50092, CVE-2024-53233,\nCVE-2024-50047, CVE-2024-56685, CVE-2024-47682, CVE-2024-47705,\nCVE-2024-50077, CVE-2024-53224, CVE-2024-49887, CVE-2024-49940,\nCVE-2024-47741, CVE-2024-49858, CVE-2024-56536, CVE-2024-53055,\nCVE-2024-56687, CVE-2024-50100, CVE-2024-53075, CVE-2024-47699,\nCVE-2024-53213, CVE-2024-49977, CVE-2024-50268, CVE-2024-53146,\nCVE-2024-50304, CVE-2024-50096, CVE-2024-53162, CVE-2024-56725,\nCVE-2024-49953, CVE-2024-53077, CVE-2024-50107, CVE-2024-53226,\nCVE-2024-53134, CVE-2024-49873, CVE-2024-56548, CVE-2024-53145,\nCVE-2024-53141, CVE-2024-56741, CVE-2024-53067, CVE-2024-53152,\nCVE-2024-50072, CVE-2024-50282, CVE-2024-53232, CVE-2024-50140,\nCVE-2024-53198, CVE-2024-53150, CVE-2024-49876, CVE-2024-50302,\nCVE-2024-53115, CVE-2024-47692, CVE-2024-50301, CVE-2024-50202,\nCVE-2024-50155, CVE-2024-56693, CVE-2024-53082, CVE-2024-53167,\nCVE-2024-56748, CVE-2024-53064, CVE-2024-50227, CVE-2024-56539,\nCVE-2024-50215, CVE-2024-50043, CVE-2024-50146, CVE-2024-50147,\nCVE-2024-56699, CVE-2024-50122, CVE-2024-53044, CVE-2024-47712,\nCVE-2024-53230, CVE-2024-50121, CVE-2024-50216, CVE-2024-53084,\nCVE-2024-56703, CVE-2024-50178, CVE-2024-49934, CVE-2024-47678,\nCVE-2024-50271, CVE-2024-50144, CVE-2024-50252, CVE-2024-47734,\nCVE-2024-47711, CVE-2024-50214, CVE-2024-53100, CVE-2024-56680,\nCVE-2024-50198, CVE-2024-50025, CVE-2024-50044, CVE-2024-50098,\nCVE-2024-47745, CVE-2024-49860, CVE-2024-49881, CVE-2024-53048,\nCVE-2024-56721, CVE-2024-56756, CVE-2024-53171, CVE-2024-49901,\nCVE-2024-53109, CVE-2024-53061, CVE-2024-49929, CVE-2024-47691,\nCVE-2024-50045, CVE-2024-47723, CVE-2024-56546, CVE-2024-50157,\nCVE-2024-53169, CVE-2024-47716, CVE-2024-53093, CVE-2024-50224,\nCVE-2024-53193, CVE-2024-49895, CVE-2024-47698, CVE-2024-49942,\nCVE-2024-50167, CVE-2024-53202, CVE-2024-49870, CVE-2024-50291,\nCVE-2024-50156, CVE-2024-53153, CVE-2024-50272, CVE-2024-50145,\nCVE-2024-50298, CVE-2024-50274, CVE-2024-56694, CVE-2024-50108,\nCVE-2024-50222, CVE-2024-53163, CVE-2024-50164, CVE-2024-53062,\nCVE-2024-50212, CVE-2024-53127, CVE-2024-47688, CVE-2024-49959,\nCVE-2024-50203, CVE-2024-49927, CVE-2024-50083, CVE-2024-53227,\nCVE-2024-47697, CVE-2024-53053, CVE-2024-53172, CVE-2024-56752,\nCVE-2024-50207, CVE-2024-50169, CVE-2024-53176, CVE-2024-53089,\nCVE-2024-56707, CVE-2024-53195, CVE-2024-49851, CVE-2024-53209,\nCVE-2024-49972, CVE-2024-53130, CVE-2024-53157, CVE-2024-53094,\nCVE-2024-50182, CVE-2024-49879, CVE-2024-53191, CVE-2024-49925,\nCVE-2024-49949, CVE-2024-56534, CVE-2024-47714, CVE-2024-53161,\nCVE-2024-49992, CVE-2024-47732, CVE-2024-53143, CVE-2024-53119,\nCVE-2024-50064, CVE-2024-50039, CVE-2024-53087, CVE-2024-49886,\nCVE-2024-49979, CVE-2024-50041, CVE-2024-50184, CVE-2024-49958,\nCVE-2024-50221, CVE-2024-56688, CVE-2024-49941, CVE-2024-50245,\nCVE-2024-50017, CVE-2024-53180, CVE-2024-56535, CVE-2024-50142,\nCVE-2024-50295, CVE-2024-56708, CVE-2024-50016, CVE-2024-49902,\nCVE-2024-50120, CVE-2024-47748, CVE-2024-49982, CVE-2024-50257,\nCVE-2024-50086, CVE-2024-50261, CVE-2024-53188, CVE-2024-49888,\nCVE-2024-53106, CVE-2024-50073, CVE-2024-50186, CVE-2024-56544,\nCVE-2024-47739, CVE-2024-50238, CVE-2024-56739, CVE-2024-49964,\nCVE-2024-47686, CVE-2024-46869, CVE-2024-53116, CVE-2024-50014,\nCVE-2024-53231, CVE-2024-53138, CVE-2024-50213, CVE-2024-50265,\nCVE-2024-49998, CVE-2024-50292, CVE-2024-50137, CVE-2024-50114,\nCVE-2024-53237, CVE-2024-49952, CVE-2024-53074, CVE-2024-49981,\nCVE-2024-47733, CVE-2024-50019, CVE-2024-47719, CVE-2024-53068,\nCVE-2024-49944, CVE-2024-50066, CVE-2024-50007, CVE-2024-53155,\nCVE-2024-47756, CVE-2024-49947, CVE-2024-49951, CVE-2024-50065,\nCVE-2024-49957, CVE-2024-50116, CVE-2024-50188, CVE-2024-50255,\nCVE-2024-53197, CVE-2024-50267, CVE-2024-50124, CVE-2024-53069,\nCVE-2024-53139, CVE-2024-47676, CVE-2024-56545, CVE-2024-53085,\nCVE-2024-50163, CVE-2024-53092, CVE-2024-53099, CVE-2024-49889,\nCVE-2024-53052, CVE-2024-49995, CVE-2024-49976, CVE-2024-50110,\nCVE-2024-50192, CVE-2024-50208, CVE-2024-50276, CVE-2024-53170,\nCVE-2024-50259, CVE-2024-47731, CVE-2024-49924, CVE-2024-56532,\nCVE-2024-50048, CVE-2024-49965, CVE-2024-53147, CVE-2024-50205,\nCVE-2024-49859, CVE-2024-53066, CVE-2024-47687, CVE-2024-50149,\nCVE-2024-49864, CVE-2024-49867, CVE-2024-50160, CVE-2024-53058,\nCVE-2024-47753, CVE-2024-49883, CVE-2024-53199, CVE-2024-56746,\nCVE-2024-50094, CVE-2024-49946, CVE-2024-50006, CVE-2024-53101,\nCVE-2024-49891, CVE-2024-50075, CVE-2024-47747, CVE-2024-47740,\nCVE-2024-50248, CVE-2024-50162, CVE-2024-53090, CVE-2024-53203,\nCVE-2024-50242, CVE-2024-49961, CVE-2024-50085, CVE-2024-50299,\nCVE-2024-49980, CVE-2024-50280, CVE-2024-53107, CVE-2024-50199,\nCVE-2024-53122, CVE-2024-56674, CVE-2024-50079, CVE-2024-50060,\nCVE-2024-53210, CVE-2024-50177, CVE-2024-53223, CVE-2024-50127,\nCVE-2024-53190, CVE-2022-49034, CVE-2024-56744, CVE-2024-50136,\nCVE-2024-47675, CVE-2024-50303, CVE-2024-50123, CVE-2024-47738,\nCVE-2024-50239, CVE-2024-50135, CVE-2024-53218, CVE-2024-50109,\nCVE-2024-56724, CVE-2024-56681, CVE-2024-50027, CVE-2024-50081,\nCVE-2024-50068, CVE-2024-50101, CVE-2024-50071, CVE-2024-50129,\nCVE-2024-50091, CVE-2024-53112, CVE-2024-50181, CVE-2024-50080,\nCVE-2024-47703, CVE-2024-47727, CVE-2024-53215, CVE-2024-53105,\nCVE-2024-50174, CVE-2024-50105, CVE-2024-56700, CVE-2024-53173,\nCVE-2024-49865, CVE-2024-49973, CVE-2024-56538, CVE-2024-50251,\nCVE-2024-56692, CVE-2024-47671, CVE-2024-50189, CVE-2024-49853,\nCVE-2024-50153, CVE-2024-53124, CVE-2024-56549, CVE-2024-53160,\nCVE-2024-53174, CVE-2024-53117, CVE-2024-50279, CVE-2024-50118,\nCVE-2024-47757, CVE-2024-50055, CVE-2024-49875, CVE-2024-50141,\nCVE-2024-49890, CVE-2024-49878, CVE-2024-50134, CVE-2024-53042,\nCVE-2024-56727, CVE-2024-49861, CVE-2024-49948, CVE-2024-50010,\nCVE-2024-49930, CVE-2024-49877, CVE-2024-47690, CVE-2024-50115,\nCVE-2024-50254, CVE-2024-50250, CVE-2024-47679, CVE-2024-50258,\nCVE-2024-53128, CVE-2024-49994, CVE-2024-53154, CVE-2024-50037,\nCVE-2024-53149, CVE-2024-50266, CVE-2024-50061, CVE-2024-56698,\nCVE-2024-53118, CVE-2024-47689, CVE-2024-47708, CVE-2024-50131,\nCVE-2024-50168, CVE-2024-53158, CVE-2024-49894, CVE-2024-50056,\nCVE-2024-50231, CVE-2024-50270, CVE-2024-50269, CVE-2024-50237,\nCVE-2024-56742, CVE-2024-49882, CVE-2024-47749, CVE-2024-49962,\nCVE-2024-49933, CVE-2024-53045, CVE-2024-50028, CVE-2024-53178,\nCVE-2024-50229, CVE-2024-50023, CVE-2024-50161, CVE-2024-56701,\nCVE-2024-49978, CVE-2024-50093, CVE-2024-50195, CVE-2024-49986,\nCVE-2024-53098, CVE-2024-53131, CVE-2024-47684, CVE-2024-53148,\nCVE-2024-50058, CVE-2024-53086, CVE-2024-50113, CVE-2024-49989,\nCVE-2024-50106, CVE-2024-53080, CVE-2024-53229, CVE-2024-50159,\nCVE-2024-56531, CVE-2024-53110, CVE-2024-47736, CVE-2024-56542,\nCVE-2024-47746)\n","status":"published","published":"2025-02-28T11:33:16Z","modified":"2026-11-03T21:17:33.180491814Z","updated_at":"2026-11-03T21:43:54.166508Z"},{"id":"USN-7311-1","title":"linux-aws, linux-aws-6.8 