Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2024-09-30

                Ported from the following upstream stable releases:
                        v6.6.44, v6.10.3

       from git://git.kernel.org/

powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC
spi: spi-microchip-core: Fix the number of chip selects supported
spi: atmel-quadspi: Add missing check for clk_prepare
EDAC, i10nm: make skx_common.o a separate module
rcu/tasks: Fix stale task snaphot for Tasks Trace
platform/chrome: cros_ec_debugfs: fix wrong EC message version
ubd: refactor the interrupt handler
ubd: untagle discard vs write zeroes not support handling
block: initialize integrity buffer to zero before writing it to media
x86/kconfig: Add as-instr64 macro to properly evaluate AS_WRUSS
hfsplus: fix to avoid false alarm of circular locking
x86/of: Return consistent error type from x86_of_pci_irq_enable()
x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling
x86/pci/xen: Fix PCIBIOS_* return code handling
x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos
cgroup/cpuset: Prevent UAF in proc_cpuset_show()
hwmon: (adt7475) Fix default duty on fan is disabled
block: Call .limit_depth() after .hctx has been set
block/mq-deadline: Fix the tag reservation code
md: Don't wait for MD_RECOVERY_NEEDED for HOT_REMOVE_DISK ioctl
pwm: stm32: Always do lazy disabling
nvmet-auth: fix nvmet_auth hash error handling
drm/meson: fix canvas release in bind function
pwm: atmel-tcb: Fix race condition and convert to guards
hwmon: (max6697) Fix underflow when writing limit attributes
hwmon: (max6697) Fix swapped temp{1,8} critical alarms
arm64: dts: qcom: sc8180x: Correct PCIe slave ports
arm64: dts: qcom: sc8180x: add power-domain to UFS PHY
arm64: dts: qcom: sdm845: add power-domain to UFS PHY
arm64: dts: qcom: sm6115: add power-domain to UFS PHY
arm64: dts: qcom: sm6350: add power-domain to UFS PHY
arm64: dts: qcom: sm8250: add power-domain to UFS PHY
arm64: dts: qcom: sm8350: add power-domain to UFS PHY
arm64: dts: qcom: sm8450: add power-domain to UFS PHY
arm64: dts: qcom: msm8996-xiaomi-common: drop excton from the USB PHY
arm64: dts: qcom: sdm850-lenovo-yoga-c630: fix IPA firmware path
arm64: dts: qcom: msm8998: enable adreno_smmu by default
soc: qcom: pmic_glink: Handle the return value of pmic_glink_init
soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers
arm64: dts: rockchip: Add sdmmc related properties on rk3308-rock-pi-s
arm64: dts: rockchip: Add pinctrl for UART0 to rk3308-rock-pi-s
arm64: dts: rockchip: Add mdio and ethernet-phy nodes to rk3308-rock-pi-s
arm64: dts: rockchip: Update WIFi/BT related nodes on rk3308-rock-pi-s
arm64: dts: qcom: msm8996: specify UFS core_clk frequencies
arm64: dts: qcom: sa8775p: mark ethernet devices as DMA-coherent
soc: xilinx: rename cpu_number1 to dummy_cpu_number
ARM: dts: sunxi: remove duplicated entries in makefile
ARM: dts: stm32: Add arm,no-tick-in-suspend to STM32MP15xx STGEN timer
arm64: dts: qcom: qrb4210-rb2: make L9A always-on
cpufreq: ti-cpufreq: Handle deferred probe with dev_err_probe()
OPP: ti: Fix ti_opp_supply_probe wrong return values
memory: fsl_ifc: Make FSL_IFC config visible and selectable
arm64: dts: ti: k3-am62x: Drop McASP AFIFOs
arm64: dts: ti: k3-am625-beagleplay: Drop McASP AFIFOs
arm64: dts: ti: k3-am62-verdin: Drop McASP AFIFOs
arm64: dts: qcom: qdu1000: Add secure qfprom node
soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove
soc: qcom: pdr: protect locator_addr with the main mutex
soc: qcom: pdr: fix parsing of domains lists
arm64: dts: rockchip: Increase VOP clk rate on RK3328
arm64: dts: amlogic: sm1: fix spdif compatibles
ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode
ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset
ARM: dts: imx6qdl-kontron-samx6i: fix board reset
ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects
ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity
arm64: dts: mediatek: mt8195: Fix GPU thermal zone name for SVS
arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property
arm64: dts: mediatek: mt8192-asurada: Add off-on-delay-us for pp3300_mipibrdg
arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux
arm64: dts: mediatek: mt8183-kukui: Fix the value of `dlg,jack-det-rate` 
mismatch
arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625
arm64: dts: amlogic: gx: correct hdmi clocks
arm64: dts: amlogic: add power domain to hdmitx
arm64: dts: amlogic: setup hdmi system clock
arm64: dts: rockchip: Drop invalid mic-in-differential on rk3568-rock-3a
arm64: dts: rockchip: Fix mic-in-differential usage on rk3566-roc-pc
arm64: dts: rockchip: Fix mic-in-differential usage on rk3568-evb1-v10
arm64: dts: renesas: r8a779a0: Add missing hypervisor virtual timer IRQ
arm64: dts: renesas: r8a779f0: Add missing hypervisor virtual timer IRQ
arm64: dts: renesas: r8a779g0: Add missing hypervisor virtual timer IRQ
arm64: dts: renesas: r9a07g043u: Add missing hypervisor virtual timer IRQ
arm64: dts: renesas: r9a07g044: Add missing hypervisor virtual timer IRQ
arm64: dts: renesas: r9a07g054: Add missing hypervisor virtual timer IRQ
m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages
arm64: dts: imx8mp: Fix pgc_mlmix location
arm64: dts: imx8mp: add HDMI power-domains
arm64: dts: imx8mp: Fix pgc vpu locations
x86/xen: Convert comma to semicolon
arm64: dts: rockchip: Add missing power-domains for rk356x vop_mmu
arm64: dts: rockchip: fix regulator name for Lunzn Fastrhino R6xS
arm64: dts: rockchip: fix usb regulator for Lunzn Fastrhino R6xS
arm64: dts: rockchip: fix pmu_io supply for Lunzn Fastrhino R6xS
arm64: dts: rockchip: remove unused usb2 nodes for Lunzn Fastrhino R6xS
arm64: dts: rockchip: disable display subsystem for Lunzn Fastrhino R6xS
arm64: dts: rockchip: fixes PHY reset for Lunzn Fastrhino R68S
arm64: dts: qcom: sm6350: Add missing qcom,non-secure-domain property
cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC 
systems
m68k: cmpxchg: Fix return value for default case in __arch_xchg()
ARM: spitz: fix GPIO assignment for backlight
vmlinux.lds.h: catch .bss..L* sections into BSS")
firmware: turris-mox-rwtm: Do not complete if there are no waiters
firmware: turris-mox-rwtm: Fix checking return value of 
wait_for_completion_timeout()
firmware: turris-mox-rwtm: Initialize completion before mailbox
wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device
wifi: ath12k: Correct 6 GHz frequency value in rx status
wifi: ath12k: Fix tx completion ring (WBM2SW) setup failure
bpftool: Un-const bpf_func_info to fix it for llvm 17 and newer
selftests/bpf: Fix prog numbers in test_sockmap
net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP
wifi: ath12k: change DMA direction while mapping reinjected packets
wifi: ath12k: fix invalid memory access while processing fragmented packets
wifi: ath12k: fix firmware crash during reo reinject
wifi: ath11k: fix wrong definition of CE ring's base address
wifi: ath12k: fix wrong definition of CE ring's base address
tcp: add tcp_done_with_error() helper
tcp: fix race in tcp_write_err()
tcp: fix races in tcp_v[46]_err()
net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when 
CONFIG_ARCH_NO_SG_CHAIN is defined
selftests/bpf: Check length of recv in test_sockmap
udf: Fix lock ordering in udf_evict_inode()
lib: objagg: Fix general protection fault
mlxsw: spectrum_acl_erp: Fix object nesting warning
mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors
perf/x86: Serialize set_attr_rdpmc()
jump_label: Fix concurrency issues in static_key_slow_dec()
wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers
wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()
wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
udf: Fix bogus checksum computation in udf_rename()
net: fec: Refactor: #define magic constants
net: fec: Fix FEC_ECR_EN1588 being cleared on link-down
libbpf: Checking the btf_type kind when fixing variable offsets
xfrm: Fix unregister netdevice hang on hardware offload.
ipvs: Avoid unnecessary calls to skb_is_gso_sctp
netfilter: nf_tables: rise cap on SELinux secmark context
wifi: rtw89: 8852b: fix definition of KIP register number
wifi: rtl8xxxu: 8188f: Limit TX power index
xfrm: Export symbol xfrm_dev_state_delete.
