# changelog

author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-301.163.3.el9uek]
changelog:
  - uek-rpm: T93: enable xxhash crypto module for fips (Dave Kleikamp)  [Orabug: 37075386]  
  - mm: ioremap: Add ioremap/iounmap_allowed() (Kefeng Wang)  [Orabug: 37061929]  
  - netfilter: nf_tables: use timestamp to check for set element timeout (Pablo Neira Ayuso)  [Orabug: 36630431]  {CVE-2024-27397} 
  - uek-rpm: Enable CONFIG_DEVICE_PRIVATE for the 64K page kernel (Dave Kleikamp)  [Orabug: 36670372]  
  - uek-rpm: Config changes to support Grace Hopper (Dave Kleikamp)  [Orabug: 36670372]  
  - arm64: Allow 512K irqs (Dave Kleikamp)  [Orabug: 36670372]  
  - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (Matthew R. Ochs)  [Orabug: 36670372]  
  - firmware: smccc: Fix use of uninitialised results structure (Punit Agrawal)  [Orabug: 36670372]  
  - i2c: smbus: Check for parent device before dereference (Andy Shevchenko)  [Orabug: 36670372]  
  - gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (Tom Rix)  [Orabug: 36670372]  
  - dt-bindings: gpio: Remove FSI domain ports on Tegra234 (Prathamesh Shete)  [Orabug: 36670372]  
  - i2c: tegra: Do not mark ACPI devices as irq safe (Breno Leitao)  [Orabug: 36670372]  
  - tpm_tis_spi: Add hardware wait polling (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Enable TPM wait polling (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: Add TPM HW flow flag (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: set half duplex flag (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix iterator outside loop (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix validate combined sequence (Krishna Yarlagadda)  [Orabug: 36670372]  
  - ACPI/IORT: Update SMMUv3 DeviceID support (Robin Murphy)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix duplicate resource error (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Don't initialise DMA if not supported (Jon Hunter)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix combined sequence (Krishna Yarlagadda)  [Orabug: 36670372]  
  - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (Shanker Donthineni)  [Orabug: 36670372]  
  - irqchip/gicv3: Handle resource request failure consistently (Robin Murphy)  [Orabug: 36670372]  
  - irqchip/gic-v3: Claim iomem resources (Robin Murphy)  [Orabug: 36670372]  
  - i2c: tegra: Fix PEC support for SMBUS block read (Akhil R)  [Orabug: 36670372]  
  - i2c: tegra: Set ACPI node as primary fwnode (Akhil R)  [Orabug: 36670372]  
  - arm64: tegra: Enable Tegra SPI & QSPI in deconfig (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Multi-cs support (Krishna Yarlagadda)  [Orabug: 36670372]  
  - i2c: tegra: Add SMBus block read function (Akhil R)  [Orabug: 36670372]  
  - spi: tegra210-quad: use device_reset method (Krishna Yarlagadda)  [Orabug: 36670372]  
  - i2c: smbus: Use device_*() functions instead of of_*() (Akhil R)  [Orabug: 36670372]  
  - spi: tegra210-quad: add acpi support (Krishna Yarlagadda)  [Orabug: 36670372]  
  - docs: firmware-guide: ACPI: Add named interrupt doc (Akhil R)  [Orabug: 36670372]  
  - device property: Add fwnode_irq_get_byname (Akhil R)  [Orabug: 36670372]  
  - device property: Add fwnode_iomap() (Anand Ashok Dumbre)  [Orabug: 36670372]  
  - spi: tegra210-quad: combined sequence mode (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: add new chips to compatible (Krishna Yarlagadda)  [Orabug: 36670372]  
  - gpio: tegra186: Add IRQ per bank for Tegra241 (Akhil R)  [Orabug: 36670372]  
  - spi: tegra210-quad: use devm call for cdata memory (Krishna Yarlagadda)  [Orabug: 36670372]  
  - gpio: tegra186: Add support for Tegra241 (Akhil R)  [Orabug: 36670372]  
  - gpio: tegra186: Add support for Tegra234 (Prathamesh Shete)  [Orabug: 36670372]  
  - gpio: tegra186: Support multiple interrupts per bank (Thierry Reding)  [Orabug: 36670372]  
  - gpio: tegra186: Force one interrupt per bank (Thierry Reding)  [Orabug: 36670372]  
  - dt-bindings: gpio: Add Tegra241 support (Akhil R)  [Orabug: 36670372]  
  - dt-bindings: gpio: Add Tegra234 support (Prathamesh Shete)  [Orabug: 36670372]  
  - dt-bindings: gpio: tegra186: Convert to json-schema (Thierry Reding)  [Orabug: 36670372]  
  - i2c: tegra: use i2c_timings for bus clock freq (Akhil R)  [Orabug: 36670372]  
  - i2c: tegra: Add the ACPI support (Akhil R)  [Orabug: 36670372]  
  - net/mlx5: Stop waiting for PCI if pci channel is offline (Moshe Shemesh)  [Orabug: 36955683]  
  - Revert "crypto: ecc - Move ecc.h to include/crypto/internal" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: ecc - Export additional functions from crypto/ecc.c" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: add ECDSA signature generation support" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: add ECDSA test vectors from RFC 6979" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: make RFC6979 test vectors generic to all drivers" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: ecdsa - export ecdsa signature ASN.1 parser" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: ecdsa - export ecdsa privkey ASN.1 parser" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: octeontx2: add support for ECDSA P192, P256 and P384" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: octeontx2: add support for DH" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: octeontx2: fix opcode incase of SGv2" (Dave Kleikamp)  [Orabug: 37062541]  
  - i40e: Change user notification of non-SFP module in i40e_get_module_info() (Andrii Staikov)  [Orabug: 37069948]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-301.163.4.el9uek]
changelog:
  - pds_core: Prevent race issues involving the adminq (Brett Creeley)  [Orabug: 36529980]  {CVE-2024-26623} 
  - netdevsim: avoid potential loop in nsim_dev_trap_report_work() (Eric Dumazet)  [Orabug: 36530387]  {CVE-2024-26681} 