vulnerabilities","description":"Several security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Drivers core;\n  - ATA over ethernet (AOE) driver;\n  - Network block device driver;\n  - TPM device driver;\n  - Hardware crypto device drivers;\n  - ARM SCMI message protocol;\n  - EFI core;\n  - GPU drivers;\n  - I2C subsystem;\n  - I3C subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - IOMMU subsystem;\n  - Mailbox framework;\n  - Media drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - STMicroelectronics network drivers;\n  - NTB driver;\n  - PCI subsystem;\n  - Alibaba DDR Sub-System Driveway PMU driver;\n  - x86 platform drivers;\n  - Powercap sysfs driver;\n  - Remote Processor subsystem;\n  - SCSI subsystem;\n  - USB Device Class drivers;\n  - vDPA drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - AFS file system;\n  - BTRFS file system;\n  - File systems infrastructure;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - Virtio network driver;\n  - TCP network protocol;\n  - Perf events;\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Arbitrary resource management;\n  - Static call mechanism;\n  - Tracing infrastructure;\n  - Memory management;\n  - Bluetooth subsystem;\n  - CAN network layer;\n  - Networking core;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - Netfilter;\n  - RxRPC session sockets;\n  - Network traffic control;\n  - SCTP protocol;\n  - TIPC protocol;\n  - VMware vSockets driver;\n  - Wireless networking;\n  - AudioScience HPI driver;\n  - KVM core;\n(CVE-2024-49867, CVE-2024-47675, CVE-2024-49999, CVE-2024-49884,\nCVE-2024-49992, CVE-2024-49945, CVE-2024-49889, CVE-2024-49890,\nCVE-2024-49900, CVE-2024-49934, CVE-2024-49976, CVE-2024-49878,\nCVE-2024-50008, CVE-2024-49919, CVE-2024-47698, CVE-2024-47731,\nCVE-2024-47673, CVE-2024-49959, CVE-2024-47715, CVE-2024-49912,\nCVE-2024-47702, CVE-2024-50007, CVE-2024-49953, CVE-2024-49929,\nCVE-2024-47730, CVE-2024-49966, CVE-2024-47756, CVE-2024-47687,\nCVE-2024-50002, CVE-2024-49911, CVE-2024-47714, CVE-2024-47704,\nCVE-2024-50017, CVE-2024-47709, CVE-2024-49858, CVE-2024-47712,\nCVE-2024-49870, CVE-2024-49883, CVE-2024-47672, CVE-2024-49963,\nCVE-2024-49926, CVE-2024-49860, CVE-2024-47748, CVE-2024-49928,\nCVE-2024-49931, CVE-2024-47749, CVE-2024-49913, CVE-2024-49957,\nCVE-2024-49948, CVE-2024-47732, CVE-2024-47753, CVE-2024-47727,\nCVE-2024-49896, CVE-2024-47707, CVE-2024-47743, CVE-2024-49915,\nCVE-2024-47695, CVE-2024-49960, CVE-2024-49935, CVE-2024-49868,\nCVE-2024-49918, CVE-2024-49969, CVE-2024-53164, CVE-2024-49879,\nCVE-2024-50012, CVE-2024-50000, CVE-2024-49974, CVE-2024-49998,\nCVE-2024-49933, CVE-2024-47733, CVE-2024-49924, CVE-2024-47757,\nCVE-2024-47699, CVE-2024-49983, CVE-2024-50016, CVE-2024-49907,\nCVE-2024-49965, CVE-2024-49859, CVE-2024-50013, CVE-2024-49871,\nCVE-2024-49994, CVE-2024-49850, CVE-2024-49947, CVE-2024-49955,\nCVE-2024-49962, CVE-2024-47692, CVE-2024-53141, CVE-2024-50014,\nCVE-2024-47689, CVE-2024-49874, CVE-2024-50005, CVE-2024-47741,\nCVE-2024-49880, CVE-2024-47738, CVE-2024-47745, CVE-2024-49917,\nCVE-2024-47728, CVE-2024-49856, CVE-2024-49925, CVE-2024-47671,\nCVE-2023-52917, CVE-2024-47679, CVE-2024-49975, CVE-2024-47734,\nCVE-2024-47720, CVE-2024-47686, CVE-2024-49892, CVE-2024-49936,\nCVE-2024-49888, CVE-2024-49909, CVE-2024-49986, CVE-2024-49930,\nCVE-2024-47740, CVE-2024-49923, CVE-2024-47754, CVE-2024-50179,\nCVE-2024-49978, CVE-2024-47735, CVE-2024-49886, CVE-2024-49903,\nCVE-2024-47681, CVE-2024-49897, CVE-2024-49951, CVE-2024-49946,\nCVE-2024-49954, CVE-2024-47691, CVE-2024-49863, CVE-2024-47719,\nCVE-2024-47693, CVE-2024-47713, CVE-2024-50006, CVE-2024-49855,\nCVE-2024-49851, CVE-2024-49894, CVE-2024-49895, CVE-2024-49987,\nCVE-2024-47700, CVE-2024-47688, CVE-2024-49982, CVE-2024-47685,\nCVE-2024-53144, CVE-2024-47670, CVE-2024-47696, CVE-2024-47710,\nCVE-2024-47737, CVE-2024-49988, CVE-2024-47684, CVE-2024-47718,\nCVE-2024-49876, CVE-2024-49852, CVE-2024-49980, CVE-2024-49877,\nCVE-2024-50175, CVE-2024-49981, CVE-2024-47677, CVE-2024-49973,\nCVE-2024-49922, CVE-2024-50015, CVE-2024-49938, CVE-2024-47752,\nCVE-2024-49902, CVE-2024-49944, CVE-2024-49952, CVE-2024-47747,\nCVE-2024-41016, CVE-2024-50001, CVE-2024-49891, CVE-2024-47703,\nCVE-2024-47744, CVE-2024-49861, CVE-2024-49875, CVE-2024-49901,\nCVE-2024-49881, CVE-2024-49937, CVE-2024-47706, CVE-2024-47690,\nCVE-2024-49958, CVE-2024-49961, CVE-2024-49882, CVE-2024-47739,\nCVE-2024-49996, CVE-2024-49905, CVE-2024-47705, CVE-2024-49942,\nCVE-2024-47697, CVE-2024-47723, CVE-2024-49853, CVE-2024-49862,\nCVE-2024-47751, CVE-2024-49950, CVE-2024-50176, CVE-2024-49939,\nCVE-2024-49864, CVE-2024-49997, CVE-2024-49995, CVE-2024-49885,\nCVE-2024-49949, CVE-2024-53103, CVE-2024-49991, CVE-2024-49866,\nCVE-2024-49977, CVE-2024-47682, CVE-2024-49927, CVE-2024-49985,\nCVE-2024-49898, CVE-2024-47678, CVE-2024-47701, CVE-2024-47742,\nCVE-2024-47750, CVE-2024-47716, CVE-2024-49989)\n","status":"published","published":"2025-02-28T12:11:55Z","modified":"2026-10-29T20:02:41.746464374Z","updated_at":"2026-11-02T16:58:18.876384Z"},{"id":"USN-7384-1","title":"linux-azure vulnerabilities","description":"Michael Randrianantenaina discovered that the Bluetooth driver in the Linux\nKernel contained an improper access control vulnerability. A nearby\nattacker could use this to connect a rougue device and possibly execute\narbitrary code. (CVE-2024-8805)\n\nAttila Szász discovered that the HFS+ file system implementation in the\nLinux Kernel contained a heap overflow vulnerability. An attacker could use\na specially crafted file system image that, when mounted, could cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2025-0927)\n\nIt was discovered that the CIFS network file system implementation in the\nLinux kernel did not properly verify the target namespace when handling\nupcalls. An attacker could use this to expose sensitive information.