bpftool: Mount bpffs when pinmaps path not under the bpffs
perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation
perf: Fix perf_aux_size() for greater-than 32-bit size
perf: Prevent passing zero nr_pages to rb_alloc_aux()
perf: Fix default aux_watermark calculation
perf/x86/intel/cstate: Fix Alderlake/Raptorlake/Meteorlake
wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
xfrm: fix netdev reference count imbalance
xfrm: call xfrm_dev_policy_delete when kill policy
wifi: virt_wifi: avoid reporting connection success with wrong SSID
gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey
wifi: virt_wifi: don't use strlen() in const context
locking/rwsem: Add __always_inline annotation to __down_write_common() and 
inlined callers
selftests/bpf: Close fd in error path in drop_on_reuseport
selftests/bpf: Null checks for links in bpf_tcp_ca
selftests/bpf: Close obj in error path in xdp_adjust_tail
selftests/resctrl: Convert perror() to ksft_perror() or ksft_print_msg()
selftests/resctrl: Fix closing IMC fds on error and open-code R+W instead of 
loops
bpf: annotate BTF show functions with __printf
bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o
bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT
selftests: forwarding: devlink_lib: Wait for udev events after reloading
Bluetooth: hci_bcm4377: Use correct unit for timeouts
Bluetooth: btintel: Refactor btintel_set_ppag()
Bluetooth: btnxpuart: Add handling for boot-signature timeout errors
xdp: fix invalid wait context of page_pool_destroy()
net: bridge: mst: Check vlan state for egress decision
drm/rockchip: vop2: Fix the port mux of VP2
drm/arm/komeda: Fix komeda probe failing if there are no links in the secondary 
pipeline
drm/amdkfd: Fix CU Masking for GFX 9.4.3
drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq()
drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_generic_write_seq()
drm/amd/pm: Fix aldebaran pcie speed reporting
drm/amdgpu: Fix memory range calculation
drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit
drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1
drm/panel: himax-hx8394: Handle errors from mipi_dsi_dcs_set_display_on() better
drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators
drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare()
drm/bridge: Fixed a DP link training bug
drm/bridge: it6505: fix hibernate to resume no display issue
media: pci: ivtv: Add check for DMA map result
media: imon: Fix race getting ictx->lock
media: i2c: Fix imx412 exposure control
media: v4l: async: Fix NULL pointer dereference in adding ancillary links
s390/mm: Convert make_page_secure to use a folio
s390/mm: Convert gmap_make_secure to use a folio
s390/uv: Don't call folio_wait_writeback() without a folio reference
media: mediatek: vcodec: Handle invalid decoder vsi
x86/shstk: Make return uprobe work with shadow stack
ipmi: ssif_bmc: prevent integer overflow on 32bit systems
saa7134: Unchecked i2c_transfer function result fixed
media: i2c: imx219: fix msr access command sequence
media: uvcvideo: Disable autosuspend for Insta360 Link
media: uvcvideo: Quirk for invalid dev_sof in Logitech C922
media: uvcvideo: Add quirk for invalid dev_sof in Logitech C920
media: uvcvideo: Override default flags
drm: zynqmp_dpsub: Fix an error handling path in zynqmp_dpsub_probe()
drm: zynqmp_kms: Fix AUX bus not getting unregistered
media: rcar-vin: Fix YUYV8_1X16 handling for CSI-2
media: rcar-csi2: Disable runtime_pm in probe error
media: rcar-csi2: Cleanup subdevice in remove()
media: renesas: vsp1: Fix _irqsave and _irq mix
media: renesas: vsp1: Store RPF partition configuration per RPF instance
drm/mediatek: Add missing plane settings when async update
drm/mediatek: Use 8-bit alpha in ETHDR
drm/mediatek: Fix XRGB setting error in OVL
drm/mediatek: Fix XRGB setting error in Mixer
drm/mediatek: Fix destination alpha error in OVL
drm/mediatek: Turn off the layers with zero width or height
drm/mediatek: Add OVL compatible name for MT8195
media: imx-jpeg: Drop initial source change event if capture has been setup
leds: trigger: Unregister sysfs attributes before calling deactivate()
drm/msm/dsi: set VIDEO_COMPRESSION_MODE_CTRL_WC
drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op
perf test: Make test_arm_callgraph_fp.sh more robust
perf pmus: Fixes always false when compare duplicates aliases
perf report: Fix condition in sort__sym_cmp()
drm/etnaviv: fix DMA direction handling for cached RW buffers
drm/qxl: Add check for drm_cvt_mode
Revert "leds: led-core: Fix refcount leak in of_led_get()"
drm/mediatek: Remove less-than-zero comparison of an unsigned value
ext4: fix infinite loop when replaying fast_commit
drm/mediatek/dp: switch to ->edid_read callback
drm/mediatek/dp: Fix spurious kfree()
media: venus: flush all buffers in output plane streamoff
perf intel-pt: Fix aux_watermark calculation for 64-bit size
perf intel-pt: Fix exclude_guest setting
mfd: rsmu: Split core code into separate module
mfd: omap-usb-tll: Use struct_size to allocate tll
xprtrdma: Fix rpcrdma_reqs_reset()
SUNRPC: avoid soft lockup when transmitting UDP to reachable server.
NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server
ext4: don't track ranges in fast_commit if inode has inlined data
ext4: avoid writing unitialized memory to disk in EA inodes
leds: flash: leds-qcom-flash: Test the correct variable in init
sparc64: Fix incorrect function signature and add prototype for prom_cif_init
SUNRPC: Fixup gss_status tracepoint error output
iio: Fix the sorting functionality in iio_gts_build_avail_time_table
PCI: Fix resource double counting on remove & rescan
PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode()
PCI: keystone: Don't enable BAR 0 for AM654x
PCI: keystone: Fix NULL pointer dereference in case of DT error in 
ks_pcie_setup_rc_app_regs()
PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()
scsi: ufs: mcq: Fix missing argument 'hba' in MCQ_OPR_OFFSET_n
clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock
clk: qcom: camcc-sc7280: Add parent dependency to all camera GDSCs
iio: frequency: adrf6780: rm clk provider include
KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3
KVM: PPC: Book3S HV: Fix the get_one_reg of SDAR
coresight: Fix ref leak when of_coresight_parse_endpoint() fails
RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE
ASoc: tas2781: Enable RCA-based playback without DSP firmware download
ASoC: cs35l56: Accept values greater than 0 as IRQ numbers
usb: typec-mux: nb7vpq904m: unregister typec switch on probe error and remove
RDMA/cache: Release GID table even if leak is detected
clk: qcom: gpucc-sm8350: Park RCG's clk source at XO during disable
clk: qcom: gcc-sa8775p: Update the GDSC wait_val fields and flags
clk: qcom: gpucc-sa8775p: Remove the CLK_IS_CRITICAL and ALWAYS_ON flags
clk: qcom: gpucc-sa8775p: Park RCG's clk source at XO during disable
clk: qcom: gpucc-sa8775p: Update wait_val fields for GPU GDSC's
interconnect: qcom: qcm2290: Fix mas_snoc_bimc RPM master ID
Input: qt1050 - handle CHIP_ID reading error
RDMA/mlx4: Fix truncated output warning in mad.c
RDMA/mlx4: Fix truncated output warning in alias_GUID.c
RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled
RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs
ASoC: qcom: Adjust issues in case of DT error in 
asoc_qcom_lpass_cpu_platform_probe()
scsi: lpfc: Fix a possible null pointer dereference
hwrng: core - Fix wrong quality calculation at hw rng registration
powerpc/prom: Add CPU info to hardware description string later
ASoC: max98088: Check for clk_prepare_enable() error
mtd: make mtd_test.c a separate module
RDMA/device: Return error earlier if port in not valid
Input: elan_i2c - do not leave interrupt disabled on suspend failure
ASoC: amd: Adjust error handling in case of absent codec device
PCI: endpoint: Clean up error handling in vpci_scan_bus()
PCI: endpoint: Fix error handling in epf_ntb_epc_cleanup()
vhost/vsock: always initialize seqpacket_allow
net: missing check virtio
nvmem: rockchip-otp: set add_legacy_fixed_of_cells config option
crypto: qat - extend scope of lock in adf_cfg_add_key_value_param()
clk: qcom: kpss-xcc: Return of_clk_add_hw_provider to transfer the error
clk: qcom: Park shared RCGs upon registration
clk: en7523: fix rate divider for slic and spi clocks
MIPS: Octeron: remove source file executable bit
PCI: qcom-ep: Disable resources unconditionally during PERST# assert
PCI: dwc: Fix index 0 incorrectly being interpreted as a free ATU slot
powerpc/xmon: Fix disassembly CPU feature checks
macintosh/therm_windtunnel: fix module unload.
RDMA/hns: Check atomic wr length
RDMA/hns: Fix unmatch exception handling when init eq table fails
RDMA/hns: Fix missing pagesize and alignment check in FRMR
RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
RDMA/hns: Fix undifined behavior caused by invalid max_sge
RDMA/hns: Fix insufficient extend DB for VFs.
iommu/vt-d: Fix identity map bounds in si_domain_init()
RDMA/core: Remove NULL check before dev_{put, hold}
RDMA: Fix netdev tracker in ib_device_set_netdev
bnxt_re: Fix imm_data endianness
netfilter: ctnetlink: use helper function to calculate expect ID
netfilter: nf_set_pipapo: fix initial map fill
ipvs: properly dereference pe in ip_vs_add_service
gve: Fix XDP TX completion handling when counters overflow
net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
ipv4: Fix incorrect TOS in route get reply
ipv4: Fix incorrect TOS in fibmatch route get reply
net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports
net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports
fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT
fs/ntfs3: Fix transform resident to nonresident for compressed files
fs/ntfs3: Deny getting attr data block in compressed frame
fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting
fs/ntfs3: Fix getting file type
fs/ntfs3: Add missing .dirty_folio in address_space_operations
pinctrl: rockchip: update rk3308 iomux routes
pinctrl: core: fix possible memory leak when pinctrl_enable() fails
pinctrl: single: fix possible memory leak when pinctrl_enable() fails
pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails
pinctrl: freescale: mxs: Fix refcount of child
fs/ntfs3: Replace inode_trylock with inode_lock
fs/ntfs3: Correct undo if ntfs_create_inode failed
fs/ntfs3: Drop stray '\' (backslash) in formatting string
fs/ntfs3: Fix field-spanning write in INDEX_HDR
pinctrl: renesas: r8a779g0: Fix CANFD5 suffix
pinctrl: renesas: r8a779g0: Fix FXR_TXEN[AB] suffixes
pinctrl: renesas: r8a779g0: Fix (H)SCIF1 suffixes
pinctrl: renesas: r8a779g0: Fix (H)SCIF3 suffixes
pinctrl: renesas: r8a779g0: Fix IRQ suffixes
pinctrl: renesas: r8a779g0: FIX PWM suffixes
pinctrl: renesas: r8a779g0: Fix TCLK suffixes
pinctrl: renesas: r8a779g0: Fix TPU suffixes
fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
fs/proc/task_mmu.c: add_to_pagemap: remove useless parameter addr
fs/proc/task_mmu: don't indicate PM_MMAP_EXCLUSIVE without PM_PRESENT
fs/proc/task_mmu: properly detect PM_MMAP_EXCLUSIVE per page of PMD-mapped THPs
nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro
rtc: interface: Add RTC offset to alarm after fix-up
fs/ntfs3: Fix the format of the "nocase" mount option
fs/ntfs3: Missed error return
fs/ntfs3: Keep runs for $MFT::$ATTR_DATA and $MFT::$ATTR_BITMAP
powerpc/8xx: fix size given to set_huge_pte_at()
s390/dasd: fix error checks in dasd_copy_pair_store()
sbitmap: use READ_ONCE to access map->word
sbitmap: fix io hung due to race on sbitmap_word::cleared
LoongArch: Check TIF_LOAD_WATCH to enable user space watchpoint
landlock: Don't lose track of restrictions on cred_transfer
hugetlb: force allocating surplus hugepages on mempolicy allowed nodes
mm/hugetlb: fix possible recursive locking detected warning
mm/mglru: fix div-by-zero in vmpressure_calc_level()
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
mm/mglru: fix overshooting shrinker memory
x86/efistub: Avoid returning EFI_SUCCESS on error
x86/efistub: Revert to heap allocated boot_params for PE entrypoint
exfat: fix potential deadlock on __exfat_get_dentry_set
dt-bindings: thermal: correct thermal zone node name limit
tick/broadcast: Make takeover of broadcast hrtimer reliable
net: netconsole: Disable target before netpoll cleanup
af_packet: Handle outgoing VLAN packets without hardware offloading
btrfs: fix extent map use-after-free when adding pages to compressed bio
kernel: rerun task_work while freezing in get_signal()
ipv4: fix source address selection with route leak
ipv6: take care of scope when choosing the src addr
NFSD: Support write delegations in LAYOUTGET
sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE 
tasks
fuse: verify {g,u}id mount options correctly
ata: libata-scsi: Fix offsets for the fixed format sense data
char: tpm: Fix possible memory leak in tpm_bios_measurements_open()
media: venus: fix use after free in vdec_close
ata: libata-scsi: Do not overwrite valid sense data when CK_COND=1
hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
ext2: Verify bitmap and itable block numbers before using them
io_uring/io-wq: limit retrying worker initialisation
drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
scsi: qla2xxx: Fix optrom version displayed in FDMI
drm/amd/display: Check for NULL pointer
apparmor: use kvfree_sensitive to free data->data
cifs: fix potential null pointer use in destroy_workqueue in init_cifs error 
path
cifs: fix reconnect with SMB1 UNIX Extensions
cifs: mount with "unix" mount option for SMB1 incorrectly handled
task_work: s/task_work_cancel()/task_work_cancel_func()/
task_work: Introduce task_work_cancel() again
udf: Avoid using corrupted block bitmap buffer
m68k: amiga: Turn off Warp1260 interrupts during boot
ext4: check dot and dotdot of dx_root before making dir indexed
ext4: make sure the first directory block is not a hole
io_uring: tighten task exit cancellations
trace/pid_list: Change gfp flags in pid_list_fill_irq()
selftests/landlock: Add cred_transfer test
wifi: mwifiex: Fix interface type change
wifi: rtw88: usb: Fix disconnection after beacon loss
drivers: soc: xilinx: check return status of get_api_version()
leds: ss4200: Convert PCIBIOS_* return codes to errnos
leds: mt6360: Fix memory leak in mt6360_init_isnk_properties()
media: imx-pxp: Fix ERR_PTR dereference in pxp_probe()
jbd2: make jbd2_journal_get_max_txn_bufs() internal
jbd2: precompute number of transaction descriptor blocks
jbd2: avoid infinite transaction commit loop
media: uvcvideo: Fix integer overflow calculating timestamp
KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked()
KVM: nVMX: Request immediate exit iff pending nested event needs injection
ALSA: ump: Don't update FB name for static blocks
ALSA: ump: Force 1 Group for MIDI1 FBs
ALSA: usb-audio: Fix microphone sound on HD webcam.