  - devlink: fix possible use-after-free and memory leaks in devlink_init() (Vasiliy Kovalev)  [Orabug: 36530666]  {CVE-2024-26734} 
  - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Adamos Ttofari)  [Orabug: 36642225]  {CVE-2024-35801} 
  - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Carolina Jubran)  [Orabug: 36643379]  {CVE-2024-35959} 
  - uek-rpm: correctly set DEFAULTKERNEL after removal of uek kernels (Rhythm Mahajan)  [Orabug: 36709294]  
  - RDMA: Flip the meaning of "-1" and "0" in ibv_create_cq / ib_create_cq (Gerd Rausch)  [Orabug: 36822216]  
  - Revert "rds: ib: fix non-determinism when comp_vector is zero" (Gerd Rausch)  [Orabug: 36822216]  
  - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (Aleksandr Mishin)  [Orabug: 36835804]  {CVE-2024-40940} 
  - xfrm: Remove documentation WARN_ON to limit return values for offloaded SA (Patrisious Haddad)  [Orabug: 37080855]  
  - perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling (Ravi Bangoria)  [Orabug: 37088496]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-301.163.5.el9uek]
changelog:
  - netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). (Kuniyuki Iwashima)  [Orabug: 36964003]  {CVE-2024-42270} 
  - netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). (Kuniyuki Iwashima)  [Orabug: 36964001]  {CVE-2024-42269} 
  - Revert "arm64: Allow 512K irqs" (Harshit Mogalapalli)  [Orabug: 37117987]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-301.163.5.2.el9uek]
changelog:
  - mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds)  [Orabug: 37174198]  {CVE-2024-47674} 
  - Revert "Documentation/admin-guide/acpi: Move information out of shell script comments" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: Move partition_create_desc() work to a helper" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic: Collect GIC_IRQ_TYPE definitions into one place" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / irq: Allow a compile-time arg0 for acpi_register_gsi()'s fwspec" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic, gic-v3: Translate fwspec for DT and ACPI systems in the same way" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Provide a helper to walk processor containers" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Add a helper to build a cpumask from a cpu_node" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: Print DT partitions in the same way as APCI" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: Build PPI partitions on ACPI systems" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: select and translate the partition domain" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / irq: Add acpi_register_partitioned_percpu_gsi()" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Find PPTT cache level by ID" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Add a helper to fill a cpumask from a processor container" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Add a helper to fill a cpumask from a cache_id" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "drivers: base: cacheinfo: Check per_cpu_cacheinfo() is allocated" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "drivers: base: cacheinfo: Add helper to find the cache size from cpu+level" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "cacheinfo: Allow for >32-bit cache 'id'" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "cacheinfo: Set cache 'id' based on DT data" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "cacheinfo: Expose the code to generate a cache-id from a device_node" (Dave Kleikamp)  [Orabug: 37144820]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-301.163.3.el9uek]
changelog:
  - uek-rpm: T93: enable xxhash crypto module for fips (Dave Kleikamp)  [Orabug: 37075386]  
  - mm: ioremap: Add ioremap/iounmap_allowed() (Kefeng Wang)  [Orabug: 37061929]  
  - netfilter: nf_tables: use timestamp to check for set element timeout (Pablo Neira Ayuso)  [Orabug: 36630431]  {CVE-2024-27397} 
  - uek-rpm: Enable CONFIG_DEVICE_PRIVATE for the 64K page kernel (Dave Kleikamp)  [Orabug: 36670372]  
  - uek-rpm: Config changes to support Grace Hopper (Dave Kleikamp)  [Orabug: 36670372]  
  - arm64: Allow 512K irqs (Dave Kleikamp)  [Orabug: 36670372]  
  - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (Matthew R. Ochs)  [Orabug: 36670372] {CVE-2024-36477}
  - firmware: smccc: Fix use of uninitialised results structure (Punit Agrawal)  [Orabug: 36670372]  
  - i2c: smbus: Check for parent device before dereference (Andy Shevchenko)  [Orabug: 36670372]  
  - gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (Tom Rix)  [Orabug: 36670372]  
  - dt-bindings: gpio: Remove FSI domain ports on Tegra234 (Prathamesh Shete)  [Orabug: 36670372]  
  - i2c: tegra: Do not mark ACPI devices as irq safe (Breno Leitao)  [Orabug: 36670372] {CVE-2024-45029}
  - tpm_tis_spi: Add hardware wait polling (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Enable TPM wait polling (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: Add TPM HW flow flag (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: set half duplex flag (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix iterator outside loop (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix validate combined sequence (Krishna Yarlagadda)  [Orabug: 36670372]  
  - ACPI/IORT: Update SMMUv3 DeviceID support (Robin Murphy)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix duplicate resource error (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Don't initialise DMA if not supported (Jon Hunter)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix combined sequence (Krishna Yarlagadda)  [Orabug: 36670372]  
  - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (Shanker Donthineni)  [Orabug: 36670372]  
  - irqchip/gicv3: Handle resource request failure consistently (Robin Murphy)  [Orabug: 36670372]  