\n(CVE-2025-2312)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Drivers core;\n  - ATA over ethernet (AOE) driver;\n  - Network block device driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - TPM device driver;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - ARM SCMI message protocol;\n  - EFI core;\n  - GPU drivers;\n  - HID subsystem;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Mailbox framework;\n  - Media drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - STMicroelectronics network drivers;\n  - NTB driver;\n  - Virtio pmem driver;\n  - Parport drivers;\n  - PCI subsystem;\n  - Alibaba DDR Sub-System Driveway PMU driver;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Powercap sysfs driver;\n  - Remote Processor subsystem;\n  - SCSI subsystem;\n  - SuperH / SH-Mobile drivers;\n  - Direct Digital Synthesis drivers;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - USB Device Class drivers;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - TI TPS6598x USB Power Delivery controller driver;\n  - vDPA drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - AFS file system;\n  - BTRFS file system;\n  - File systems infrastructure;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - Network file system (NFS) superblock;\n  - Virtio network driver;\n  - Network traffic control;\n  - Network sockets;\n  - TCP network protocol;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Perf events;\n  - Kernel thread helper (kthread);\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Arbitrary resource management;\n  - Static call mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Maple Tree data structure library;\n  - Memory management;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Networking core;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - Netfilter;\n  - Netlink;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - TIPC protocol;\n  - Unix domain sockets;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AudioScience HPI driver;\n  - KVM core;\n(CVE-2024-49994, CVE-2024-47740, CVE-2024-49936, CVE-2024-47716,\nCVE-2024-47733, CVE-2024-50075, CVE-2024-49870, CVE-2024-50007,\nCVE-2024-49897, CVE-2024-49915, CVE-2024-47756, CVE-2024-47700,\nCVE-2024-49946, CVE-2024-50012, CVE-2024-47750, CVE-2024-49863,\nCVE-2024-50059, CVE-2024-50026, CVE-2024-49995, CVE-2024-50035,\nCVE-2024-47751, CVE-2024-50096, CVE-2024-50082, CVE-2024-50090,\nCVE-2024-50000, CVE-2024-47690, CVE-2024-47741, CVE-2024-49898,\nCVE-2024-47685, CVE-2024-50038, CVE-2024-49957, CVE-2024-47682,\nCVE-2024-50002, CVE-2024-47709, CVE-2024-50201, CVE-2024-49927,\nCVE-2024-50076, CVE-2024-56582, CVE-2024-47742, CVE-2024-47734,\nCVE-2024-50040, CVE-2024-49862, CVE-2024-49942, CVE-2024-50193,\nCVE-2024-49880, CVE-2024-50008, CVE-2024-49949, CVE-2024-50056,\nCVE-2024-50099, CVE-2024-50180, CVE-2024-50045, CVE-2024-49923,\nCVE-2024-49987, CVE-2024-49884, CVE-2024-50031, CVE-2024-47705,\nCVE-2024-47728, CVE-2024-49969, CVE-2024-50077, CVE-2024-50188,\nCVE-2024-49852, CVE-2024-49890, CVE-2024-47745, CVE-2024-50058,\nCVE-2024-50186, CVE-2024-47749, CVE-2024-56614, CVE-2024-50021,\nCVE-2024-50055, CVE-2024-47727, CVE-2024-47677, CVE-2024-49922,\nCVE-2024-50015, CVE-2024-50084, CVE-2024-47689, CVE-2024-50101,\nCVE-2024-47699, CVE-2024-49947, CVE-2024-49999, CVE-2024-49868,\nCVE-2024-50184, CVE-2024-50187, CVE-2024-47757, CVE-2024-49900,\nCVE-2024-47703, CVE-2024-49975, CVE-2024-47692, CVE-2024-49980,\nCVE-2024-49951, CVE-2024-49930, CVE-2024-49867, CVE-2024-49860,\nCVE-2024-50009, CVE-2024-50072, CVE-2024-50229, CVE-2024-49954,\nCVE-2024-50183, CVE-2024-49858, CVE-2024-49909, CVE-2024-49926,\nCVE-2024-47754, CVE-2024-50027, CVE-2024-50200, CVE-2024-50196,\nCVE-2024-50086, CVE-2024-47739, CVE-2024-49978, CVE-2024-49983,\nCVE-2024-49894, CVE-2024-49973, CVE-2024-49888, CVE-2024-49974,\nCVE-2024-47672, CVE-2024-49977, CVE-2024-47738, CVE-2024-49893,\nCVE-2024-49876, CVE-2024-49960, CVE-2024-49955, CVE-2024-47670,\nCVE-2024-47706, CVE-2024-49931, CVE-2024-47686, CVE-2024-49855,\nCVE-2024-49901, CVE-2024-47752, CVE-2024-47675, CVE-2024-47704,\nCVE-2024-47735, CVE-2024-47744, CVE-2024-50088, CVE-2024-50070,\nCVE-2024-47707, CVE-2024-50176, CVE-2024-50080, CVE-2024-50175,\nCVE-2024-47731, CVE-2024-49853, CVE-2024-49929, CVE-2024-49989,\nCVE-2024-49921, CVE-2024-49965, CVE-2024-49891, CVE-2024-50005,\nCVE-2024-47715, CVE-2024-50085, CVE-2024-50189, CVE-2024-47723,\nCVE-2024-50020, CVE-2024-49902, CVE-2024-47730, CVE-2024-53156,\nCVE-2024-49895, CVE-2024-49997, CVE-2024-50192, CVE-2024-49850,\nCVE-2024-50062, CVE-2024-50033, CVE-2024-49972, CVE-2024-49945,\nCVE-2024-50036, CVE-2024-50202, CVE-2024-50095, CVE-2024-49913,\nCVE-2024-50049, CVE-2024-50148, CVE-2024-49948, CVE-2024-49866,\nCVE-2024-49963, CVE-2024-49907, CVE-2024-50117, CVE-2024-49885,\nCVE-2024-49874, CVE-2024-50198, CVE-2024-49856, CVE-2024-49986,\nCVE-2024-49871, CVE-2024-50028, CVE-2024-49889, CVE-2024-50024,\nCVE-2024-47687, CVE-2024-50065, CVE-2024-49953, CVE-2024-47748,\nCVE-2024-47747, CVE-2024-47673, CVE-2024-49928, CVE-2024-50191,\nCVE-2024-50016, CVE-2024-53170, CVE-2024-49933, CVE-2024-50029,\nCVE-2024-50098, CVE-2024-49988, CVE-2024-49985, CVE-2024-50042,\nCVE-2024-50171, CVE-2024-50233, CVE-2024-49976, CVE-2024-49996,\nCVE-2024-49950, CVE-2024-49968, CVE-2024-50083, CVE-2024-49966,\nCVE-2024-49851, CVE-2024-50066, CVE-2024-49864, CVE-2024-50048,\nCVE-2024-50069, CVE-2024-50001, CVE-2024-50194, CVE-2024-47693,\nCVE-2024-49905, CVE-2024-50134, CVE-2024-49944, CVE-2024-50060,\nCVE-2024-49892, CVE-2024-49982, CVE-2024-49883, CVE-2024-49875,\nCVE-2024-47691, CVE-2024-47714, CVE-2024-47712, CVE-2024-50025,\nCVE-2024-50023, CVE-2024-47726, CVE-2024-50041, CVE-2024-49896,\nCVE-2024-50195, CVE-2024-47679, CVE-2024-47678, CVE-2024-49877,\nCVE-2024-47684, CVE-2024-47719, CVE-2024-49937, CVE-2024-53144,\nCVE-2024-47737, CVE-2024-49998, CVE-2024-49879, CVE-2024-50019,\nCVE-2024-50093, CVE-2024-50073, CVE-2024-50064, CVE-2024-50006,\nCVE-2024-47695, CVE-2024-49882, CVE-2024-50179, CVE-2024-49865,\nCVE-2024-47702, CVE-2024-50046, CVE-2024-49919, CVE-2024-47697,\nCVE-2024-50017, CVE-2024-50014, CVE-2024-49861, CVE-2024-50197,\nCVE-2024-49886, CVE-2024-49938, CVE-2024-49991, CVE-2024-49981,\nCVE-2024-56663, CVE-2024-49914, CVE-2024-49920, CVE-2024-47671,\nCVE-2024-49961, CVE-2024-47698, CVE-2024-49952, CVE-2024-47688,\nCVE-2024-50078, CVE-2024-50199, CVE-2024-49918, CVE-2024-50044,\nCVE-2024-50013, CVE-2024-47711, CVE-2024-49917, CVE-2024-50057,\nCVE-2024-47718, CVE-2024-49911, CVE-2024-49912, CVE-2024-53165,\nCVE-2024-50068, CVE-2024-50087, CVE-2024-47720, CVE-2024-49958,\nCVE-2024-49934, CVE-2024-49859, CVE-2024-47710, CVE-2024-49903,\nCVE-2024-49925, CVE-2024-50061, CVE-2024-41016, CVE-2024-47696,\nCVE-2024-47701, CVE-2024-49939, CVE-2024-49924, CVE-2024-49935,\nCVE-2024-50030, CVE-2024-50074, CVE-2024-47681, CVE-2024-47743,\nCVE-2024-49992, CVE-2024-49881, CVE-2024-50063, CVE-2024-47713,\nCVE-2024-50039, CVE-2024-50185, CVE-2024-49962, CVE-2024-50182,\nCVE-2024-50022, CVE-2024-49959, CVE-2024-50047, CVE-2024-53104,\nCVE-2024-49878, CVE-2024-47732, CVE-2024-47753)\n","status":"published","published":"2025-03-27T19:11:01Z","modified":"2026-10-30T21:53:49.100009046Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7384-2","title":"linux-azure-6.8 