ALSA: usb-audio: Move HD Webcam quirk to the right place
ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
tools/memory-model: Fix bug in lock.cat
hwrng: amd - Convert PCIBIOS_* return codes to errnos
parisc: Fix warning at drivers/pci/msi/msi.h:121
PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN
PCI: dw-rockchip: Fix initial PERST# GPIO value
PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
PCI: loongson: Enable MSI in LS7A Root Complex
binder: fix hang of unregistered readers
dev/parport: fix the array out-of-bounds risk
hostfs: fix dev_t handling
efi/libstub: Zero initialize heap allocated struct screen_info
fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds
ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value
f2fs: fix to force buffered IO on inline_data inode
f2fs: fix to don't dirty inode for readonly filesystem
f2fs: fix return value of f2fs_convert_inline_inode()
f2fs: use meta inode for GC of atomic file
f2fs: use meta inode for GC of COW file
clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
ubi: eba: properly rollback inside self_check_eba
block: fix deadlock between sd_remove & sd_release
mm: fix old/young bit handling in the faulting path
decompress_bunzip2: fix rare decompression failure
kbuild: Fix '-S -c' in x86 stack protector scripts
ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare
ASoC: amd: yc: Support mic on Lenovo Thinkpad E16 Gen 2
kobject_uevent: Fix OOB access within zap_modalias_env()
gve: Fix an edge case for TSO skb validity check
ice: Add a per-VF limit on number of FDIR filters
devres: Fix devm_krealloc() wasting memory
devres: Fix memory leakage caused by driver API devm_free_percpu()
irqdomain: Fixed unbalanced fwnode get and put
irqchip/imx-irqsteer: Handle runtime power management correctly
mm/numa_balancing: teach mpol_to_str about the balancing mode
rtc: cmos: Fix return value of nvmem callbacks
scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE state
scsi: qla2xxx: During vport delete send async logout explicitly
scsi: qla2xxx: Unable to act on RSCN for port online
scsi: qla2xxx: Fix for possible memory corruption
scsi: qla2xxx: Use QP lock to search for bsg
scsi: qla2xxx: Reduce fabric scan duplicate code
scsi: qla2xxx: Fix flash read failure
scsi: qla2xxx: Complete command early within lock
scsi: qla2xxx: validate nvme_local_port correctly
perf: Fix event leak upon exit
perf: Fix event leak upon exec and file release
perf stat: Fix the hard-coded metrics calculation on the hybrid
perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR
perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
perf/x86/intel/pt: Fix topa_entry base length
perf/x86/intel/pt: Fix a topa_entry base address calculation
drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8
drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
drm/udl: Remove DRM_CONNECTOR_POLL_HPD
drm/dp_mst: Fix all mstb marked as not probed after suspend/resume
drm/amdgpu: reset vm state machine after gpu reset(vram lost)
drm/amd/amdgpu: Fix uninitialized variable warnings
drm/i915/dp: Reset intel_dp->link_trained before retraining the link
drm/i915/dp: Don't switch the LTTPR mode on an active link
rtc: isl1208: Fix return value of nvmem callbacks
rtc: abx80x: Fix return value of nvmem callback on read
watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
platform: mips: cpu_hwmon: Disable driver on unsupported hardware
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
selftests/sigaltstack: Fix ppc64 GCC build
dm-verity: fix dm_is_verity_target() when dm-verity is builtin
rbd: don't assume rbd_is_lock_owner() for exclusive mappings
remoteproc: stm32_rproc: Fix mailbox interrupts queuing
remoteproc: imx_rproc: Skip over memory region when node value is NULL
remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init
MIPS: dts: loongson: Add ISA node
MIPS: ip30: ip30-console: Add missing include
MIPS: dts: loongson: Fix GMAC phy node
MIPS: Loongson64: env: Hook up Loongsson-2K
MIPS: Loongson64: Remove memory node for builtin-dtb
MIPS: Loongson64: reset: Prioritise firmware service
MIPS: Loongson64: Test register availability before use
drm/etnaviv: don't block scheduler when GPU is still active
drm/panfrost: Mark simple_ondemand governor as softdep
rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait
rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings
lib/build_OID_registry: don't mention the full path of the script in output
video: logo: Drop full path of the input filename in generated file
Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables
Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591
minmax: scsi: fix mis-use of 'clamp()' in sr.c
mm/mglru: fix ineffective protection calculation
PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
f2fs: fix to truncate preallocated blocks in f2fs_file_open()
kdb: address -Wformat-security warnings
kdb: Use the passed prompt in kdb_position_cursor()
jfs: Fix array-index-out-of-bounds in diFree
dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels
phy: cadence-torrent: Check return value on register read
phy: zynqmp: Enable reference clock correctly
um: time-travel: fix time-travel-start option
um: time-travel: fix signal blocking race/hang
f2fs: fix start segno of large section
watchdog: rzg2l_wdt: Use pm_runtime_resume_and_get()
watchdog: rzg2l_wdt: Check return status of pm_runtime_put()
f2fs: fix to update user block counts in block_operations()
kbuild: avoid build error when single DTB is turned into composite DTB
selftests/bpf: fexit_sleep: Fix stack allocation for arm64
libbpf: Fix no-args func prototype BTF dumping syntax
af_unix: Disable MSG_OOB handling for sockets in sockmap/sockhash
dma: fix call order in dmam_free_coherent
bpf, events: Use prog to emit ksymbol event for main program
tools/resolve_btfids: Fix comparison of distinct pointer types warning in 
resolve_btfids
MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later
ipv4: Fix incorrect source address in Record Route option
net: bonding: correctly annotate RCU in bond_should_notify_peers()
ice: Fix recipe read procedure
netfilter: nft_set_pipapo_avx2: disable softinterrupts
tipc: Return non-zero value from tipc_udp_addr2str() on error
net: stmmac: Correct byte order of perfect_match
net: nexthop: Initialize all fields in dumped nexthops
bpf: Fix a segment issue when downgrading gso_size
mISDN: Fix a use after free in hfcmulti_tx()
apparmor: Fix null pointer deref when receiving skb during sock creation
powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
lirc: rc_dev_get_from_fd(): fix file leak
auxdisplay: ht16k33: Drop reference after LED registration
ASoC: SOF: imx8m: Fix DSP control regmap retrieval
spi: microchip-core: fix the issues in the isr
spi: microchip-core: defer asserting chip select until just before write to TX 
FIFO
spi: microchip-core: only disable SPI controller when register value change 
requires it
spi: microchip-core: fix init function not setting the master and motorola modes
spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer
nvme-pci: Fix the instructions for disabling power management
ASoC: sof: amd: fix for firmware reload failure in Vangogh platform
spi: spidev: add correct compatible for Rohm BH2228FV
ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable
ASoC: TAS2781: Fix tasdev_load_calibrated_data()
ceph: fix incorrect kmalloc size of pagevec mempool
s390/pci: Refactor arch_setup_msi_irqs()
s390/pci: Allow allocation of more than 1 MSI interrupt
s390/cpum_cf: Fix endless loop in CF_DIAG event stop
iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en
io_uring: fix io_match_task must_hold
nvme-pci: add missing condition check for existence of mapped data
fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT
md/raid0: don't free conf on raid0_run failure
md/raid1: don't free conf on raid0_run failure
io_uring: Fix probe of disabled operations
cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
cgroup/cpuset: Fix remote root partition creation problem
x86/syscall: Mark exit[_group] syscall handlers __noreturn
perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
md/raid5: recheck if reshape has finished with device_lock held
hwmon: (ltc2991) re-order conditions to fix off by one bug
arm64: smp: Fix missing IPI statistics
arm64: dts: qcom: sc7280: Remove CTS/RTS configuration
ARM: dts: qcom: msm8226-microsoft-common: Enable smbb explicitly
OPP: Fix missing cleanup on error in _opp_attach_genpd()
arm64: dts: qcom: sc8280xp-*: Remove thermal zone polling delays
arm64: dts: ti: k3-am62-main: Fix the reg-range for main_pktdma
arm64: dts: ti: k3-am62a-main: Fix the reg-range for main_pktdma
arm64: dts: ti: k3-am62p-main: Fix the reg-range for main_pktdma
arm64: dts: ti: k3-am62a7: Drop McASP AFIFOs
arm64: dts: ti: k3-am62p5: Drop McASP AFIFOs
arm64: dts: ti: k3-am62p5-sk: Fix pinmux for McASP1 TX
arm64: dts: qcom: sc7180-trogdor: Disable pwmleds node where unused
arm64: dts: mediatek: mt8192: Fix GPU thermal zone name for SVS
arm64: dts: mediatek: mt8183-pico6: Fix wake-on-X event node names
arm64: dts: renesas: r9a08g045: Add missing hypervisor virtual timer IRQ
cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons
wifi: mac80211: cancel multi-link reconf work on disconnect
wifi: ath11k: refactor setting country code logic
wifi: ath11k: restore country code during resume
net: ethernet: cortina: Restore TSO support
tcp: fix races in tcp_abort()
hns3: avoid linking objects into multiple modules
sched/core: Move preempt_model_*() helpers from sched.h to preempt.h
sched/core: Drop spinlocks on contention iff kernel is preemptible
net: dsa: ksz_common: Allow only up to two HSR HW offloaded ports for KSZ9477
libbpf: Skip base btf sanity checks
wifi: mac80211: add ieee80211_tdls_sta_link_id()
wifi: iwlwifi: fix iwl_mvm_get_valid_rx_ant()
wifi: ath12k: advertise driver capabilities for MBSSID and EMA
riscv, bpf: Fix out-of-bounds issue when preparing trampoline image
perf/x86/amd/uncore: Avoid PMU registration if counters are unavailable
perf/x86/amd/uncore: Fix DF and UMC domain identification
NFSD: Fix nfsdcld warning
net: page_pool: fix warning code
bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
Bluetooth: hci_event: Set QoS encryption from BIGInfo report
Bluetooth: hci_core, hci_sync: cleanup struct discovery_state
Bluetooth: Fix usage of __hci_cmd_sync_status
tcp: Don't access uninit tcp_rsk(req)->ao_keyid in tcp_create_openreq_child().