  - irqchip/gic-v3: Claim iomem resources (Robin Murphy)  [Orabug: 36670372]  
  - i2c: tegra: Fix PEC support for SMBUS block read (Akhil R)  [Orabug: 36670372]  
  - i2c: tegra: Set ACPI node as primary fwnode (Akhil R)  [Orabug: 36670372]  
  - arm64: tegra: Enable Tegra SPI & QSPI in deconfig (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Multi-cs support (Krishna Yarlagadda)  [Orabug: 36670372]  
  - i2c: tegra: Add SMBus block read function (Akhil R)  [Orabug: 36670372]  
  - spi: tegra210-quad: use device_reset method (Krishna Yarlagadda)  [Orabug: 36670372]  
  - i2c: smbus: Use device_*() functions instead of of_*() (Akhil R)  [Orabug: 36670372]  
  - spi: tegra210-quad: add acpi support (Krishna Yarlagadda)  [Orabug: 36670372]  
  - docs: firmware-guide: ACPI: Add named interrupt doc (Akhil R)  [Orabug: 36670372]  
  - device property: Add fwnode_irq_get_byname (Akhil R)  [Orabug: 36670372]  
  - device property: Add fwnode_iomap() (Anand Ashok Dumbre)  [Orabug: 36670372]  
  - spi: tegra210-quad: combined sequence mode (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: add new chips to compatible (Krishna Yarlagadda)  [Orabug: 36670372]  
  - gpio: tegra186: Add IRQ per bank for Tegra241 (Akhil R)  [Orabug: 36670372]  
  - spi: tegra210-quad: use devm call for cdata memory (Krishna Yarlagadda)  [Orabug: 36670372]  
  - gpio: tegra186: Add support for Tegra241 (Akhil R)  [Orabug: 36670372]  
  - gpio: tegra186: Add support for Tegra234 (Prathamesh Shete)  [Orabug: 36670372]  
  - gpio: tegra186: Support multiple interrupts per bank (Thierry Reding)  [Orabug: 36670372]  
  - gpio: tegra186: Force one interrupt per bank (Thierry Reding)  [Orabug: 36670372]  
  - dt-bindings: gpio: Add Tegra241 support (Akhil R)  [Orabug: 36670372]  
  - dt-bindings: gpio: Add Tegra234 support (Prathamesh Shete)  [Orabug: 36670372]  
  - dt-bindings: gpio: tegra186: Convert to json-schema (Thierry Reding)  [Orabug: 36670372]  
  - i2c: tegra: use i2c_timings for bus clock freq (Akhil R)  [Orabug: 36670372]  
  - i2c: tegra: Add the ACPI support (Akhil R)  [Orabug: 36670372]  
  - net/mlx5: Stop waiting for PCI if pci channel is offline (Moshe Shemesh)  [Orabug: 36955683]  
  - Revert "crypto: ecc - Move ecc.h to include/crypto/internal" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: ecc - Export additional functions from crypto/ecc.c" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: add ECDSA signature generation support" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: add ECDSA test vectors from RFC 6979" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: make RFC6979 test vectors generic to all drivers" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: ecdsa - export ecdsa signature ASN.1 parser" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: ecdsa - export ecdsa privkey ASN.1 parser" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: octeontx2: add support for ECDSA P192, P256 and P384" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: octeontx2: add support for DH" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: octeontx2: fix opcode incase of SGv2" (Dave Kleikamp)  [Orabug: 37062541]  
  - i40e: Change user notification of non-SFP module in i40e_get_module_info() (Andrii Staikov)  [Orabug: 37069948]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-302.163.1.el9uek]
changelog:
  - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang)  [Orabug: 37035557] {CVE-2024-49863}
  - kpcimgr: Add dynamic memory region allocation feature (Joe Dobosenski)  [Orabug: 36983477]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.163.2.el9uek]
changelog:
  - uek: kabi: Introduce APIs to hide/fake inclusion of headers (Saeed Mirzamohammadi)  [Orabug: 37144803]  
  - uek-rpm: Enable config for Mediatek mt7915E wireless driver (Saeed Mirzamohammadi)  [Orabug: 37123534]  
  - uek-rpm: Update the x86 kABI files for new symbol (Yifei Liu)  [Orabug: 37108651]  
  - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (Sean Christopherson)  [Orabug: 36809298]  {CVE-2024-39483} 
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov)  [Orabug: 36753371]  {CVE-2024-38538} 
  - net: add pskb_may_pull_reason() helper (Eric Dumazet)  [Orabug: 36753371]  {CVE-2024-38538}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.163.3.el9uek]
changelog:
  - uek-rpm: T93: Enable CONFIG_EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER (Thomas Tai)  [Orabug: 37174880]  
  - mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds)  [Orabug: 37174198]  {CVE-2024-47674} 
  - rds/ib: Count memory consumed by rds_page_frag (Hans Westgaard Ry)  [Orabug: 37162157]  
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME properly in embedded kernels (Dave Kleikamp)  [Orabug: 37160327]  
  - fs/dcache: allow fractional values in fs.negative-dentry-limit (Gautham Ananthakrishna)  [Orabug: 37156522]  
  - Revert "Documentation/admin-guide/acpi: Move information out of shell script comments" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: Move partition_create_desc() work to a helper" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic: Collect GIC_IRQ_TYPE definitions into one place" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / irq: Allow a compile-time arg0 for acpi_register_gsi()'s fwspec" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic, gic-v3: Translate fwspec for DT and ACPI systems in the same way" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Provide a helper to walk processor containers" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Add a helper to build a cpumask from a cpu_node" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: Print DT partitions in the same way as APCI" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: Build PPI partitions on ACPI systems" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: select and translate the partition domain" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / irq: Add acpi_register_partitioned_percpu_gsi()" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Find PPTT cache level by ID" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Add a helper to fill a cpumask from a processor container" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Add a helper to fill a cpumask from a cache_id" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "drivers: base: cacheinfo: Check per_cpu_cacheinfo() is allocated" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "drivers: base: cacheinfo: Add helper to find the cache size from cpu+level" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "cacheinfo: Allow for >32-bit cache 'id'" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "cacheinfo: Set cache 'id' based on DT data" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "cacheinfo: Expose the code to generate a cache-id from a device_node" (Dave Kleikamp)  [Orabug: 37144820]  
  - KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (Kim Phillips)  [Orabug: 37126702]  
  - x86/cpu, kvm: Add the SMM_CTL MSR not present feature (Kim Phillips)  [Orabug: 37126702]  
  - x86/cpu, kvm: Add the Null Selector Clears Base feature (Kim Phillips)  [Orabug: 37126702]  
  - x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (Kim Phillips)  [Orabug: 37126702]  
  - x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (Kim Phillips)  [Orabug: 37126702]  
  - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (Kim Phillips)  [Orabug: 37126702]  
  - KVM: x86: Advertise that the SMM_CTL MSR is not supported (Jim Mattson)  [Orabug: 37126702]  
  - KVM: x86: synthesize CPUID leaf 0x80000021h if useful (Paolo Bonzini)  [Orabug: 37126702]  
  - KVM: x86: skip host CPUID call for hypervisor leaves (Paolo Bonzini)  [Orabug: 37126702]  
  - KVM: x86: add support for CPUID leaf 0x80000021 (Paolo Bonzini)  [Orabug: 37126702]  
  - amd_hsmp: Update PwrEfficiencyModeSelection message (Suma Hegde)  [Orabug: 37123833]  
  - amd_hsmp: Add support for new error codes returned from firmware (Suma Hegde)  [Orabug: 37123833]  
  - amd_hsmp: Add new HSMP messages of protocol version 7 (Suma Hegde)  [Orabug: 37123833]  
  - IB/mlx5: Fix mlx5_ib_get_vector_irqn() after dynamic IRQ allocation change (Gerd Rausch)  [Orabug: 37069671]  
  - arm64: kdump: increase crashkernel reservation size for crashkernel=auto (Brian Maly)  [Orabug: 36949800]  
  - rds: Support rds-pings with payload (Håkon Bugge)  [Orabug: 36847470]  
  - mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (Miaohe Lin)  [Orabug: 36683092]  {CVE-2024-36028} 
  - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled (Miaohe Lin)  [Orabug: 36597930]  {CVE-2024-26987}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.4.el9uek]
changelog:
  - LTS version: v5.15.167 (Vijayendra Suman)   
  - udp: fix receiving fraglist GSO packets (Felix Fietkau)   
  - memcg: protect concurrent access to mem_cgroup_idr (Shakeel Butt) [Orabug: 36993003] {CVE-2024-43892}
  - btrfs: fix race between direct IO write and fsync when using same fd (Filipe Manana) [Orabug: 37195092] {CVE-2024-46734}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann)   
  - x86/mm: Fix PTI for i386 some more (Thomas Gleixner)   
  - net: drop bad gso csum_start and offset in virtio_net_hdr (Willem de Bruijn) [Orabug: 37195028] {CVE-2024-43897}
  - gso: fix dodgy bit handling for GSO_UDP_L4 (Yan Zhai)   
  - net: change maximum number of UDP segments to 128 (Yuri Benditovich)   
  - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation (Willem de Bruijn)   
  - gpio: rockchip: fix OF node leak in probe() (Krzysztof Kozlowski)   
  - drm/i915/fence: Mark debug_fence_free() with __maybe_unused (Andy Shevchenko)   
  - drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused (Andy Shevchenko)   
  - ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode (Matteo Martelli)   
  - nvmet-tcp: fix kernel crash if commands allocation fails (Maurizio Lombardi) [Orabug: 37074464] {CVE-2024-46737}
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Jonathan Cameron) [Orabug: 37116411] {CVE-2024-46822}
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header (James Morse)   
  - ACPI: processor: Fix memory leaks in error paths of processor_add() (Jonathan Cameron)   
  - ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() (Jonathan Cameron)   
  - workqueue: Improve scalability of workqueue watchdog touch (Nicholas Piggin) [Orabug: 37116487] {CVE-2024-46839}
  - workqueue: wq_watchdog_touch is always called with valid CPU (Nicholas Piggin)   
  - nilfs2: protect references to superblock parameters exposed in sysfs (Ryusuke Konishi) [Orabug: 37074676] {CVE-2024-46780}
  - nilfs2: replace snprintf in show functions with sysfs_emit (Qing Wang)   
  - ksmbd: Unlock on in ksmbd_tcp_set_interfaces() (Dan Carpenter)   
  - ksmbd: unset the binding mark of a reused connection (Namjae Jeon) [Orabug: 37074716] {CVE-2024-46795}
  - perf/aux: Fix AUX buffer serialization (Peter Zijlstra) [Orabug: 37070802] {CVE-2024-46713}
  - uprobes: Use kzalloc to allocate xol area (Sven Schnelle)   
  - clocksource/drivers/timer-of: Remove percpu irq related code (Daniel Lezcano)   
  - clocksource/drivers/imx-tpm: Fix next event not taking effect sometime (Jacky Bai)   
  - clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX (Jacky Bai)   
  - Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic (Naman Jain)   
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (Saurabh Sengar) [Orabug: 37074472] {CVE-2024-46739}
  - nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc (Geert Uytterhoeven)   
  - binder: fix UAF caused by offsets overwrite (Carlos Llamas) [Orabug: 37074476] {CVE-2024-46740}
  - usb: dwc3: core: update LC timer as per USB Spec V3.2 (Faisal Hassan)   