vulnerabilities","description":"Michael Randrianantenaina discovered that the Bluetooth driver in the Linux\nKernel contained an improper access control vulnerability. A nearby\nattacker could use this to connect a rougue device and possibly execute\narbitrary code. (CVE-2024-8805)\n\nAttila Szász discovered that the HFS+ file system implementation in the\nLinux Kernel contained a heap overflow vulnerability. An attacker could use\na specially crafted file system image that, when mounted, could cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2025-0927)\n\nIt was discovered that the CIFS network file system implementation in the\nLinux kernel did not properly verify the target namespace when handling\nupcalls. An attacker could use this to expose sensitive information.\n(CVE-2025-2312)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Drivers core;\n  - ATA over ethernet (AOE) driver;\n  - Network block device driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - TPM device driver;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - ARM SCMI message protocol;\n  - EFI core;\n  - GPU drivers;\n  - HID subsystem;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Mailbox framework;\n  - Media drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - STMicroelectronics network drivers;\n  - NTB driver;\n  - Virtio pmem driver;\n  - Parport drivers;\n  - PCI subsystem;\n  - Alibaba DDR Sub-System Driveway PMU driver;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Powercap sysfs driver;\n  - Remote Processor subsystem;\n  - SCSI subsystem;\n  - SuperH / SH-Mobile drivers;\n  - Direct Digital Synthesis drivers;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - USB Device Class drivers;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - TI TPS6598x USB Power Delivery controller driver;\n  - vDPA drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - AFS file system;\n  - BTRFS file system;\n  - File systems infrastructure;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - Network file system (NFS) superblock;\n  - Virtio network driver;\n  - Network traffic control;\n  - Network sockets;\n  - TCP network protocol;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Perf events;\n  - Kernel thread helper (kthread);\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Arbitrary resource management;\n  - Static call mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Maple Tree data structure library;\n  - Memory management;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Networking core;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - Netfilter;\n  - Netlink;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - TIPC protocol;\n  - Unix domain sockets;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AudioScience HPI driver;\n  - KVM core;\n(CVE-2024-49994, CVE-2024-47740, CVE-2024-49936, CVE-2024-47716,\nCVE-2024-47733, CVE-2024-50075, CVE-2024-49870, CVE-2024-50007,\nCVE-2024-49897, CVE-2024-49915, CVE-2024-47756, CVE-2024-47700,\nCVE-2024-49946, CVE-2024-50012, CVE-2024-47750, CVE-2024-49863,\nCVE-2024-50059, CVE-2024-50026, CVE-2024-49995, CVE-2024-50035,\nCVE-2024-47751, CVE-2024-50096, CVE-2024-50082, CVE-2024-50090,\nCVE-2024-50000, CVE-2024-47690, CVE-2024-47741, CVE-2024-49898,\nCVE-2024-47685, CVE-2024-50038, CVE-2024-49957, CVE-2024-47682,\nCVE-2024-50002, CVE-2024-47709, CVE-2024-50201, CVE-2024-49927,\nCVE-2024-50076, CVE-2024-56582, CVE-2024-47742, CVE-2024-47734,\nCVE-2024-50040, CVE-2024-49862, CVE-2024-49942, CVE-2024-50193,\nCVE-2024-49880, CVE-2024-50008, CVE-2024-49949, CVE-2024-50056,\nCVE-2024-50099, CVE-2024-50180, CVE-2024-50045, CVE-2024-49923,\nCVE-2024-49987, CVE-2024-49884, CVE-2024-50031, CVE-2024-47705,\nCVE-2024-47728, CVE-2024-49969, CVE-2024-50077, CVE-2024-50188,\nCVE-2024-49852, CVE-2024-49890, CVE-2024-47745, CVE-2024-50058,\nCVE-2024-50186, CVE-2024-47749, CVE-2024-56614, CVE-2024-50021,\nCVE-2024-50055, CVE-2024-47727, CVE-2024-47677, CVE-2024-49922,\nCVE-2024-50015, CVE-2024-50084, CVE-2024-47689, CVE-2024-50101,\nCVE-2024-47699, CVE-2024-49947, CVE-2024-49999, CVE-2024-49868,\nCVE-2024-50184, CVE-2024-50187, CVE-2024-47757, CVE-2024-49900,\nCVE-2024-47703, CVE-2024-49975, CVE-2024-47692, CVE-2024-49980,\nCVE-2024-49951, CVE-2024-49930, CVE-2024-49867, CVE-2024-49860,\nCVE-2024-50009, CVE-2024-50072, CVE-2024-50229, CVE-2024-49954,\nCVE-2024-50183, CVE-2024-49858, CVE-2024-49909, CVE-2024-49926,\nCVE-2024-47754, CVE-2024-50027, CVE-2024-50200, CVE-2024-50196,\nCVE-2024-50086, CVE-2024-47739, CVE-2024-49978, CVE-2024-49983,\nCVE-2024-49894, CVE-2024-49973, CVE-2024-49888, CVE-2024-49974,\nCVE-2024-47672, CVE-2024-49977, CVE-2024-47738, CVE-2024-49893,\nCVE-2024-49876, CVE-2024-49960, CVE-2024-49955, CVE-2024-47670,\nCVE-2024-47706, CVE-2024-49931, CVE-2024-47686, CVE-2024-49855,\nCVE-2024-49901, CVE-2024-47752, CVE-2024-47675, CVE-2024-47704,\nCVE-2024-47735, CVE-2024-47744, CVE-2024-50088, CVE-2024-50070,\nCVE-2024-47707, CVE-2024-50176, CVE-2024-50080, CVE-2024-50175,\nCVE-2024-47731, CVE-2024-49853, CVE-2024-49929, CVE-2024-49989,\nCVE-2024-49921, CVE-2024-49965, CVE-2024-49891, CVE-2024-50005,\nCVE-2024-47715, CVE-2024-50085, CVE-2024-50189, CVE-2024-47723,\nCVE-2024-50020, CVE-2024-49902, CVE-2024-47730, CVE-2024-53156,\nCVE-2024-49895, CVE-2024-49997, CVE-2024-50192, CVE-2024-49850,\nCVE-2024-50062, CVE-2024-50033, CVE-2024-49972, CVE-2024-49945,\nCVE-2024-50036, CVE-2024-50202, CVE-2024-50095, CVE-2024-49913,\nCVE-2024-50049, CVE-2024-50148, CVE-2024-49948, CVE-2024-49866,\nCVE-2024-49963, CVE-2024-49907, CVE-2024-50117, CVE-2024-49885,\nCVE-2024-49874, CVE-2024-50198, CVE-2024-49856, CVE-2024-49986,\nCVE-2024-49871, CVE-2024-50028, CVE-2024-49889, CVE-2024-50024,\nCVE-2024-47687, CVE-2024-50065, CVE-2024-49953, CVE-2024-47748,\nCVE-2024-47747, CVE-2024-47673, CVE-2024-49928, CVE-2024-50191,\nCVE-2024-50016, CVE-2024-53170, CVE-2024-49933, CVE-2024-50029,\nCVE-2024-50098, CVE-2024-49988, CVE-2024-49985, CVE-2024-50042,\nCVE-2024-50171, CVE-2024-50233, CVE-2024-49976, CVE-2024-49996,\nCVE-2024-49950, CVE-2024-49968, CVE-2024-50083, CVE-2024-49966,\nCVE-2024-49851, CVE-2024-50066, CVE-2024-49864, CVE-2024-50048,\nCVE-2024-50069, CVE-2024-50001, CVE-2024-50194, CVE-2024-47693,\nCVE-2024-49