drm/panel: ilitek-ili9882t: If prepare fails, disable GPIO before regulators
drm/panel: ilitek-ili9882t: Check for errors on the NOP in prepare()
drm/amd/display: Move 'struct scaler_data' off stack
media: i2c: hi846: Fix V4L2_SUBDEV_FORMAT_TRY get_selection()
drm/msm/dpu: fix encoder irq wait skip
drm/msm/dpu: drop duplicate drm formats from wb2_formats arrays
drm/msm/dp: fix runtime_pm handling in dp_wait_hpd_asserted
perf maps: Switch from rbtree to lazily sorted array for addresses
perf maps: Fix use after free in __maps__fixup_overlap_and_insert
drm/bridge: samsung-dsim: Set P divider based on min/max of fin pll
drm/i915/psr: Print Panel Replay status instead of frame lock status
drm/mediatek: Set DRM mode configs accordingly
drm/msm/dsi: set video mode widebus enable bit when widebus is enabled
tools/perf: Fix the string match for "/tmp/perf-$PID.map" files in dso__load
drm/amd/display: Add null check before access structs
perf stat: Fix a segfault with --per-cluster --metric-only
nfs: pass explicit offset/count to trace events
PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in 
pci_epf_test_core_init()
PCI: tegra194: Set EP alignment restriction for inbound ATU
riscv: smp: fail booting up smp if inconsistent vlen is detected
clk: meson: s4: fix fixed_pll_dco clock
clk: meson: s4: fix pwm_j_div parent clock
usb: typec-mux: ptn36502: unregister typec switch on probe error and remove
mtd: spi-nor: winbond: fix w25q128 regression
iommufd/selftest: Fix dirty bitmap tests with u8 bitmaps
iommufd/selftest: Fix iommufd_test_dirty() to handle <u8 bitmaps
iommufd/selftest: Add tests for <= u8 bitmap sizes
iommufd/selftest: Fix tests to use MOCK_PAGE_SIZE based buffer sizes
iommufd/iova_bitmap: Check iova_bitmap_done() after set ahead
clk: qcom: gcc-x1e80100: Fix halt_check for all pipe clocks
dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume
kvm: s390: Reject memory region operations for ucontrol VMs
eeprom: ee1004: Call i2c_new_scanned_device to instantiate thermal sensor
clk: qcom: gcc-x1e80100: Set parent rate for USB3 sec and tert PHY pipe clks
workqueue: Introduce from_work() helper for cleaner callback declarations
RDMA/hns: Fix mbx timing out before CMD execution is completed
crypto: mxs-dcp - Ensure payload is zero when using key slot
RDMA/mana_ib: Enable RoCE on port 1
RDMA/mana_ib: set node_guid
rtc: tps6594: Fix memleak in probe
selftests/damon/access_memory: use user-defined region size
md-cluster: fix hanging issue while a new disk adding
power: supply: ab8500: Fix error handling when calling 
iio_read_channel_processed()
power: supply: ingenic: Fix some error handling paths in 
ingenic_battery_get_property()
remoteproc: mediatek: Don't attempt to remap l1tcm memory if missing
remoteproc: k3-r5: Fix IPC-only mode detection
mailbox: imx: fix TXDB_V2 channel race condition
mailbox: mtk-cmdq: Move devm_mbox_controller_register() after 
devm_pm_runtime_enable()
mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit 
machines
mm/huge_memory: avoid PMD-size page cache if needed
thermal/drivers/broadcom: Fix race between removal and clock disable
workqueue: Always queue work items to the newest PWQ for order workqueues
ipv6: fix source address selection with route leak
drm/xe: Use write-back caching mode for system memory on DGFX
md/raid5: fix spares errors about rcu usage
media: stm32: dcmipp: correct error handling in dcmipp_create_subdevs
tpm_tis_spi: add missing attpm20p SPI device ID entry
sysctl: always initialize i_uid/i_gid
media: i2c: Kconfig: Fix missing firmware upload config select
genirq: Set IRQF_COND_ONESHOT in request_irq()
cpufreq: qcom-nvmem: fix memory leaks in probe error paths
leds: triggers: Flush pending brightness before activating trigger
media: i2c: alvium: Move V4L2_CID_GAIN to V4L2_CID_ANALOG_GAIN
KVM: PPC: Book3S HV nestedv2: Fix doorbell emulation
KVM: PPC: Book3S HV nestedv2: Add DPDES support in helper library for Guest 
state buffer
KVM: nVMX: Add a helper to get highest pending from Posted Interrupt vector
KVM: nVMX: Check for pending posted interrupts when looking for nested events
ALSA: hda/realtek: cs35l41: Fixup remaining asus strix models
fbdev: vesafb: Detect VGA compatibility from screen info's VESA attributes
drm/fbdev-dma: Fix framebuffer mode for big endian devices
xhci: Apply XHCI_RESET_TO_DEFAULT quirk to TGL
dmaengine: fsl-edma: clean up unused "fsl,imx8qm-adma" compatible string
dmaengine: fsl-edma: change the memory access from local into remote mode in 
i.MX 8QM
clk: samsung: fix getting Exynos4 fin_pll rate from external clocks
bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin format
arch: um: rust: Use the generated target.json again
f2fs: fix null reference error when checking end of zone
selftests: forwarding: skip if kernel not support setting bridge fdb learning 
limit
xsk: Require XDP_UMEM_TX_METADATA_LEN to actuate tx_metadata_len
drm/xe/exec: Fix minor bug related to xe_sync_entry_cleanup
thermal: trip: Split thermal_zone_device_set_mode()
apparmor: unpack transition table if dfa is not present
i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1
selinux,smack: remove the capability checks in the removexattr hooks
selftests/bpf: DENYLIST.aarch64: Skip fexit_sleep again
nilfs2: handle inconsistent state in nilfs_btnode_create_block()
UBUNTU: Upstream stable to v6.6.44, v6.10.3

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: linux (Ubuntu Noble)
     Importance: Medium
     Assignee: Portia Stephens (portias)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
       Status: Confirmed => Invalid

** Changed in: linux (Ubuntu Noble)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Noble)
       Status: New => In Progress

** Changed in: linux (Ubuntu Noble)
     Assignee: (unassigned) => Portia Stephens (portias)

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         upstream stable patchset 2024-09-30
+ 
+                 Ported from the following upstream stable releases:
+                         v6.6.44, v6.10.3
+ 
         from git://git.kernel.org/
+ 
+ powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC
+ spi: spi-microchip-core: Fix the number of chip selects supported
+ spi: atmel-quadspi: Add missing check for clk_prepare
+ EDAC, i10nm: make skx_common.o a separate module
+ rcu/tasks: Fix stale task snaphot for Tasks Trace
+ platform/chrome: cros_ec_debugfs: fix wrong EC message version
+ ubd: refactor the interrupt handler
+ ubd: untagle discard vs write zeroes not support handling
+ block: initialize integrity buffer to zero before writing it to media
+ x86/kconfig: Add as-instr64 macro to properly evaluate AS_WRUSS
+ hfsplus: fix to avoid false alarm of circular locking
+ x86/of: Return consistent error type from x86_of_pci_irq_enable()
+ x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling
+ x86/pci/xen: Fix PCIBIOS_* return code handling
+ x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos
+ cgroup/cpuset: Prevent UAF in proc_cpuset_show()
+ hwmon: (adt7475) Fix default duty on fan is disabled
+ block: Call .limit_depth() after .hctx has been set
+ block/mq-deadline: Fix the tag reservation code