  - iio: adc: ad7124: fix chip ID mismatch (Dumitru Ceclan)   
  - iio: adc: ad7124: fix config comparison (Dumitru Ceclan)   
  - iio: fix scale application in iio_convert_raw_to_processed_unlocked (Matteo Martelli)   
  - iio: buffer-dmaengine: fix releasing dma channel on error (David Lechner)   
  - staging: iio: frequency: ad9834: Validate frequency parameter value (Aleksandr Mishin) [Orabug: 37159727] {CVE-2024-47663}
  - cifs: Check the lease context if we actually got a lease (Ronnie Sahlberg)   
  - NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (Trond Myklebust)   
  - ata: pata_macio: Use WARN instead of BUG (Michael Ellerman)   
  - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Jiaxun Yang) [Orabug: 37116454] {CVE-2024-46832}
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Kent Overstreet) [Orabug: 37159756] {CVE-2024-47668}
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk (Stefan Wiehler) [Orabug: 37074487] {CVE-2024-46743}
  - Squashfs: sanity check symbolic link size (Phillip Lougher) [Orabug: 37074494] {CVE-2024-46744}
  - usbnet: ipheth: race between ipheth_close and error handling (Oliver Neukum)   
  - Input: uinput - reject requests with unreasonable number of slots (Dmitry Torokhov) [Orabug: 37074502] {CVE-2024-46745}
  - HID: amd_sfh: free driver_data after destroying hid device (Olivier Sobrie) [Orabug: 37074507] {CVE-2024-46746}
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Camila Alvarez) [Orabug: 37074512] {CVE-2024-46747}
  - s390/vmlinux.lds.S: Move ro_after_init section behind rodata section (Heiko Carstens)   
  - btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() (David Sterba)   
  - kselftests: dmabuf-heaps: Ensure the driver name is null-terminated (Zenghui Yu)   
  - i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup (Jarkko Nikula) [Orabug: 37159737] {CVE-2024-47665}
  - net: dpaa: avoid on-stack arrays of NR_CPUS elements (Vladimir Oltean)   
  - PCI: Add missing bridge lock to pci_bus_lock() (Dan Williams) [Orabug: 37074530] {CVE-2024-46750}
  - riscv: set trap vector earlier (yang.zhang)   
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (Filipe Manana) [Orabug: 37074542] {CVE-2024-46752}
  - btrfs: clean up our handling of refs == 0 in snapshot delete (Josef Bacik) [Orabug: 37116493] {CVE-2024-46840}
  - btrfs: replace BUG_ON with ASSERT in walk_down_proc() (Josef Bacik)   
  - fs/ntfs3: Check more cases when directory is corrupted (Konstantin Komarov)   
  - smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() (Zqiang)   
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (Sascha Hauer) [Orabug: 37074560] {CVE-2024-46755}
  - dma-mapping: benchmark: Don't starve others when doing the test (Yicong Yang)   
  - ext4: fix possible tid_t sequence overflows (Luis Henriques (SUSE))   
  - drm/amdgpu: Set no_hw_access when VF request full GPU fails (Yifan Zha)   
  - libbpf: Add NULL checks to bpf_object__{prev_map,next_map} (Andreas Ziegler)   
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074565] {CVE-2024-46756}
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074570] {CVE-2024-46757}
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074578] {CVE-2024-46758}
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074583] {CVE-2024-46759}
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (Krishna Kumar) [Orabug: 37074594] {CVE-2024-46761}
  - devres: Initialize an uninitialized struct member (Zijun Hu)   
  - um: line: always fill *error_out in setup_one_line() (Johannes Berg) [Orabug: 37116517] {CVE-2024-46844}
  - cgroup: Protect css->cgroup write under css_set_lock (Waiman Long)   
  - iommu/vt-d: Handle volatile descriptor status read (Jacob Pan)   
  - dm init: Handle minors larger than 255 (Benjamin Marzinski)   
  - ASoC: topology: Properly initialize soc_enum values (Amadeusz Sławiński)   
  - net: dsa: vsc73xx: fix possible subblocks range of CAPT block (Pawel Dembicki)   
  - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN (Jonas Gorski)   
  - fou: Fix null-ptr-deref in GRO. (Kuniyuki Iwashima) [Orabug: 37074606] {CVE-2024-46763}
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers (Eric Dumazet)   
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers (Eric Dumazet)   
  - bareudp: Fix device stats updates. (Guillaume Nault)   
  - usbnet: modern method to get random MAC (Oliver Neukum)   
  - net: usb: don't write directly to netdev->dev_addr (Jakub Kicinski)   
  - ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset (Larysa Zaremba)   
  - igc: Unlock on error in igc_io_resume() (Dan Carpenter)   
  - tcp_bpf: fix return value of tcp_bpf_sendmsg() (Cong Wang) [Orabug: 37074692] {CVE-2024-46783}
  - platform/x86: dell-smbios: Fix error path in dell_smbios_init() (Aleksandr Mishin)   
  - igb: Fix not clearing TimeSync interrupts for 82580 (Daiwei Li)   
  - can: m_can: Release irq on error in m_can_open (Simon Horman)   
  - can: bcm: Remove proc entry when dev is unregistered. (Kuniyuki Iwashima) [Orabug: 37074624] {CVE-2024-46771}
  - drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 (Marek Olšák)   
  - pcmcia: Use resource_size function on resource object (Jules Irenge)   
  - media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse (Chen Ni)   
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Kishon Vijay Abraham I) [Orabug: 37159749] {CVE-2024-47667}
  - media: vivid: don't set HDMI TX controls if there are no HDMI outputs (Hans Verkuil)   
  - drm/amd/display: Check HDCP returned status (Alex Hung)   
  - usb: uas: set host status byte on data completion error (Shantanu Goel)   
  - wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 (Arend van Spriel)   
  - leds: spi-byte: Call of_node_put() on error path (Andy Shevchenko)   
  - media: vivid: fix wrong sizeimage value for mplane (Hans Verkuil)   