905, CVE-2024-50134, CVE-2024-49944, CVE-2024-50060,\nCVE-2024-49892, CVE-2024-49982, CVE-2024-49883, CVE-2024-49875,\nCVE-2024-47691, CVE-2024-47714, CVE-2024-47712, CVE-2024-50025,\nCVE-2024-50023, CVE-2024-47726, CVE-2024-50041, CVE-2024-49896,\nCVE-2024-50195, CVE-2024-47679, CVE-2024-47678, CVE-2024-49877,\nCVE-2024-47684, CVE-2024-47719, CVE-2024-49937, CVE-2024-53144,\nCVE-2024-47737, CVE-2024-49998, CVE-2024-49879, CVE-2024-50019,\nCVE-2024-50093, CVE-2024-50073, CVE-2024-50064, CVE-2024-50006,\nCVE-2024-47695, CVE-2024-49882, CVE-2024-50179, CVE-2024-49865,\nCVE-2024-47702, CVE-2024-50046, CVE-2024-49919, CVE-2024-47697,\nCVE-2024-50017, CVE-2024-50014, CVE-2024-49861, CVE-2024-50197,\nCVE-2024-49886, CVE-2024-49938, CVE-2024-49991, CVE-2024-49981,\nCVE-2024-56663, CVE-2024-49914, CVE-2024-49920, CVE-2024-47671,\nCVE-2024-49961, CVE-2024-47698, CVE-2024-49952, CVE-2024-47688,\nCVE-2024-50078, CVE-2024-50199, CVE-2024-49918, CVE-2024-50044,\nCVE-2024-50013, CVE-2024-47711, CVE-2024-49917, CVE-2024-50057,\nCVE-2024-47718, CVE-2024-49911, CVE-2024-49912, CVE-2024-53165,\nCVE-2024-50068, CVE-2024-50087, CVE-2024-47720, CVE-2024-49958,\nCVE-2024-49934, CVE-2024-49859, CVE-2024-47710, CVE-2024-49903,\nCVE-2024-49925, CVE-2024-50061, CVE-2024-41016, CVE-2024-47696,\nCVE-2024-47701, CVE-2024-49939, CVE-2024-49924, CVE-2024-49935,\nCVE-2024-50030, CVE-2024-50074, CVE-2024-47681, CVE-2024-47743,\nCVE-2024-49992, CVE-2024-49881, CVE-2024-50063, CVE-2024-47713,\nCVE-2024-50039, CVE-2024-50185, CVE-2024-49962, CVE-2024-50182,\nCVE-2024-50022, CVE-2024-49959, CVE-2024-50047, CVE-2024-53104,\nCVE-2024-49878, CVE-2024-47732, CVE-2024-47753)\n","status":"published","published":"2025-04-01T16:23:48Z","modified":"2026-10-30T21:53:57.799321819Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7385-1","title":"linux-ibm vulnerabilities","description":"Michael Randrianantenaina discovered that the Bluetooth driver in the Linux\nKernel contained an improper access control vulnerability. A nearby\nattacker could use this to connect a rougue device and possibly execute\narbitrary code. (CVE-2024-8805)\n\nAttila Szász discovered that the HFS+ file system implementation in the\nLinux Kernel contained a heap overflow vulnerability. An attacker could use\na specially crafted file system image that, when mounted, could cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2025-0927)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Drivers core;\n  - ATA over ethernet (AOE) driver;\n  - Network block device driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - TPM device driver;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - ARM SCMI message protocol;\n  - EFI core;\n  - GPU drivers;\n  - HID subsystem;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Mailbox framework;\n  - Media drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - STMicroelectronics network drivers;\n  - NTB driver;\n  - Virtio pmem driver;\n  - Parport drivers;\n  - PCI subsystem;\n  - Alibaba DDR Sub-System Driveway PMU driver;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Powercap sysfs driver;\n  - Remote Processor subsystem;\n  - SCSI subsystem;\n  - SuperH / SH-Mobile drivers;\n  - Direct Digital Synthesis drivers;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - USB Device Class drivers;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - TI TPS6598x USB Power Delivery controller driver;\n  - vDPA drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - AFS file system;\n  - BTRFS file system;\n  - File systems infrastructure;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - Network file system (NFS) superblock;\n  - Virtio network driver;\n  - Network traffic control;\n  - Network sockets;\n  - TCP network protocol;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Perf events;\n  - Kernel thread helper (kthread);\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Arbitrary resource management;\n  - Static call mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Maple Tree data structure library;\n  - Memory management;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Networking core;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - Netfilter;\n  - Netlink;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - TIPC protocol;\n  - Unix domain sockets;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AudioScience HPI driver;\n  - KVM core;\n(CVE-2024-49927, CVE-2024-47719, CVE-2024-49878, CVE-2024-50200,\nCVE-2024-50013, CVE-2024-50187, CVE-2024-49852, CVE-2024-49913,\nCVE-2024-50080, CVE-2024-49903, CVE-2024-47745, CVE-2024-50184,\nCVE-2024-50117, CVE-2024-49863, CVE-2024-49973, CVE-2024-47727,\nCVE-2024-53170, CVE-2024-49933, CVE-2024-49900, CVE-2024-50095,\nCVE-2024-49928, CVE-2024-49858, CVE-2024-47731, CVE-2024-49896,\nCVE-2024-53104, CVE-2024-49972, CVE-2024-49969, CVE-2024-50176,\nCVE-2024-47739, CVE-2024-49995, CVE-2024-49982, CVE-2024-50044,\nCVE-2024-49957, CVE-2024-47748, CVE-2024-47744, CVE-2024-49978,\nCVE-2024-49879, CVE-2024-49987, CVE-2024-49929, CVE-2024-49905,\nCVE-2024-47723, CVE-2024-53144, CVE-2024-50066, CVE-2024-47735,\nCVE-2024-50057, CVE-2024-49890, CVE-2024-49963, CVE-2024-49955,\nCVE-2024-49974, CVE-2024-50049, CVE-2024-47710, CVE-2024-47682,\nCVE-2024-47734, CVE-2024-47691, CVE-2024-49999, CVE-2024-50098,\nCVE-2024-47672, CVE-2024-50056, CVE-2024-49983, CVE-2024-50005,\nCVE-2024-50045, CVE-2024-49866, CVE-2024-49953, CVE-2024-47750,\nCVE-2024-49917, CVE-2024-50026, CVE-2024-50009, CVE-2024-47718,\nCVE-2024-50070, CVE-2024-47700, CVE-2024-49986, CVE-2024-49907,\nCVE-2024-49884, CVE-2024-50085, CVE-2024-50087, CVE-2024-49875,\nCVE-2024-47728, CVE-2024-49861, CVE-2024-49851, CVE-2024-49980,\nCVE-2024-49898, CVE-2024-47681, CVE-2024-49965, CVE-2024-49960,\nCVE-2024-50020, CVE-2024-50012, CVE-2024-50186, CVE-2024-49889,\nCVE-2024-50030, CVE-2024-50046, CVE-2024-50180, CVE-2024-49966,\nCVE-2024-49897, CVE-2024-49985, CVE-2024-49918, CVE-2024-47754,\nCVE-2024-50082, CVE-2024-47757, CVE-2024-47711, CVE-2024-47737,\nCVE-2024-47716, CVE-2024-50069, CVE-2024-47696, CVE-2024-50031,\nCVE-2024-50202, CVE-2024-47713, CVE-2024-49894, CVE-2024-49921,\nCVE-2024-50022, CVE-2024-49856, CVE-2024-47740, CVE-2024-49868,\nCVE-2024-49919, CVE-2024-47679, CVE-2024-47695, CVE-2024-47714,\nCVE-2024-49996, CVE-2024-50196, CVE-2024-49997, CVE-2024-49883,\nCVE-2024-49936, CVE-2024-49962, CVE-2024-47673, CVE-2024-56663,\nCVE-2024-49892, CVE-2024-47685, CVE-2024-50233, CVE-2024-49891,\nCVE-2024-47738, CVE-2024-49870, CVE-2024-49885, CVE-2024-50025,\nCVE-2024-50006, CVE-2024-49968, CVE-2024-47709, CVE-2024-47751