+ md: Don't wait for MD_RECOVERY_NEEDED for HOT_REMOVE_DISK ioctl
+ pwm: stm32: Always do lazy disabling
+ nvmet-auth: fix nvmet_auth hash error handling
+ drm/meson: fix canvas release in bind function
+ pwm: atmel-tcb: Fix race condition and convert to guards
+ hwmon: (max6697) Fix underflow when writing limit attributes
+ hwmon: (max6697) Fix swapped temp{1,8} critical alarms
+ arm64: dts: qcom: sc8180x: Correct PCIe slave ports
+ arm64: dts: qcom: sc8180x: add power-domain to UFS PHY
+ arm64: dts: qcom: sdm845: add power-domain to UFS PHY
+ arm64: dts: qcom: sm6115: add power-domain to UFS PHY
+ arm64: dts: qcom: sm6350: add power-domain to UFS PHY
+ arm64: dts: qcom: sm8250: add power-domain to UFS PHY
+ arm64: dts: qcom: sm8350: add power-domain to UFS PHY
+ arm64: dts: qcom: sm8450: add power-domain to UFS PHY
+ arm64: dts: qcom: msm8996-xiaomi-common: drop excton from the USB PHY
+ arm64: dts: qcom: sdm850-lenovo-yoga-c630: fix IPA firmware path
+ arm64: dts: qcom: msm8998: enable adreno_smmu by default
+ soc: qcom: pmic_glink: Handle the return value of pmic_glink_init
+ soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() 
callers
+ arm64: dts: rockchip: Add sdmmc related properties on rk3308-rock-pi-s
+ arm64: dts: rockchip: Add pinctrl for UART0 to rk3308-rock-pi-s
+ arm64: dts: rockchip: Add mdio and ethernet-phy nodes to rk3308-rock-pi-s
+ arm64: dts: rockchip: Update WIFi/BT related nodes on rk3308-rock-pi-s
+ arm64: dts: qcom: msm8996: specify UFS core_clk frequencies
+ arm64: dts: qcom: sa8775p: mark ethernet devices as DMA-coherent
+ soc: xilinx: rename cpu_number1 to dummy_cpu_number
+ ARM: dts: sunxi: remove duplicated entries in makefile
+ ARM: dts: stm32: Add arm,no-tick-in-suspend to STM32MP15xx STGEN timer
+ arm64: dts: qcom: qrb4210-rb2: make L9A always-on
+ cpufreq: ti-cpufreq: Handle deferred probe with dev_err_probe()
+ OPP: ti: Fix ti_opp_supply_probe wrong return values
+ memory: fsl_ifc: Make FSL_IFC config visible and selectable
+ arm64: dts: ti: k3-am62x: Drop McASP AFIFOs
+ arm64: dts: ti: k3-am625-beagleplay: Drop McASP AFIFOs
+ arm64: dts: ti: k3-am62-verdin: Drop McASP AFIFOs
+ arm64: dts: qcom: qdu1000: Add secure qfprom node
+ soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove
+ soc: qcom: pdr: protect locator_addr with the main mutex
+ soc: qcom: pdr: fix parsing of domains lists
+ arm64: dts: rockchip: Increase VOP clk rate on RK3328
+ arm64: dts: amlogic: sm1: fix spdif compatibles
+ ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode
+ ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset
+ ARM: dts: imx6qdl-kontron-samx6i: fix board reset
+ ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects
+ ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity
+ arm64: dts: mediatek: mt8195: Fix GPU thermal zone name for SVS
+ arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property
+ arm64: dts: mediatek: mt8192-asurada: Add off-on-delay-us for pp3300_mipibrdg
+ arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux
+ arm64: dts: mediatek: mt8183-kukui: Fix the value of `dlg,jack-det-rate` 
mismatch
+ arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625
+ arm64: dts: amlogic: gx: correct hdmi clocks
+ arm64: dts: amlogic: add power domain to hdmitx
+ arm64: dts: amlogic: setup hdmi system clock
+ arm64: dts: rockchip: Drop invalid mic-in-differential on rk3568-rock-3a
+ arm64: dts: rockchip: Fix mic-in-differential usage on rk3566-roc-pc
+ arm64: dts: rockchip: Fix mic-in-differential usage on rk3568-evb1-v10
+ arm64: dts: renesas: r8a779a0: Add missing hypervisor virtual timer IRQ
+ arm64: dts: renesas: r8a779f0: Add missing hypervisor virtual timer IRQ
+ arm64: dts: renesas: r8a779g0: Add missing hypervisor virtual timer IRQ
+ arm64: dts: renesas: r9a07g043u: Add missing hypervisor virtual timer IRQ
+ arm64: dts: renesas: r9a07g044: Add missing hypervisor virtual timer IRQ
+ arm64: dts: renesas: r9a07g054: Add missing hypervisor virtual timer IRQ
+ m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages
+ arm64: dts: imx8mp: Fix pgc_mlmix location
+ arm64: dts: imx8mp: add HDMI power-domains
+ arm64: dts: imx8mp: Fix pgc vpu locations
+ x86/xen: Convert comma to semicolon
+ arm64: dts: rockchip: Add missing power-domains for rk356x vop_mmu
+ arm64: dts: rockchip: fix regulator name for Lunzn Fastrhino R6xS
+ arm64: dts: rockchip: fix usb regulator for Lunzn Fastrhino R6xS
+ arm64: dts: rockchip: fix pmu_io supply for Lunzn Fastrhino R6xS
+ arm64: dts: rockchip: remove unused usb2 nodes for Lunzn Fastrhino R6xS
+ arm64: dts: rockchip: disable display subsystem for Lunzn Fastrhino R6xS
+ arm64: dts: rockchip: fixes PHY reset for Lunzn Fastrhino R68S
+ arm64: dts: qcom: sm6350: Add missing qcom,non-secure-domain property
+ cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC 
systems
+ m68k: cmpxchg: Fix return value for default case in __arch_xchg()
+ ARM: spitz: fix GPIO assignment for backlight
+ vmlinux.lds.h: catch .bss..L* sections into BSS")
+ firmware: turris-mox-rwtm: Do not complete if there are no waiters
+ firmware: turris-mox-rwtm: Fix checking return value of 
wait_for_completion_timeout()
+ firmware: turris-mox-rwtm: Initialize completion before mailbox
+ wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device
+ wifi: ath12k: Correct 6 GHz frequency value in rx status
+ wifi: ath12k: Fix tx completion ring (WBM2SW) setup failure
+ bpftool: Un-const bpf_func_info to fix it for llvm 17 and newer
+ selftests/bpf: Fix prog numbers in test_sockmap
+ net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP
+ wifi: ath12k: change DMA direction while mapping reinjected packets
+ wifi: ath12k: fix invalid memory access while processing fragmented packets
+ wifi: ath12k: fix firmware crash during reo reinject
+ wifi: ath11k: fix wrong definition of CE ring's base address
+ wifi: ath12k: fix wrong definition of CE ring's base address
+ tcp: add tcp_done_with_error() helper
+ tcp: fix race in tcp_write_err()
+ tcp: fix races in tcp_v[46]_err()
+ net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when 
CONFIG_ARCH_NO_SG_CHAIN is defined
+ selftests/bpf: Check length of recv in test_sockmap
+ udf: Fix lock ordering in udf_evict_inode()
+ lib: objagg: Fix general protection fault
+ mlxsw: spectrum_acl_erp: Fix object nesting warning
+ mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors
+ perf/x86: Serialize set_attr_rdpmc()
+ jump_label: Fix concurrency issues in static_key_slow_dec()
+ wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers
+ wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()
+ wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
+ udf: Fix bogus checksum computation in udf_rename()
+ net: fec: Refactor: #define magic constants
+ net: fec: Fix FEC_ECR_EN1588 being cleared on link-down
+ libbpf: Checking the btf_type kind when fixing variable offsets
+ xfrm: Fix unregister netdevice hang on hardware offload.
+ ipvs: Avoid unnecessary calls to skb_is_gso_sctp
+ netfilter: nf_tables: rise cap on SELinux secmark context
+ wifi: rtw89: 8852b: fix definition of KIP register number
+ wifi: rtl8xxxu: 8188f: Limit TX power index
+ xfrm: Export symbol xfrm_dev_state_delete.