  - udf: Avoid excessive partition lengths (Jan Kara) [Orabug: 37074664] {CVE-2024-46777}
  - netfilter: nf_conncount: fix wrong variable type (Yunjian Wang)   
  - iommu: sun50i: clear bypass register (Jernej Skrabec)   
  - af_unix: Remove put_pid()/put_cred() in copy_peercred(). (Kuniyuki Iwashima)   
  - irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 (Pali Rohár)   
  - smack: unix sockets: fix accept()ed socket label (Konstantin Andreev)   
  - ALSA: hda: Add input value sanity checks to HDMI channel map controls (Takashi Iwai)   
  - mptcp: pm: send ACK on an active subflow (Matthieu Baerts (NGI0))   
  - mptcp: pr_debug: add missing 
   at the end (Matthieu Baerts (NGI0))   
  - mptcp: pm: skip connecting to already established sf (Matthieu Baerts (NGI0))   
  - mptcp: pm: do not remove already closed subflows (Matthieu Baerts (NGI0))   
  - mptcp: pm: ADD_ADDR 0 is not a new address (Matthieu Baerts (NGI0))   
  - mptcp: close subflow when receiving TCP+FIN (Matthieu Baerts (NGI0))   
  - mptcp: avoid duplicated SUB_CLOSED events (Matthieu Baerts (NGI0))   
  - mptcp: pm: avoid possible UaF when selecting endp (Matthieu Baerts (NGI0))   
  - mptcp: constify a bunch of of helpers (Paolo Abeni)   
  - mptcp: pm: fullmesh: select the right ID later (Matthieu Baerts (NGI0))   
  - mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR (Matthieu Baerts (NGI0))   
  - mptcp: pm: only decrement add_addr_accepted for MPJ req (Matthieu Baerts (NGI0))   
  - mptcp: pm: re-using ID of unused flushed subflows (Matthieu Baerts (NGI0))   
  - nilfs2: fix state management in error path of log writing function (Ryusuke Konishi) [Orabug: 37159764] {CVE-2024-47669}
  - nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [Orabug: 37074683] {CVE-2024-46781}
  - sched: sch_cake: fix bulk flow accounting logic for host fairness (Toke Høiland-Jørgensen) [Orabug: 37116442] {CVE-2024-46828}
  - ila: call nf_unregister_net_hooks() sooner (Eric Dumazet) [Orabug: 37074688] {CVE-2024-46782}
  - tracing: Avoid possible softlockup in tracing_iter_reset() (Zheng Yejian)   
  - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open (Simon Arlott) [Orabug: 37074711] {CVE-2024-46791}
  - clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API (Satya Priya Kakitapalli)   
  - clk: qcom: clk-alpha-pll: Fix the pll post div mask (Satya Priya Kakitapalli)   
  - fuse: use unsigned type for getxattr/listxattr size truncation (Jann Horn)   
  - fuse: update stats for pages in dropped aux writeback list (Joanne Koong)   
  - mmc: cqhci: Fix checking of CQHCI_HALT state (Seunghwan Baek)   
  - mmc: sdhci-of-aspeed: fix module autoloading (Liao Chen)   
  - mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K (Sam Protsenko)   
  - Bluetooth: MGMT: Ignore keys being loaded with invalid type (Luiz Augusto von Dentz)   
  - Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" (Luiz Augusto von Dentz)   
  - nvme-pci: Add sleep quirk for Samsung 990 Evo (Georg Gottleuber)   
  - rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [Orabug: 37116445] {CVE-2024-46829}
  - irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() (Ma Ke)   
  - ata: libata: Fix memory leak for error path in ata_host_alloc() (Zheng Qixing)   
  - ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx (Maximilien Perreault)   
  - ALSA: hda/realtek: add patch for internal mic in Lenovo V145 (Terry Cheong)   
  - ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices (Christoffer Sandberg)   
  - KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing (Ravi Bangoria)   
  - KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE (Maxim Levitsky)   
  - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object (robelin) [Orabug: 37074721] {CVE-2024-46798}
  - sch/netem: fix use after free in netem_dequeue (Stephen Hemminger) [Orabug: 37074725] {CVE-2024-46800}
  - i2c: Use IS_REACHABLE() for substituting empty ACPI functions (Richard Fitzgerald)   
  - ext4: handle redirtying in ext4_bio_write_page() (Jan Kara)   
  - udf: Limit file size to 4TB (Jan Kara)   
  - ext4: reject casefold inode flag without casefold feature (Eric Biggers)   
  - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (Nikita Kiryushin) [Orabug: 36753533] {CVE-2024-38577}
  - virtio_net: Fix napi_skb_cache_put warning (Breno Leitao) [Orabug: 36964473] {CVE-2024-43835}
  - drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr (Bob Zhou) [Orabug: 36993065] {CVE-2024-43905}
  - media: uvcvideo: Enforce alignment of frame and interval (Ricardo Ribalda)   
  - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null (Alex Hung) [Orabug: 37073031] {CVE-2024-46714}
  - block: remove the blk_flush_integrity call in blk_integrity_unregister (Christoph Hellwig)   
  - wifi: cfg80211: make hash table duplicates more survivable (Johannes Berg)   
  - drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (Marek Vasut) [Orabug: 37116336] {CVE-2024-46810}
  - drm/meson: plane: Add error handling (Haoran Liu)   
  - smack: tcp: ipv4, fix incorrect labeling (Casey Schaufler)   
  - usb: typec: ucsi: Fix null pointer dereference in trace (Abhishek Pandit-Subedi) [Orabug: 37073064] {CVE-2024-46719}
  - usbip: Don't submit special requests twice (Simon Holesch)   
  - rcu/nocb: Remove buggy bypass lock contention mitigation (Frederic Weisbecker)   
  - ionic: fix potential irq name truncation (Shannon Nelson)   
  - RDMA/efa: Properly handle unexpected AQ completions (Michael Margolin)   
  - hwspinlock: Introduce hwspin_lock_bust() (Richard Maina)   
  - PCI: al: Check IORESOURCE_BUS existence during probe (Aleksandr Mishin)   
  - cpufreq: scmi: Avoid overflow of target_freq in fast switch (Jagadeesh Kona)   
  - wifi: iwlwifi: remove fw_running op (Shahar S Matityahu)   
  - drm/amdgpu: update type of buf size to u32 for eeprom functions (Tao Zhou)   