,\nCVE-2024-50058, CVE-2024-50086, CVE-2024-50072, CVE-2024-50195,\nCVE-2024-56582, CVE-2024-50014, CVE-2024-49886, CVE-2024-47743,\nCVE-2024-50185, CVE-2024-50193, CVE-2024-49909, CVE-2024-50077,\nCVE-2024-49930, CVE-2024-49946, CVE-2024-50192, CVE-2024-50041,\nCVE-2024-47698, CVE-2024-50188, CVE-2024-49977, CVE-2024-47687,\nCVE-2024-49945, CVE-2024-50008, CVE-2024-49859, CVE-2024-50062,\nCVE-2024-49880, CVE-2024-47671, CVE-2024-49867, CVE-2024-49912,\nCVE-2024-56614, CVE-2024-49862, CVE-2024-50021, CVE-2024-47670,\nCVE-2024-49911, CVE-2024-49855, CVE-2024-47712, CVE-2024-50229,\nCVE-2024-50096, CVE-2024-49895, CVE-2024-47677, CVE-2024-49934,\nCVE-2024-53156, CVE-2024-49893, CVE-2024-49925, CVE-2024-50063,\nCVE-2024-49926, CVE-2024-50201, CVE-2024-50033, CVE-2024-50199,\nCVE-2024-49874, CVE-2024-47732, CVE-2024-50078, CVE-2024-49935,\nCVE-2024-49902, CVE-2024-49989, CVE-2024-47675, CVE-2024-50064,\nCVE-2024-50015, CVE-2024-41016, CVE-2024-49949, CVE-2024-50090,\nCVE-2024-49860, CVE-2024-50036, CVE-2024-50084, CVE-2024-50182,\nCVE-2024-50061, CVE-2024-47702, CVE-2024-47730, CVE-2024-49951,\nCVE-2024-49938, CVE-2024-50088, CVE-2024-50198, CVE-2024-49998,\nCVE-2024-49931, CVE-2024-49944, CVE-2024-50000, CVE-2024-49954,\nCVE-2024-47753, CVE-2024-49976, CVE-2024-50048, CVE-2024-49881,\nCVE-2024-50093, CVE-2024-50019, CVE-2024-50059, CVE-2024-50016,\nCVE-2024-50068, CVE-2024-49920, CVE-2024-50035, CVE-2024-50197,\nCVE-2024-47699, CVE-2024-49914, CVE-2024-50191, CVE-2024-50083,\nCVE-2024-47701, CVE-2024-49877, CVE-2024-50017, CVE-2024-49915,\nCVE-2024-50001, CVE-2024-49864, CVE-2024-50189, CVE-2024-50101,\nCVE-2024-47704, CVE-2024-50024, CVE-2024-50038, CVE-2024-49850,\nCVE-2024-50027, CVE-2024-49952, CVE-2024-50074, CVE-2024-50171,\nCVE-2024-53165, CVE-2024-47689, CVE-2024-49865, CVE-2024-49853,\nCVE-2024-47742, CVE-2024-49994, CVE-2024-50179, CVE-2024-47686,\nCVE-2024-49975, CVE-2024-49948, CVE-2024-50099, CVE-2024-50175,\nCVE-2024-50028, CVE-2024-49947, CVE-2024-47741, CVE-2024-49888,\nCVE-2024-50055, CVE-2024-47749, CVE-2024-49992, CVE-2024-47715,\nCVE-2024-49922, CVE-2024-47756, CVE-2024-50023, CVE-2024-47720,\nCVE-2024-50194, CVE-2024-47688, CVE-2024-49991, CVE-2024-47705,\nCVE-2024-49942, CVE-2024-50047, CVE-2024-49981, CVE-2024-49950,\nCVE-2024-47684, CVE-2024-50065, CVE-2024-49939, CVE-2024-47726,\nCVE-2024-47697, CVE-2024-49959, CVE-2024-47690, CVE-2024-50040,\nCVE-2024-50002, CVE-2024-50029, CVE-2024-47752, CVE-2024-49924,\nCVE-2024-50073, CVE-2024-47733, CVE-2024-50075, CVE-2024-49937,\nCVE-2024-47707, CVE-2024-47692, CVE-2024-47703, CVE-2024-49988,\nCVE-2024-50060, CVE-2024-50039, CVE-2024-49961, CVE-2024-50042,\nCVE-2024-50148, CVE-2024-47678, CVE-2024-49923, CVE-2024-49901,\nCVE-2024-47706, CVE-2024-49882, CVE-2024-47693, CVE-2024-49876,\nCVE-2024-47747, CVE-2024-49871, CVE-2024-50076, CVE-2024-50183,\nCVE-2024-50007, CVE-2024-49958, CVE-2024-50134)\n","status":"published","published":"2025-03-27T19:34:38Z","modified":"2026-10-29T20:02:41.736344599Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7386-1","title":"linux-oem-6.8 vulnerabilities","description":"\nMichael Randrianantenaina discovered that the Bluetooth driver in the Linux\nKernel contained an improper access control vulnerability. A nearby\nattacker could use this to connect a rougue device and possibly execute\narbitrary code. (CVE-2024-8805)\n\nAttila Szász discovered that the HFS+ file system implementation in the\nLinux Kernel contained a heap overflow vulnerability. An attacker could use\na specially crafted file system image that, when mounted, could cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2025-0927)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Drivers core;\n  - ATA over ethernet (AOE) driver;\n  - Network block device driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - TPM device driver;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - ARM SCMI message protocol;\n  - EFI core;\n  - GPU drivers;\n  - HID subsystem;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Mailbox framework;\n  - Media drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - STMicroelectronics network drivers;\n  - NTB driver;\n  - Virtio pmem driver;\n  - Parport drivers;\n  - PCI subsystem;\n  - Alibaba DDR Sub-System Driveway PMU driver;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Powercap sysfs driver;\n  - Remote Processor subsystem;\n  - SCSI subsystem;\n  - SuperH / SH-Mobile drivers;\n  - Direct Digital Synthesis drivers;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - USB Device Class drivers;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - TI TPS6598x USB Power Delivery controller driver;\n  - vDPA drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - AFS file system;\n  - BTRFS file system;\n  - File systems infrastructure;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - Network file system (NFS) superblock;\n  - Virtio network driver;\n  - Network traffic control;\n  - Network sockets;\n  - TCP network protocol;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Perf events;\n  - Kernel thread helper (kthread);\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Arbitrary resource management;\n  - Static call mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Maple Tree data structure library;\n  - Memory management;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Networking core;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - Netfilter;\n  - Netlink;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - TIPC protocol;\n  - Unix domain sockets;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AudioScience HPI driver;\n  - KVM