+ bpftool: Mount bpffs when pinmaps path not under the bpffs
+ perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation
+ perf: Fix perf_aux_size() for greater-than 32-bit size
+ perf: Prevent passing zero nr_pages to rb_alloc_aux()
+ perf: Fix default aux_watermark calculation
+ perf/x86/intel/cstate: Fix Alderlake/Raptorlake/Meteorlake
+ wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
+ xfrm: fix netdev reference count imbalance
+ xfrm: call xfrm_dev_policy_delete when kill policy
+ wifi: virt_wifi: avoid reporting connection success with wrong SSID
+ gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey
+ wifi: virt_wifi: don't use strlen() in const context
+ locking/rwsem: Add __always_inline annotation to __down_write_common() and 
inlined callers
+ selftests/bpf: Close fd in error path in drop_on_reuseport
+ selftests/bpf: Null checks for links in bpf_tcp_ca
+ selftests/bpf: Close obj in error path in xdp_adjust_tail
+ selftests/resctrl: Convert perror() to ksft_perror() or ksft_print_msg()
+ selftests/resctrl: Fix closing IMC fds on error and open-code R+W instead of 
loops
+ bpf: annotate BTF show functions with __printf
+ bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
+ bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o
+ bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT
+ selftests: forwarding: devlink_lib: Wait for udev events after reloading
+ Bluetooth: hci_bcm4377: Use correct unit for timeouts
+ Bluetooth: btintel: Refactor btintel_set_ppag()
+ Bluetooth: btnxpuart: Add handling for boot-signature timeout errors
+ xdp: fix invalid wait context of page_pool_destroy()
+ net: bridge: mst: Check vlan state for egress decision
+ drm/rockchip: vop2: Fix the port mux of VP2
+ drm/arm/komeda: Fix komeda probe failing if there are no links in the 
secondary pipeline
+ drm/amdkfd: Fix CU Masking for GFX 9.4.3
+ drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq()
+ drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_generic_write_seq()
+ drm/amd/pm: Fix aldebaran pcie speed reporting
+ drm/amdgpu: Fix memory range calculation
+ drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit
+ drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1
+ drm/panel: himax-hx8394: Handle errors from mipi_dsi_dcs_set_display_on() 
better
+ drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators
+ drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare()
+ drm/bridge: Fixed a DP link training bug
+ drm/bridge: it6505: fix hibernate to resume no display issue
+ media: pci: ivtv: Add check for DMA map result
+ media: imon: Fix race getting ictx->lock
+ media: i2c: Fix imx412 exposure control
+ media: v4l: async: Fix NULL pointer dereference in adding ancillary links
+ s390/mm: Convert make_page_secure to use a folio
+ s390/mm: Convert gmap_make_secure to use a folio
+ s390/uv: Don't call folio_wait_writeback() without a folio reference
+ media: mediatek: vcodec: Handle invalid decoder vsi
+ x86/shstk: Make return uprobe work with shadow stack
+ ipmi: ssif_bmc: prevent integer overflow on 32bit systems
+ saa7134: Unchecked i2c_transfer function result fixed
+ media: i2c: imx219: fix msr access command sequence
+ media: uvcvideo: Disable autosuspend for Insta360 Link
+ media: uvcvideo: Quirk for invalid dev_sof in Logitech C922
+ media: uvcvideo: Add quirk for invalid dev_sof in Logitech C920
+ media: uvcvideo: Override default flags
+ drm: zynqmp_dpsub: Fix an error handling path in zynqmp_dpsub_probe()
+ drm: zynqmp_kms: Fix AUX bus not getting unregistered
+ media: rcar-vin: Fix YUYV8_1X16 handling for CSI-2
+ media: rcar-csi2: Disable runtime_pm in probe error
+ media: rcar-csi2: Cleanup subdevice in remove()
+ media: renesas: vsp1: Fix _irqsave and _irq mix
+ media: renesas: vsp1: Store RPF partition configuration per RPF instance
+ drm/mediatek: Add missing plane settings when async update
+ drm/mediatek: Use 8-bit alpha in ETHDR
+ drm/mediatek: Fix XRGB setting error in OVL
+ drm/mediatek: Fix XRGB setting error in Mixer
+ drm/mediatek: Fix destination alpha error in OVL
+ drm/mediatek: Turn off the layers with zero width or height
+ drm/mediatek: Add OVL compatible name for MT8195
+ media: imx-jpeg: Drop initial source change event if capture has been setup
+ leds: trigger: Unregister sysfs attributes before calling deactivate()
+ drm/msm/dsi: set VIDEO_COMPRESSION_MODE_CTRL_WC
+ drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op
+ perf test: Make test_arm_callgraph_fp.sh more robust
+ perf pmus: Fixes always false when compare duplicates aliases
+ perf report: Fix condition in sort__sym_cmp()
+ drm/etnaviv: fix DMA direction handling for cached RW buffers
+ drm/qxl: Add check for drm_cvt_mode
+ Revert "leds: led-core: Fix refcount leak in of_led_get()"
+ drm/mediatek: Remove less-than-zero comparison of an unsigned value
+ ext4: fix infinite loop when replaying fast_commit
+ drm/mediatek/dp: switch to ->edid_read callback
+ drm/mediatek/dp: Fix spurious kfree()
+ media: venus: flush all buffers in output plane streamoff
+ perf intel-pt: Fix aux_watermark calculation for 64-bit size
+ perf intel-pt: Fix exclude_guest setting
+ mfd: rsmu: Split core code into separate module
+ mfd: omap-usb-tll: Use struct_size to allocate tll
+ xprtrdma: Fix rpcrdma_reqs_reset()
+ SUNRPC: avoid soft lockup when transmitting UDP to reachable server.
+ NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server
+ ext4: don't track ranges in fast_commit if inode has inlined data
+ ext4: avoid writing unitialized memory to disk in EA inodes
+ leds: flash: leds-qcom-flash: Test the correct variable in init
+ sparc64: Fix incorrect function signature and add prototype for prom_cif_init
+ SUNRPC: Fixup gss_status tracepoint error output
+ iio: Fix the sorting functionality in iio_gts_build_avail_time_table
+ PCI: Fix resource double counting on remove & rescan
+ PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode()
+ PCI: keystone: Don't enable BAR 0 for AM654x
+ PCI: keystone: Fix NULL pointer dereference in case of DT error in 
ks_pcie_setup_rc_app_regs()
+ PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()
+ scsi: ufs: mcq: Fix missing argument 'hba' in MCQ_OPR_OFFSET_n
+ clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock
+ clk: qcom: camcc-sc7280: Add parent dependency to all camera GDSCs
+ iio: frequency: adrf6780: rm clk provider include
+ KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3
+ KVM: PPC: Book3S HV: Fix the get_one_reg of SDAR
+ coresight: Fix ref leak when of_coresight_parse_endpoint() fails
+ RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE
+ ASoc: tas2781: Enable RCA-based playback without DSP firmware download
+ ASoC: cs35l56: Accept values greater than 0 as IRQ numbers
+ usb: typec-mux: nb7vpq904m: unregister typec switch on probe error and remove
+ RDMA/cache: Release GID table even if leak is detected
+ clk: qcom: gpucc-sm8350: Park RCG's clk source at XO during disable
+ clk: qcom: gcc-sa8775p: Update the GDSC wait_val fields and flags
+ clk: qcom: gpucc-sa8775p: Remove the CLK_IS_CRITICAL and ALWAYS_ON flags
+ clk: qcom: gpucc-sa8775p: Park RCG's clk source at XO during disable
+ clk: qcom: gpucc-sa8775p: Update wait_val fields for GPU GDSC's
+ interconnect: qcom: qcm2290: Fix mas_snoc_bimc RPM master ID
+ Input: qt1050 - handle CHIP_ID reading error
+ RDMA/mlx4: Fix truncated output warning in mad.c
+ RDMA/mlx4: Fix truncated output warning in alias_GUID.c
+ RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled
+ RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs
+ ASoC: qcom: Adjust issues in case of DT error in 
asoc_qcom_lpass_cpu_platform_probe()
+ scsi: lpfc: Fix a possible null pointer dereference
+ hwrng: core - Fix wrong quality calculation at hw rng registration
+ powerpc/prom: Add CPU info to hardware description string later
+ ASoC: max98088: Check for clk_prepare_enable() error
+ mtd: make mtd_test.c a separate module
+ RDMA/device: Return error earlier if port in not valid
+ Input: elan_i2c - do not leave interrupt disabled on suspend failure
+ ASoC: amd: Adjust error handling in case of absent codec device
+ PCI: endpoint: Clean up error handling in vpci_scan_bus()
+ PCI: endpoint: Fix error handling in epf_ntb_epc_cleanup()
+ vhost/vsock: always initialize seqpacket_allow
+ net: missing check virtio
+ nvmem: rockchip-otp: set add_legacy_fixed_of_cells config option
+ crypto: qat - extend scope of lock in adf_cfg_add_key_value_param()
+ clk: qcom: kpss-xcc: Return of_clk_add_hw_provider to transfer the error
+ clk: qcom: Park shared RCGs upon registration
+ clk: en7523: fix rate divider for slic and spi clocks
+ MIPS: Octeron: remove source file executable bit
+ PCI: qcom-ep: Disable resources unconditionally during PERST# assert
+ PCI: dwc: Fix index 0 incorrectly being interpreted as a free ATU slot
+ powerpc/xmon: Fix disassembly CPU feature checks
+ macintosh/therm_windtunnel: fix module unload.
+ RDMA/hns: Check atomic wr length
+ RDMA/hns: Fix unmatch exception handling when init eq table fails
+ RDMA/hns: Fix missing pagesize and alignment check in FRMR
+ RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
+ RDMA/hns: Fix undifined behavior caused by invalid max_sge
+ RDMA/hns: Fix insufficient extend DB for VFs.
+ iommu/vt-d: Fix identity map bounds in si_domain_init()
+ RDMA/core: Remove NULL check before dev_{put, hold}
+ RDMA: Fix netdev tracker in ib_device_set_netdev
+ bnxt_re: Fix imm_data endianness
+ netfilter: ctnetlink: use helper function to calculate expect ID
+ netfilter: nf_set_pipapo: fix initial map fill
+ ipvs: properly dereference pe in ip_vs_add_service
+ gve: Fix XDP TX completion handling when counters overflow
+ net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
+ ipv4: Fix incorrect TOS in route get reply
+ ipv4: Fix incorrect TOS in fibmatch route get reply
+ net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports
+ net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports
+ fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT
+ fs/ntfs3: Fix transform resident to nonresident for compressed files
+ fs/ntfs3: Deny getting attr data block in compressed frame
+ fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting
+ fs/ntfs3: Fix getting file type
+ fs/ntfs3: Add missing .dirty_folio in address_space_operations
+ pinctrl: rockchip: update rk3308 iomux routes
+ pinctrl: core: fix possible memory leak when pinctrl_enable() fails
+ pinctrl: single: fix possible memory leak when pinctrl_enable() fails
+ pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails
+ pinctrl: freescale: mxs: Fix refcount of child
+ fs/ntfs3: Replace inode_trylock with inode_lock
+ fs/ntfs3: Correct undo if ntfs_create_inode failed