  - drm/amd/pm: check negtive return for table entries (Jesse Zhang)   
  - drm/amdgpu: the warning dereferencing obj for nbio_v7_4 (Jesse Zhang) [Orabug: 37116393] {CVE-2024-46819}
  - drm/amd/pm: check specific index for aldebaran (Jesse Zhang)   
  - drm/amdgpu: fix the waring dereferencing hive (Jesse Zhang) [Orabug: 37116300] {CVE-2024-46805}
  - drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs (Ma Jun)   
  - apparmor: fix possible NULL pointer dereference (Leesoo Ahn) [Orabug: 37073077] {CVE-2024-46721}
  - drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device (Michael Chen)   
  - drm/amdgpu: fix mc_data out-of-bounds read warning (Tim Huang) [Orabug: 37073082] {CVE-2024-46722}
  - drm/amdgpu: fix ucode out-of-bounds read warning (Tim Huang) [Orabug: 37073087] {CVE-2024-46723}
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (Ma Jun) [Orabug: 37073093] {CVE-2024-46724}
  - drm/amdgpu: Fix out-of-bounds write warning (Ma Jun) [Orabug: 37073098] {CVE-2024-46725}
  - drm/amdgpu/pm: Fix uninitialized variable agc_btc_response (Ma Jun)   
  - drm/amdgpu/pm: Fix uninitialized variable warning for smu10 (Ma Jun)   
  - drm/amd/amdgpu: Check tbo resource pointer (Asad Kamal) [Orabug: 37116315] {CVE-2024-46807}
  - drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create (Hersen Wu)   
  - drm/amd/display: Check msg_id before processing transcation (Alex Hung) [Orabug: 37116360] {CVE-2024-46814}
  - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] (Alex Hung) [Orabug: 37116365] {CVE-2024-46815}
  - drm/amd/display: Add array index check for hdcp ddc access (Hersen Wu) [Orabug: 37116295] {CVE-2024-46804}
  - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (Hersen Wu) [Orabug: 37116375] {CVE-2024-46817}
  - drm/amd/display: Check gpio_id before used as array index (Alex Hung) [Orabug: 37116384] {CVE-2024-46818}
  - drm/amdgpu: avoid reading vf2pf info size from FB (Zhigang Luo)   
  - drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr (Tim Huang)   
  - drm/amdgpu: fix uninitialized scalar variable warning (Tim Huang)   
  - drm/amd/pm: fix the Out-of-bounds read warning (Jesse Zhang) [Orabug: 37073129] {CVE-2024-46731}
  - drm/amd/pm: fix warning using uninitialized value of max_vid_step (Jesse Zhang)   
  - drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr (Tim Huang)   
  - drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc (Ma Jun)   
  - drm/amdgpu: fix overflowed array index read warning (Tim Huang)   
  - drm/amd/display: Assign linear_pitch_alignment even for VM (Alvin Lee) [Orabug: 37073135] {CVE-2024-46732}
  - drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr (Ma Jun)   
  - net: usb: qmi_wwan: add MeiG Smart SRM825L (ZHANG Yuntian)   
  - dma-debug: avoid deadlock between dma debug vs printk and netconsole (Rik van Riel)   
  - i2c: Fix conditional for substituting empty ACPI functions (Richard Fitzgerald)   
  - ALSA: hda/conexant: Mute speakers at suspend / shutdown (Takashi Iwai)   
  - ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown (Takashi Iwai)   
  - drm: panel-orientation-quirks: Add quirk for OrangePi Neo (Philip Mueller)   
  - LTS version: v5.15.166 (Vijayendra Suman)   
  - apparmor: fix policy_unpack_test on big endian systems (Guenter Roeck)   
  - scsi: aacraid: Fix double-free on probe failure (Ben Hutchings) [Orabug: 37070699] {CVE-2024-46673}
  - igc: Fix qbv tx latency by setting gtxoffset (Faizal Rahim)   
  - igc: Fix reset adapter logics when tx mode change (Faizal Rahim)   
  - phy: zynqmp: Enable reference clock correctly (Sean Anderson)   
  - usb: cdnsp: fix for Link TRB with TC (Pawel Laszczak)   
  - usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function (Pawel Laszczak)   
  - usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() (Zijun Hu)   
  - usb: dwc3: st: add missing depopulate in probe error path (Krzysztof Kozlowski)   
  - usb: dwc3: st: fix probed platform device ref count on probe error path (Krzysztof Kozlowski) [Orabug: 37070704] {CVE-2024-46674}
  - usb: dwc3: core: Prevent USB core invalid event buffer address access (Selvarasu Ganesan) [Orabug: 37070709] {CVE-2024-46675}
  - usb: dwc3: omap: add missing depopulate in probe error path (Krzysztof Kozlowski)   
  - USB: serial: option: add MeiG Smart SRM825L (ZHANG Yuntian)   
  - cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (Ian Ray)   
  - soc: qcom: cmd-db: Map shared memory as WC, not WB (Volodymyr Babchuk)   
  - nfc: pn533: Add poll mod list filling check (Aleksandr Mishin) [Orabug: 37070716] {CVE-2024-46676}
  - net: busy-poll: use ktime_get_ns() instead of local_clock() (Eric Dumazet)   
  - gtp: fix a potential NULL pointer dereference (Cong Wang) [Orabug: 37070721] {CVE-2024-46677}
  - ethtool: check device is present when getting link settings (Jamie Bainbridge) [Orabug: 37070727] {CVE-2024-46679}
  - dmaengine: dw: Add memory bus width verification (Serge Semin)   
  - dmaengine: dw: Add peripheral bus width verification (Serge Semin)   
  - phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume (Piyush Mehta)   
  - phy: xilinx: phy-zynqmp: dynamic clock support for power-save (Piyush Mehta)   
  - phy: xilinx: add runtime PM support (Piyush Mehta)   
  - PM: runtime: Add DEFINE_RUNTIME_DEV_PM_OPS() macro (Paul Cercueil)   
  - PM: core: Add EXPORT[_GPL]_SIMPLE_DEV_PM_OPS macros (Paul Cercueil)   
  - PM: core: Remove DEFINE_UNIVERSAL_DEV_PM_OPS() macro (Paul Cercueil)   
  - soundwire: stream: fix programming slave ports for non-continous port maps (Krzysztof Kozlowski)   
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Chen Ridong) [Orabug: 36964509] {CVE-2024-43853}
  - ata: libata-core: Fix null pointer dereference on error (Niklas Cassel) [Orabug: 36897456] {CVE-2024-41098}
  - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages (Alex Deucher) [Orabug: 36867630] {CVE-2024-41011}