core;\n(CVE-2024-49952, CVE-2024-49920, CVE-2024-49945, CVE-2024-50180,\nCVE-2024-49944, CVE-2024-49987, CVE-2024-50148, CVE-2024-49959,\nCVE-2024-50063, CVE-2024-50083, CVE-2024-49878, CVE-2024-49870,\nCVE-2024-49863, CVE-2024-49921, CVE-2024-49992, CVE-2024-47691,\nCVE-2024-49913, CVE-2024-47712, CVE-2024-49948, CVE-2024-49976,\nCVE-2024-50085, CVE-2024-49891, CVE-2024-56614, CVE-2024-47713,\nCVE-2024-47703, CVE-2024-50191, CVE-2024-50087, CVE-2024-49958,\nCVE-2024-49868, CVE-2024-49922, CVE-2024-49960, CVE-2024-50019,\nCVE-2024-47749, CVE-2024-49996, CVE-2024-47677, CVE-2024-50065,\nCVE-2024-47744, CVE-2024-49968, CVE-2024-49985, CVE-2024-47752,\nCVE-2024-50017, CVE-2024-50183, CVE-2024-47709, CVE-2024-49938,\nCVE-2024-49876, CVE-2024-49893, CVE-2024-50134, CVE-2024-49972,\nCVE-2024-49934, CVE-2024-50015, CVE-2024-49856, CVE-2024-49853,\nCVE-2024-47711, CVE-2024-49949, CVE-2024-50026, CVE-2024-47681,\nCVE-2024-50000, CVE-2024-50189, CVE-2024-47716, CVE-2024-47723,\nCVE-2024-50044, CVE-2024-50179, CVE-2024-49871, CVE-2024-50008,\nCVE-2024-49955, CVE-2024-50007, CVE-2024-47695, CVE-2024-49889,\nCVE-2024-49954, CVE-2024-49894, CVE-2024-50014, CVE-2024-47731,\nCVE-2024-50055, CVE-2024-50098, CVE-2024-49930, CVE-2024-47684,\nCVE-2024-47705, CVE-2024-50029, CVE-2024-49901, CVE-2024-47689,\nCVE-2024-50022, CVE-2024-50009, CVE-2024-49937, CVE-2024-50197,\nCVE-2024-49911, CVE-2024-50076, CVE-2024-50002, CVE-2024-50077,\nCVE-2024-47679, CVE-2024-50025, CVE-2024-50069, CVE-2024-50101,\nCVE-2024-49942, CVE-2024-49986, CVE-2024-50012, CVE-2024-49858,\nCVE-2024-49884, CVE-2024-50201, CVE-2024-47701, CVE-2024-49994,\nCVE-2024-49897, CVE-2024-47687, CVE-2024-47751, CVE-2024-50001,\nCVE-2024-50117, CVE-2024-49909, CVE-2024-50086, CVE-2024-50064,\nCVE-2024-50088, CVE-2024-50005, CVE-2024-50184, CVE-2024-49882,\nCVE-2024-49936, CVE-2024-49933, CVE-2024-49995, CVE-2024-47704,\nCVE-2024-50066, CVE-2024-49898, CVE-2024-50068, CVE-2024-50192,\nCVE-2024-53104, CVE-2024-49860, CVE-2024-47741, CVE-2024-50039,\nCVE-2024-47699, CVE-2024-49861, CVE-2024-49969, CVE-2024-49950,\nCVE-2024-50194, CVE-2024-49929, CVE-2024-50006, CVE-2024-49997,\nCVE-2024-49983, CVE-2024-47710, CVE-2024-50200, CVE-2024-47692,\nCVE-2024-47748, CVE-2024-49855, CVE-2024-50182, CVE-2024-47706,\nCVE-2024-50188, CVE-2024-47732, CVE-2024-47707, CVE-2024-50048,\nCVE-2024-50058, CVE-2024-49912, CVE-2024-49966, CVE-2024-49852,\nCVE-2024-47753, CVE-2024-50202, CVE-2024-50062, CVE-2024-50056,\nCVE-2024-49946, CVE-2024-49902, CVE-2024-50033, CVE-2024-47750,\nCVE-2024-50021, CVE-2024-49939, CVE-2024-50072, CVE-2024-49851,\nCVE-2024-49928, CVE-2024-50061, CVE-2024-49885, CVE-2024-50047,\nCVE-2024-47672, CVE-2024-47734, CVE-2024-47714, CVE-2024-49886,\nCVE-2024-47730, CVE-2024-47697, CVE-2024-49973, CVE-2024-47718,\nCVE-2024-49862, CVE-2024-49963, CVE-2024-49881, CVE-2024-53165,\nCVE-2024-49998, CVE-2024-47757, CVE-2024-49982, CVE-2024-50186,\nCVE-2024-50016, CVE-2024-47675, CVE-2024-50090, CVE-2024-49917,\nCVE-2024-50031, CVE-2024-50093, CVE-2024-49859, CVE-2024-49890,\nCVE-2024-47670, CVE-2024-49919, CVE-2024-53156, CVE-2024-49924,\nCVE-2024-50078, CVE-2024-49864, CVE-2024-49962, CVE-2024-47720,\nCVE-2024-49874, CVE-2024-41016, CVE-2024-49991, CVE-2024-47726,\nCVE-2024-50171, CVE-2024-47682, CVE-2024-49865, CVE-2024-49988,\nCVE-2024-49903, CVE-2024-50035, CVE-2024-50229, CVE-2024-50075,\nCVE-2024-50195, CVE-2024-49947, CVE-2024-49900, CVE-2024-50040,\nCVE-2024-50176, CVE-2024-47686, CVE-2024-49978, CVE-2024-49923,\nCVE-2024-50199, CVE-2024-49999, CVE-2024-50070, CVE-2024-49953,\nCVE-2024-47733, CVE-2024-49888, CVE-2024-49977, CVE-2024-50080,\nCVE-2024-49905, CVE-2024-47737, CVE-2024-49961, CVE-2024-50030,\nCVE-2024-49951, CVE-2024-49892, CVE-2024-50096, CVE-2024-47735,\nCVE-2024-47673, CVE-2024-56663, CVE-2024-49981, CVE-2024-50049,\nCVE-2024-50193, CVE-2024-49957, CVE-2024-47742, CVE-2024-49880,\nCVE-2024-49965, CVE-2024-49927, CVE-2024-47690, CVE-2024-50057,\nCVE-2024-50073, CVE-2024-49931, CVE-2024-49875, CVE-2024-50041,\nCVE-2024-47700, CVE-2024-47719, CVE-2024-56582, CVE-2024-47738,\nCVE-2024-47754, CVE-2024-49850, CVE-2024-47678, CVE-2024-49935,\nCVE-2024-47739, CVE-2024-50028, CVE-2024-47727, CVE-2024-47728,\nCVE-2024-50084, CVE-2024-50095, CVE-2024-50175, CVE-2024-50198,\nCVE-2024-47702, CVE-2024-50187, CVE-2024-50032, CVE-2024-50074,\nCVE-2024-50020, CVE-2024-53144, CVE-2024-50233, CVE-2024-47698,\nCVE-2024-49879, CVE-2024-49896, CVE-2024-47747, CVE-2024-49877,\nCVE-2024-50046, CVE-2024-49866, CVE-2024-47740, CVE-2024-50042,\nCVE-2024-50060, CVE-2024-49925, CVE-2024-50013, CVE-2024-49867,\nCVE-2024-47685, CVE-2024-47743, CVE-2024-49883, CVE-2024-53170,\nCVE-2024-50038, CVE-2024-47756, CVE-2024-47696, CVE-2024-49980,\nCVE-2024-50185, CVE-2024-47693, CVE-2024-49915, CVE-2024-49914,\nCVE-2024-49907, CVE-2024-49989, CVE-2024-50196, CVE-2024-50027,\nCVE-2024-47745, CVE-2024-50045, CVE-2024-50024, CVE-2024-49918,\nCVE-2024-49975, CVE-2024-49974, CVE-2024-50082, CVE-2024-49895,\nCVE-2024-47671, CVE-2024-50059, CVE-2024-50099, CVE-2024-50023,\nCVE-2024-47688, CVE-2024-49926, CVE-2024-50036)\n","status":"published","published":"2025-03-27T19:50:07Z","modified":"2026-10-29T20:02:57.467469851Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7403-1","title":"linux-hwe-6.8 vulnerabilities","description":"Michael Randrianantenaina discovered that the Bluetooth driver in the Linux\nKernel contained an improper access control vulnerability. A nearby\nattacker could use this to connect a rougue device and possibly execute\narbitrary code. (CVE-2024-8805)\n\nAttila Szász discovered that the HFS+ file system implementation in the\nLinux Kernel contained a heap overflow vulnerability. An attacker could use\na specially crafted file system image that, when mounted, could cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2025-0927)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - ARM32 architecture;\n  - ARM64 architecture;\n  - x86 architecture;\n  - Block layer subsystem;\n  - Cryptographic API;\n  - ACPI drivers;\n  - Drivers core;\n  - ATA over ethernet (AOE) driver;\n  - Network block device driver;\n  - Ublk userspace block driver;\n  - Compressed RAM block device driver;\n  - TPM device driver;\n  - CPU frequency scaling framework;\n  - Hardware crypto device drivers;\n  - DAX dirext access to differentiated memory framework;\n  - ARM SCMI message protocol;\n  - EFI core;\n  - GPU drivers;\n  - HID subsystem;\n  - I2C subsystem;\n  - I3C subsystem;\n  - IIO subsystem;\n  - InfiniBand drivers;\n  - Input Device core drivers;\n  - IOMMU subsystem;\n  - IRQ chip drivers;\n  - Mailbox framework;\n  - Media drivers;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - Mellanox network drivers;\n  - STMicroelectronics network drivers;\n  - NTB driver;\n  - Virtio pmem driver;\n  - Parport drivers;\n  - PCI subsystem;\n  - Alibaba DDR Sub-System Driveway PMU driver;\n  - Pin controllers subsystem;\n  - x86 platform drivers;\n  - Powercap sysfs driver;\n  - Remote Processor subsystem;\n  - SCSI subsystem;\n  - SuperH / SH-Mobile drivers;\n  - Direct Digital Synthesis drivers;\n  - Thermal drivers;\n  - TTY drivers;\n  - UFS subsystem;\n  - USB Device Class drivers;\n  - USB Gadget drivers;\n  - USB Host Controller drivers;\n  - TI TPS6598x USB Power Delivery controller driver;\n  - vDPA drivers;\n  - Virtio Host (VHOST) subsystem;\n  - Framebuffer layer;\n  - AFS file system;\n  - BTRFS file system;\n  - File systems infrastructure;\n  - Ceph distributed file system;\n  - Ext4 file system;\n  - F2FS file system;\n  - JFS