+ fs/ntfs3: Drop stray '\' (backslash) in formatting string
+ fs/ntfs3: Fix field-spanning write in INDEX_HDR
+ pinctrl: renesas: r8a779g0: Fix CANFD5 suffix
+ pinctrl: renesas: r8a779g0: Fix FXR_TXEN[AB] suffixes
+ pinctrl: renesas: r8a779g0: Fix (H)SCIF1 suffixes
+ pinctrl: renesas: r8a779g0: Fix (H)SCIF3 suffixes
+ pinctrl: renesas: r8a779g0: Fix IRQ suffixes
+ pinctrl: renesas: r8a779g0: FIX PWM suffixes
+ pinctrl: renesas: r8a779g0: Fix TCLK suffixes
+ pinctrl: renesas: r8a779g0: Fix TPU suffixes
+ fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
+ fs/proc/task_mmu.c: add_to_pagemap: remove useless parameter addr
+ fs/proc/task_mmu: don't indicate PM_MMAP_EXCLUSIVE without PM_PRESENT
+ fs/proc/task_mmu: properly detect PM_MMAP_EXCLUSIVE per page of PMD-mapped 
THPs
+ nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro
+ rtc: interface: Add RTC offset to alarm after fix-up
+ fs/ntfs3: Fix the format of the "nocase" mount option
+ fs/ntfs3: Missed error return
+ fs/ntfs3: Keep runs for $MFT::$ATTR_DATA and $MFT::$ATTR_BITMAP
+ powerpc/8xx: fix size given to set_huge_pte_at()
+ s390/dasd: fix error checks in dasd_copy_pair_store()
+ sbitmap: use READ_ONCE to access map->word
+ sbitmap: fix io hung due to race on sbitmap_word::cleared
+ LoongArch: Check TIF_LOAD_WATCH to enable user space watchpoint
+ landlock: Don't lose track of restrictions on cred_transfer
+ hugetlb: force allocating surplus hugepages on mempolicy allowed nodes
+ mm/hugetlb: fix possible recursive locking detected warning
+ mm/mglru: fix div-by-zero in vmpressure_calc_level()
+ mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
+ mm/mglru: fix overshooting shrinker memory
+ x86/efistub: Avoid returning EFI_SUCCESS on error
+ x86/efistub: Revert to heap allocated boot_params for PE entrypoint
+ exfat: fix potential deadlock on __exfat_get_dentry_set
+ dt-bindings: thermal: correct thermal zone node name limit
+ tick/broadcast: Make takeover of broadcast hrtimer reliable
+ net: netconsole: Disable target before netpoll cleanup
+ af_packet: Handle outgoing VLAN packets without hardware offloading
+ btrfs: fix extent map use-after-free when adding pages to compressed bio
+ kernel: rerun task_work while freezing in get_signal()
+ ipv4: fix source address selection with route leak
+ ipv6: take care of scope when choosing the src addr
+ NFSD: Support write delegations in LAYOUTGET
+ sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE 
tasks
+ fuse: verify {g,u}id mount options correctly
+ ata: libata-scsi: Fix offsets for the fixed format sense data
+ char: tpm: Fix possible memory leak in tpm_bios_measurements_open()
+ media: venus: fix use after free in vdec_close
+ ata: libata-scsi: Do not overwrite valid sense data when CK_COND=1
+ hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
+ ext2: Verify bitmap and itable block numbers before using them
+ io_uring/io-wq: limit retrying worker initialisation
+ drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
+ drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
+ scsi: qla2xxx: Fix optrom version displayed in FDMI
+ drm/amd/display: Check for NULL pointer
+ apparmor: use kvfree_sensitive to free data->data
+ cifs: fix potential null pointer use in destroy_workqueue in init_cifs error 
path
+ cifs: fix reconnect with SMB1 UNIX Extensions
+ cifs: mount with "unix" mount option for SMB1 incorrectly handled
+ task_work: s/task_work_cancel()/task_work_cancel_func()/
+ task_work: Introduce task_work_cancel() again
+ udf: Avoid using corrupted block bitmap buffer
+ m68k: amiga: Turn off Warp1260 interrupts during boot
+ ext4: check dot and dotdot of dx_root before making dir indexed
+ ext4: make sure the first directory block is not a hole
+ io_uring: tighten task exit cancellations
+ trace/pid_list: Change gfp flags in pid_list_fill_irq()
+ selftests/landlock: Add cred_transfer test
+ wifi: mwifiex: Fix interface type change
+ wifi: rtw88: usb: Fix disconnection after beacon loss
+ drivers: soc: xilinx: check return status of get_api_version()
+ leds: ss4200: Convert PCIBIOS_* return codes to errnos
+ leds: mt6360: Fix memory leak in mt6360_init_isnk_properties()
+ media: imx-pxp: Fix ERR_PTR dereference in pxp_probe()
+ jbd2: make jbd2_journal_get_max_txn_bufs() internal
+ jbd2: precompute number of transaction descriptor blocks
+ jbd2: avoid infinite transaction commit loop
+ media: uvcvideo: Fix integer overflow calculating timestamp
+ KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked()
+ KVM: nVMX: Request immediate exit iff pending nested event needs injection
+ ALSA: ump: Don't update FB name for static blocks
+ ALSA: ump: Force 1 Group for MIDI1 FBs
+ ALSA: usb-audio: Fix microphone sound on HD webcam.
+ ALSA: usb-audio: Move HD Webcam quirk to the right place
+ ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
+ tools/memory-model: Fix bug in lock.cat
+ hwrng: amd - Convert PCIBIOS_* return codes to errnos
+ parisc: Fix warning at drivers/pci/msi/msi.h:121
+ PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN
+ PCI: dw-rockchip: Fix initial PERST# GPIO value
+ PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
+ PCI: loongson: Enable MSI in LS7A Root Complex
+ binder: fix hang of unregistered readers
+ dev/parport: fix the array out-of-bounds risk
+ hostfs: fix dev_t handling
+ efi/libstub: Zero initialize heap allocated struct screen_info
+ fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
+ scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds
+ ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value
+ f2fs: fix to force buffered IO on inline_data inode
+ f2fs: fix to don't dirty inode for readonly filesystem
+ f2fs: fix return value of f2fs_convert_inline_inode()
+ f2fs: use meta inode for GC of atomic file
+ f2fs: use meta inode for GC of COW file
+ clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
+ ubi: eba: properly rollback inside self_check_eba
+ block: fix deadlock between sd_remove & sd_release
+ mm: fix old/young bit handling in the faulting path
+ decompress_bunzip2: fix rare decompression failure
+ kbuild: Fix '-S -c' in x86 stack protector scripts
+ ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare
+ ASoC: amd: yc: Support mic on Lenovo Thinkpad E16 Gen 2
+ kobject_uevent: Fix OOB access within zap_modalias_env()
+ gve: Fix an edge case for TSO skb validity check
+ ice: Add a per-VF limit on number of FDIR filters
+ devres: Fix devm_krealloc() wasting memory
+ devres: Fix memory leakage caused by driver API devm_free_percpu()
+ irqdomain: Fixed unbalanced fwnode get and put
+ irqchip/imx-irqsteer: Handle runtime power management correctly
+ mm/numa_balancing: teach mpol_to_str about the balancing mode
+ rtc: cmos: Fix return value of nvmem callbacks
+ scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE 
state
+ scsi: qla2xxx: During vport delete send async logout explicitly
+ scsi: qla2xxx: Unable to act on RSCN for port online
+ scsi: qla2xxx: Fix for possible memory corruption
+ scsi: qla2xxx: Use QP lock to search for bsg
+ scsi: qla2xxx: Reduce fabric scan duplicate code
+ scsi: qla2xxx: Fix flash read failure
+ scsi: qla2xxx: Complete command early within lock
+ scsi: qla2xxx: validate nvme_local_port correctly
+ perf: Fix event leak upon exit
+ perf: Fix event leak upon exec and file release
+ perf stat: Fix the hard-coded metrics calculation on the hybrid
+ perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR
+ perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
+ perf/x86/intel/pt: Fix topa_entry base length
+ perf/x86/intel/pt: Fix a topa_entry base address calculation
+ drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8
+ drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
+ drm/udl: Remove DRM_CONNECTOR_POLL_HPD
+ drm/dp_mst: Fix all mstb marked as not probed after suspend/resume
+ drm/amdgpu: reset vm state machine after gpu reset(vram lost)
+ drm/amd/amdgpu: Fix uninitialized variable warnings
+ drm/i915/dp: Reset intel_dp->link_trained before retraining the link
+ drm/i915/dp: Don't switch the LTTPR mode on an active link
+ rtc: isl1208: Fix return value of nvmem callbacks
+ rtc: abx80x: Fix return value of nvmem callback on read
+ watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
+ platform: mips: cpu_hwmon: Disable driver on unsupported hardware
+ RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
+ selftests/sigaltstack: Fix ppc64 GCC build
+ dm-verity: fix dm_is_verity_target() when dm-verity is builtin
+ rbd: don't assume rbd_is_lock_owner() for exclusive mappings
+ remoteproc: stm32_rproc: Fix mailbox interrupts queuing
+ remoteproc: imx_rproc: Skip over memory region when node value is NULL
+ remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init
+ MIPS: dts: loongson: Add ISA node
+ MIPS: ip30: ip30-console: Add missing include
+ MIPS: dts: loongson: Fix GMAC phy node
+ MIPS: Loongson64: env: Hook up Loongsson-2K
+ MIPS: Loongson64: Remove memory node for builtin-dtb
+ MIPS: Loongson64: reset: Prioritise firmware service
+ MIPS: Loongson64: Test register availability before use
+ drm/etnaviv: don't block scheduler when GPU is still active
+ drm/panfrost: Mark simple_ondemand governor as softdep
+ rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait
+ rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings
+ lib/build_OID_registry: don't mention the full path of the script in output
+ video: logo: Drop full path of the input filename in generated file
+ Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables
+ Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591
+ minmax: scsi: fix mis-use of 'clamp()' in sr.c
+ mm/mglru: fix ineffective protection calculation
+ PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
+ f2fs: fix to truncate preallocated blocks in f2fs_file_open()
+ kdb: address -Wformat-security warnings
+ kdb: Use the passed prompt in kdb_position_cursor()
+ jfs: Fix array-index-out-of-bounds in diFree
+ dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels
+ phy: cadence-torrent: Check return value on register read
+ phy: zynqmp: Enable reference clock correctly
+ um: time-travel: fix time-travel-start option
+ um: time-travel: fix signal blocking race/hang
+ f2fs: fix start segno of large section
+ watchdog: rzg2l_wdt: Use pm_runtime_resume_and_get()
+ watchdog: rzg2l_wdt: Check return status of pm_runtime_put()
+ f2fs: fix to update user block counts in block_operations()
+ kbuild: avoid build error when single DTB is turned into composite DTB
+ selftests/bpf: fexit_sleep: Fix stack allocation for arm64
+ libbpf: Fix no-args func prototype BTF dumping syntax
+ af_unix: Disable MSG_OOB handling for sockets in sockmap/sockhash
+ dma: fix call order in dmam_free_coherent
+ bpf, events: Use prog to emit ksymbol event for main program
+ tools/resolve_btfids: Fix comparison of distinct pointer types warning in 
resolve_btfids
+ MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later
+ ipv4: Fix incorrect source address in Record Route option
+ net: bonding: correctly annotate RCU in bond_should_notify_peers()
+ ice: Fix recipe read procedure
+ netfilter: nft_set_pipapo_avx2: disable softinterrupts
+ tipc: Return non-zero value from tipc_udp_addr2str() on error
+ net: stmmac: Correct byte order of perfect_match
+ net: nexthop: Initialize all fields in dumped nexthops
+ bpf: Fix a segment issue when downgrading gso_size
+ mISDN: Fix a use after free in hfcmulti_tx()
+ apparmor: Fix null pointer deref when receiving skb during sock creation
+ powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
+ lirc: rc_dev_get_from_fd(): fix file leak
+ auxdisplay: ht16k33: Drop reference after LED registration
+ ASoC: SOF: imx8m: Fix DSP control regmap retrieval
+ spi: microchip-core: fix the issues in the isr
+ spi: microchip-core: defer asserting chip select until just before write to 
TX FIFO
+ spi: microchip-core: only disable SPI controller when register value change 
requires it
+ spi: microchip-core: fix init function not setting the master and motorola 
modes
+ spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer
+ nvme-pci: Fix the instructions for disabling power management
+ ASoC: sof: amd: fix for firmware reload failure in Vangogh platform
+ spi: spidev: add correct compatible for Rohm BH2228FV
+ ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable
+ ASoC: TAS2781: Fix tasdev_load_calibrated_data()
+ ceph: fix incorrect kmalloc size of pagevec mempool
+ s390/pci: Refactor arch_setup_msi_irqs()
+ s390/pci: Allow allocation of more than 1 MSI interrupt
+ s390/cpum_cf: Fix endless loop in CF_DIAG event stop
+ iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en
+ io_uring: fix io_match_task must_hold
+ nvme-pci: add missing condition check for existence of mapped data
+ fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT
+ md/raid0: don't free conf on raid0_run failure
+ md/raid1: don't free conf on raid0_run failure
+ io_uring: Fix probe of disabled operations
+ cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls
+ cgroup/cpuset: Fix remote root partition creation problem
+ x86/syscall: Mark exit[_group] syscall handlers __noreturn
+ perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
+ md/raid5: recheck if reshape has finished with device_lock held
+ hwmon: (ltc2991) re-order conditions to fix off by one bug
+ arm64: smp: Fix missing IPI statistics
+ arm64: dts: qcom: sc7280: Remove CTS/RTS configuration
+ ARM: dts: qcom: msm8226-microsoft-common: Enable smbb explicitly
+ OPP: Fix missing cleanup on error in _opp_attach_genpd()
+ arm64: dts: qcom: sc8280xp-*: Remove thermal zone polling delays
+ arm64: dts: ti: k3-am62-main: Fix the reg-range for main_pktdma
+ arm64: dts: ti: k3-am62a-main: Fix the reg-range for main_pktdma
+ arm64: dts: ti: k3-am62p-main: Fix the reg-range for main_pktdma
+ arm64: dts: ti: k3-am62a7: Drop McASP AFIFOs
+ arm64: dts: ti: k3-am62p5: Drop McASP AFIFOs
+ arm64: dts: ti: k3-am62p5-sk: Fix pinmux for McASP1 TX
+ arm64: dts: qcom: sc7180-trogdor: Disable pwmleds node where unused
+ arm64: dts: mediatek: mt8192: Fix GPU thermal zone name for SVS
+ arm64: dts: mediatek: mt8183-pico6: Fix wake-on-X event node names
+ arm64: dts: renesas: r9a08g045: Add missing hypervisor virtual timer IRQ
+ cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons
+ wifi: mac80211: cancel multi-link reconf work on disconnect
+ wifi: ath11k: refactor setting country code logic
+ wifi: ath11k: restore country code during resume
+ net: ethernet: cortina: Restore TSO support
+ tcp: fix races in tcp_abort()
+ hns3: avoid linking objects into multiple modules
+ sched/core: Move preempt_model_*() helpers from sched.h to preempt.h
+ sched/core: Drop spinlocks on contention iff kernel is preemptible
+ net: dsa: ksz_common: Allow only up to two HSR HW offloaded ports for KSZ9477
+ libbpf: Skip base btf sanity checks
+ wifi: mac80211: add ieee80211_tdls_sta_link_id()
+ wifi: iwlwifi: fix iwl_mvm_get_valid_rx_ant()
+ wifi: ath12k: advertise driver capabilities for MBSSID and EMA
+ riscv, bpf: Fix out-of-bounds issue when preparing trampoline image
+ perf/x86/amd/uncore: Avoid PMU registration if counters are unavailable
+ perf/x86/amd/uncore: Fix DF and UMC domain identification
+ NFSD: Fix nfsdcld warning
+ net: page_pool: fix warning code
+ bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
+ Bluetooth: hci_event: Set QoS encryption from BIGInfo report
+ Bluetooth: hci_core, hci_sync: cleanup struct discovery_state
+ Bluetooth: Fix usage of __hci_cmd_sync_status
+ tcp: Don't access uninit tcp_rsk(req)->ao_keyid in tcp_create_openreq_child().
+ drm/panel: ilitek-ili9882t: If prepare fails, disable GPIO before regulators
+ drm/panel: ilitek-ili9882t: Check for errors on the NOP in prepare()
+ drm/amd/display: Move 'struct scaler_data' off stack
+ media: i2c: hi846: Fix V4L2_SUBDEV_FORMAT_TRY get_selection()
+ drm/msm/dpu: fix encoder irq wait skip
+ drm/msm/dpu: drop duplicate drm formats from wb2_formats arrays
+ drm/msm/dp: fix runtime_pm handling in dp_wait_hpd_asserted
+ perf maps: Switch from rbtree to lazily sorted array for addresses
+ perf maps: Fix use after free in __maps__fixup_overlap_and_insert
+ drm/bridge: samsung-dsim: Set P divider based on min/max of fin pll
+ drm/i915/psr: Print Panel Replay status instead of frame lock status
+ drm/mediatek: Set DRM mode configs accordingly
+ drm/msm/dsi: set video mode widebus enable bit when widebus is enabled
+ tools/perf: Fix the string match for "/tmp/perf-$PID.map" files in dso__load
+ drm/amd/display: Add null check before access structs
+ perf stat: Fix a segfault with --per-cluster --metric-only
+ nfs: pass explicit offset/count to trace events
+ PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in 
pci_epf_test_core_init()
+ PCI: tegra194: Set EP alignment restriction for inbound ATU
+ riscv: smp: fail booting up smp if inconsistent vlen is detected
+ clk: meson: s4: fix fixed_pll_dco clock
+ clk: meson: s4: fix pwm_j_div parent clock
+ usb: typec-mux: ptn36502: unregister typec switch on probe error and remove
+ mtd: spi-nor: winbond: fix w25q128 regression
+ iommufd/selftest: Fix dirty bitmap tests with u8 bitmaps
+ iommufd/selftest: Fix iommufd_test_dirty() to handle <u8 bitmaps
+ iommufd/selftest: Add tests for <= u8 bitmap sizes
+ iommufd/selftest: Fix tests to use MOCK_PAGE_SIZE based buffer sizes
+ iommufd/iova_bitmap: Check iova_bitmap_done() after set ahead
+ clk: qcom: gcc-x1e80100: Fix halt_check for all pipe clocks
+ dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume
+ kvm: s390: Reject memory region operations for ucontrol VMs
+ eeprom: ee1004: Call i2c_new_scanned_device to instantiate thermal sensor
+ clk: qcom: gcc-x1e80100: Set parent rate for USB3 sec and tert PHY pipe clks
+ workqueue: Introduce from_work() helper for cleaner callback declarations
+ RDMA/hns: Fix mbx timing out before CMD execution is completed
+ crypto: mxs-dcp - Ensure payload is zero when using key slot
+ RDMA/mana_ib: Enable RoCE on port 1
+ RDMA/mana_ib: set node_guid
+ rtc: tps6594: Fix memleak in probe
+ selftests/damon/access_memory: use user-defined region size
+ md-cluster: fix hanging issue while a new disk adding
+ power: supply: ab8500: Fix error handling when calling 
iio_read_channel_processed()
+ power: supply: ingenic: Fix some error handling paths in 
ingenic_battery_get_property()
+ remoteproc: mediatek: Don't attempt to remap l1tcm memory if missing
+ remoteproc: k3-r5: Fix IPC-only mode detection
+ mailbox: imx: fix TXDB_V2 channel race condition
+ mailbox: mtk-cmdq: Move devm_mbox_controller_register() after 
devm_pm_runtime_enable()
+ mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit 
machines
+ mm/huge_memory: avoid PMD-size page cache if needed
+ thermal/drivers/broadcom: Fix race between removal and clock disable
+ workqueue: Always queue work items to the newest PWQ for order workqueues
+ ipv6: fix source address selection with route leak
+ drm/xe: Use write-back caching mode for system memory on DGFX
+ md/raid5: fix spares errors about rcu usage
+ media: stm32: dcmipp: correct error handling in dcmipp_create_subdevs
+ tpm_tis_spi: add missing attpm20p SPI device ID entry
+ sysctl: always initialize i_uid/i_gid
+ media: i2c: Kconfig: Fix missing firmware upload config select
+ genirq: Set IRQF_COND_ONESHOT in request_irq()
+ cpufreq: qcom-nvmem: fix memory leaks in probe error paths
+ leds: triggers: Flush pending brightness before activating trigger
+ media: i2c: alvium: Move V4L2_CID_GAIN to V4L2_CID_ANALOG_GAIN
+ KVM: PPC: Book3S HV nestedv2: Fix doorbell emulation
+ KVM: PPC: Book3S HV nestedv2: Add DPDES support in helper library for Guest 
state buffer
+ KVM: nVMX: Add a helper to get highest pending from Posted Interrupt vector
+ KVM: nVMX: Check for pending posted interrupts when looking for nested events
+ ALSA: hda/realtek: cs35l41: Fixup remaining asus strix models
+ fbdev: vesafb: Detect VGA compatibility from screen info's VESA attributes
+ drm/fbdev-dma: Fix framebuffer mode for big endian devices
+ xhci: Apply XHCI_RESET_TO_DEFAULT quirk to TGL
+ dmaengine: fsl-edma: clean up unused "fsl,imx8qm-adma" compatible string
+ dmaengine: fsl-edma: change the memory access from local into remote mode in 
i.MX 8QM
+ clk: samsung: fix getting Exynos4 fin_pll rate from external clocks
+ bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
+ ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin format
+ arch: um: rust: Use the generated target.json again
+ f2fs: fix null reference error when checking end of zone
+ selftests: forwarding: skip if kernel not support setting bridge fdb learning 
limit
+ xsk: Require XDP_UMEM_TX_METADATA_LEN to actuate tx_metadata_len
+ drm/xe/exec: Fix minor bug related to xe_sync_entry_cleanup
+ thermal: trip: Split thermal_zone_device_set_mode()
+ apparmor: unpack transition table if dfa is not present
+ i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1
+ selinux,smack: remove the capability checks in the removexattr hooks
+ selftests/bpf: DENYLIST.aarch64: Skip fexit_sleep again
+ nilfs2: handle inconsistent state in nilfs_btnode_create_block()
+ UBUNTU: Upstream stable to v6.6.44, v6.10.3

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2083196

Title:
  Noble update: upstream stable patchset 2024-09-30

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2083196/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to