file system;\n  - Network file systems library;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - NTFS3 file system;\n  - SMB network file system;\n  - BPF subsystem;\n  - Network file system (NFS) superblock;\n  - Virtio network driver;\n  - Network namespace;\n  - Network traffic control;\n  - Network sockets;\n  - TCP network protocol;\n  - User-space API (UAPI);\n  - io_uring subsystem;\n  - Perf events;\n  - Kernel thread helper (kthread);\n  - Padata parallel execution mechanism;\n  - RCU subsystem;\n  - Arbitrary resource management;\n  - Static call mechanism;\n  - Timer subsystem;\n  - Tracing infrastructure;\n  - Maple Tree data structure library;\n  - Memory management;\n  - Bluetooth subsystem;\n  - Ethernet bridge;\n  - CAN network layer;\n  - Networking core;\n  - Distributed Switch Architecture;\n  - IPv4 networking;\n  - IPv6 networking;\n  - MAC80211 subsystem;\n  - IEEE 802.15.4 subsystem;\n  - Multipath TCP;\n  - NCSI (Network Controller Sideband Interface) driver;\n  - Netfilter;\n  - Netlink;\n  - RxRPC session sockets;\n  - SCTP protocol;\n  - TIPC protocol;\n  - Unix domain sockets;\n  - Wireless networking;\n  - eXpress Data Path;\n  - AudioScience HPI driver;\n  - KVM core;\n(CVE-2024-49950, CVE-2024-49955, CVE-2024-50077, CVE-2024-57798,\nCVE-2024-47671, CVE-2024-49987, CVE-2024-50078, CVE-2024-49985,\nCVE-2024-49981, CVE-2024-49852, CVE-2024-49882, CVE-2024-49925,\nCVE-2024-50047, CVE-2024-47752, CVE-2024-49851, CVE-2024-50229,\nCVE-2024-47675, CVE-2024-50017, CVE-2024-47726, CVE-2024-50008,\nCVE-2024-49889, CVE-2024-50059, CVE-2024-53144, CVE-2024-49959,\nCVE-2024-49886, CVE-2024-50035, CVE-2024-50036, CVE-2024-47713,\nCVE-2024-47720, CVE-2024-47756, CVE-2024-49974, CVE-2024-49864,\nCVE-2024-47688, CVE-2024-47735, CVE-2024-50060, CVE-2024-50182,\nCVE-2024-49894, CVE-2024-50002, CVE-2024-47748, CVE-2024-49949,\nCVE-2024-47757, CVE-2024-47678, CVE-2024-47737, CVE-2024-49880,\nCVE-2024-50093, CVE-2024-49914, CVE-2024-50048, CVE-2024-56658,\nCVE-2024-50058, CVE-2024-49995, CVE-2024-50096, CVE-2024-49877,\nCVE-2024-47715, CVE-2024-50007, CVE-2024-56614, CVE-2024-49948,\nCVE-2024-49935, CVE-2024-50009, CVE-2024-50200, CVE-2024-50070,\nCVE-2024-49856, CVE-2024-50005, CVE-2024-49865, CVE-2024-50085,\nCVE-2024-49892, CVE-2024-53063, CVE-2024-47695, CVE-2024-49991,\nCVE-2024-47687, CVE-2024-53140, CVE-2024-50179, CVE-2024-47682,\nCVE-2024-50080, CVE-2024-50056, CVE-2024-47690, CVE-2024-49939,\nCVE-2024-56663, CVE-2024-49913, CVE-2024-47745, CVE-2024-47739,\nCVE-2024-49920, CVE-2024-47704, CVE-2024-50068, CVE-2024-49876,\nCVE-2024-49992, CVE-2024-49980, CVE-2024-49907, CVE-2024-50019,\nCVE-2024-47747, CVE-2024-50022, CVE-2024-49946, CVE-2024-56595,\nCVE-2024-49875, CVE-2024-49968, CVE-2024-47706, CVE-2024-56672,\nCVE-2024-47744, CVE-2024-49866, CVE-2024-47677, CVE-2024-49999,\nCVE-2024-47684, CVE-2024-49952, CVE-2024-47702, CVE-2024-50084,\nCVE-2024-49884, CVE-2024-53165, CVE-2024-49997, CVE-2024-50082,\nCVE-2024-47705, CVE-2024-49958, CVE-2024-50031, CVE-2024-49927,\nCVE-2024-50171, CVE-2024-50193, CVE-2024-49965, CVE-2024-49919,\nCVE-2024-49915, CVE-2024-47712, CVE-2024-47692, CVE-2024-47686,\nCVE-2024-47727, CVE-2024-50000, CVE-2024-50006, CVE-2024-47714,\nCVE-2024-49878, CVE-2024-49911, CVE-2024-49936, CVE-2024-50028,\nCVE-2024-50046, CVE-2024-49975, CVE-2024-47709, CVE-2024-47718,\nCVE-2024-50192, CVE-2024-49928, CVE-2024-50030, CVE-2024-49874,\nCVE-2024-49903, CVE-2024-47711, CVE-2024-50069, CVE-2024-49923,\nCVE-2024-47723, CVE-2024-50233, CVE-2024-50088, CVE-2024-49859,\nCVE-2024-49973, CVE-2024-47685, CVE-2024-47679, CVE-2024-49890,\nCVE-2024-53104, CVE-2024-47670, CVE-2024-47730, CVE-2024-49861,\nCVE-2024-50086, CVE-2025-0927, CVE-2024-49893, CVE-2024-56582,\nCVE-2024-47719, CVE-2024-49982, CVE-2024-47691, CVE-2024-50087,\nCVE-2024-50185, CVE-2024-50045, CVE-2024-50064, CVE-2024-47689,\nCVE-2024-50020, CVE-2024-47672, CVE-2024-49966, CVE-2024-50038,\nCVE-2024-49897, CVE-2024-49969, CVE-2024-50180, CVE-2024-49901,\nCVE-2024-47751, CVE-2024-49850, CVE-2024-49951, CVE-2024-49905,\nCVE-2024-49953, CVE-2024-50001, CVE-2024-50062, CVE-2024-49994,\nCVE-2024-47734, CVE-2024-50175, CVE-2024-50195, CVE-2024-50049,\nCVE-2024-47753, CVE-2024-50074, CVE-2024-50202, CVE-2024-47728,\nCVE-2024-49902, CVE-2024-50187, CVE-2024-49954, CVE-2024-50024,\nCVE-2024-49929, CVE-2024-53170, CVE-2024-49855, CVE-2024-50134,\nCVE-2024-50039, CVE-2024-47754, CVE-2024-47743, CVE-2024-50198,\nCVE-2024-47698, CVE-2024-49989, CVE-2024-50191, CVE-2024-50063,\nCVE-2024-49879, CVE-2024-49983, CVE-2024-50016, CVE-2024-47696,\nCVE-2024-50099, CVE-2024-50025, CVE-2024-47731, CVE-2024-49853,\nCVE-2024-47697, CVE-2024-56598, CVE-2024-50196, CVE-2024-49977,\nCVE-2024-49896, CVE-2024-50090, CVE-2024-49881, CVE-2024-50055,\nCVE-2024-50029, CVE-2024-49978, CVE-2024-49917, CVE-2024-49868,\nCVE-2024-50201, CVE-2024-47707, CVE-2024-50188, CVE-2024-49870,\nCVE-2024-49960, CVE-2024-50026, CVE-2024-50014, CVE-2024-50072,\nCVE-2024-49900, CVE-2024-49895, CVE-2024-47732, CVE-2024-50044,\nCVE-2024-47703, CVE-2024-47700, CVE-2024-49986, CVE-2024-49858,\nCVE-2024-49944, CVE-2024-49912, CVE-2024-50015, CVE-2024-50075,\nCVE-2024-47673, CVE-2024-49926, CVE-2024-49933, CVE-2024-50095,\nCVE-2024-50027, CVE-2024-49957, CVE-2024-49996, CVE-2024-49862,\nCVE-2024-49891, CVE-2024-49863, CVE-2024-49871, CVE-2024-50061,\nCVE-2024-53156, CVE-2024-47716, CVE-2024-50184, CVE-2024-49918,\nCVE-2024-50013, CVE-2024-50073, CVE-2024-50042, CVE-2024-50199,\nCVE-2024-49922, CVE-2024-50098, CVE-2024-50148, CVE-2024-49921,\nCVE-2024-50176, CVE-2024-50194, CVE-2024-49961, CVE-2024-49931,\nCVE-2024-50101, CVE-2024-50021, CVE-2024-47701, CVE-2024-50033,\nCVE-2024-47740, CVE-2024-50041, CVE-2024-49947, CVE-2024-49972,\nCVE-2024-47750, CVE-2024-49934, CVE-2024-49924, CVE-2024-49860,\nCVE-2024-50012, CVE-2024-47681, CVE-2024-49930, CVE-2024-49883,\nCVE-2024-47710, CVE-2024-50186, CVE-2024-49976, CVE-2024-47738,\nCVE-2024-47742, CVE-2024-50197, CVE-2024-50302, CVE-2024-49938,\nCVE-2024-49888, CVE-2024-47693, CVE-2024-49937, CVE-2024-41016,\nCVE-2024-49945, CVE-2024-50023, CVE-2024-47749, CVE-2024-50057,\nCVE-2024-49962, CVE-2024-49998, CVE-2024-50076, CVE-2024-50083,\nCVE-2024-49909, CVE-2024-47733, CVE-2024-50117, CVE-2024-47741,\nCVE-2024-50040, CVE-2024-50066, CVE-2024-49942, CVE-2024-50065,\nCVE-2024-49898, CVE-2024-49867, CVE-2024-49988, CVE-2024-50183,\nCVE-2024-47699, CVE-2024-49885, CVE-2024-50189, CVE-2024-49963)\n","status":"published","published":"2025-04-01T22:26:48Z","modified":"2026-10-29T20:02:46.828181225Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}