  - Revert "MIPS: Loongson64: reset: Prioritise firmware service" (Greg Kroah-Hartman)   
  - mptcp: sched: check both backup in retrans (Matthieu Baerts (NGI0))   
  - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (Haiyang Zhang)   
  - wifi: mwifiex: duplicate static structs used in driver instances (Sascha Hauer)   
  - pinctrl: single: fix potential NULL dereference in pcs_get_function() (Ma Ke) [Orabug: 37070743] {CVE-2024-46685}
  - pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins (Huang-Huang Bao)   
  - btrfs: run delayed iputs when flushing delalloc (Josef Bacik)   
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Jesse Zhang) [Orabug: 36898008] {CVE-2024-42228}
  - tools: move alignment-related macros to new <linux/align.h> (Alexander Lobakin)   
  - Input: MT - limit max slots (Tetsuo Handa) [Orabug: 37029136] {CVE-2024-45008}
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) [Orabug: 35358656] {CVE-2023-31083}
  - mm/numa: no task_numa_fault() call if PTE is changed (Zi Yan)   
  - mm/numa: no task_numa_fault() call if PMD is changed (Zi Yan)   
  - ALSA: timer: Relax start tick time check for slave timer elements (Takashi Iwai)   
  - hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt() (Javier Carrasco)   
  - Revert "drm/amd/display: Validate hw_points_num before using it" (Alex Hung)   
  - mmc: dw_mmc: allow biu and ciu clocks to defer (Ben Whitten)   
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (Marc Zyngier) [Orabug: 37070792] {CVE-2024-46707}
  - cxgb4: add forgotten u64 ivlan cast before shift (Nikolay Kuratov)   
  - HID: microsoft: Add rumble support to latest xbox controllers (Siarhei Vishniakou)   
  - HID: wacom: Defer calculation of resolution until resolution_code is known (Jason Gerecke)   
  - MIPS: Loongson64: Set timer mode in cpu-probe (Jiaxun Yang)   
  - scsi: core: Fix the return value of scsi_logical_block_count() (Chaotian Jing)   
  - Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman) [Orabug: 36992975] {CVE-2024-43884}
  - mmc: mmc_test: Fix NULL dereference on allocation failure (Dan Carpenter) [Orabug: 37070690] {CVE-2024-45028}
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (Dmitry Baryshkov) [Orabug: 37029059] {CVE-2024-44982}
  - drm/msm/dp: reset the link phy params before link training (Abhinav Kumar)   
  - drm/msm/dpu: don't play tricks with debug macros (Dmitry Baryshkov)   
  - net: xilinx: axienet: Fix dangling multicast addresses (Sean Anderson)   
  - net: xilinx: axienet: Always disable promiscuous mode (Sean Anderson)   
  - netfilter: flowtable: validate vlan header (Pablo Neira Ayuso) [Orabug: 37029063] {CVE-2024-44983}
  - ipv6: prevent possible UAF in ip6_xmit() (Eric Dumazet) [Orabug: 37029066] {CVE-2024-44985}
  - ipv6: fix possible UAF in ip6_finish_output2() (Eric Dumazet) [Orabug: 37029068] {CVE-2024-44986}
  - ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet) [Orabug: 37029075] {CVE-2024-44987}
  - netem: fix return value if duplicate enqueue fails (Stephen Hemminger) [Orabug: 37070659] {CVE-2024-45016}
  - net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang) [Orabug: 37029081] {CVE-2024-44988}
  - net: dsa: mv88e6xxx: replace ATU violation prints with trace points (Vladimir Oltean)   
  - net: dsa: mv88e6xxx: read FID when handling ATU violations (Hans J. Schultz)   
  - dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp() (Dan Carpenter)   
  - ice: fix ICE_LAST_OFFSET formula (Maciej Fijalkowski)   
  - bonding: fix xfrm state handling when clearing active slave (Nikolay Aleksandrov)   
  - bonding: fix xfrm real_dev null pointer dereference (Nikolay Aleksandrov) [Orabug: 37029084] {CVE-2024-44989}
  - bonding: fix null pointer deref in bond_ipsec_offload_ok (Nikolay Aleksandrov) [Orabug: 37029087] {CVE-2024-44990}
  - bonding: fix bond_ipsec_offload_ok return type (Nikolay Aleksandrov)   
  - ip6_tunnel: Fix broken GRO (Thomas Bogendoerfer)   
  - netfilter: nft_counter: Synchronize nft_counter_reset() against reader. (Sebastian Andrzej Siewior)   
  - netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). (Sebastian Andrzej Siewior)   
  - kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima) [Orabug: 37013760] {CVE-2024-44946}
  - tc-testing: don't access non-existent variable on exception (Simon Horman)   
  - Bluetooth: SMP: Fix assumption of Central always being Initiator (Luiz Augusto von Dentz)   
  - Bluetooth: hci_core: Fix LE quote calculation (Luiz Augusto von Dentz)   
  - platform/surface: aggregator: Fix warning when controller is destroyed in probe (Maximilian Luz)   
  - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (Long Li)   
  - dm suspend: return -ERESTARTSYS instead of -EINTR (Mikulas Patocka)   
  - media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c) (Aurelien Jarno)   
  - nfsd: make svc_stat per-network namespace instead of global (Josef Bacik)   
  - nfsd: remove nfsd_stats, make th_cnt a global counter (Josef Bacik)   
  - nfsd: make all of the nfsd stats per-network namespace (Josef Bacik)   
  - nfsd: expose /proc/net/sunrpc/nfsd in net namespaces (Josef Bacik)   
  - nfsd: rename NFSD_NET_* to NFSD_STATS_* (Josef Bacik)   
  - sunrpc: use the struct net as the svc proc private (Josef Bacik)   
  - sunrpc: remove ->pg_stats from svc_program (Josef Bacik)   
  - sunrpc: pass in the sv_stats struct through svc_create_pooled (Josef Bacik)   
  - nfsd: stop setting ->pg_stats for unused stats (Josef Bacik)   
  - sunrpc: don't change ->sv_stats if it doesn't exist (Josef Bacik)   
  - NFSD: Fix frame size warning in svc_export_parse() (Chuck Lever)   
  - NFSD: Rewrite synopsis of nfsd_percpu_counters_init() (Chuck Lever)   
  - NFSD: Refactor the duplicate reply cache shrinker (Chuck Lever)   
  - NFSD: Replace nfsd_prune_bucket() (Chuck Lever)   
  - NFSD: Rename nfsd_reply_cache_alloc() (Chuck Lever)   
  - NFSD: Refactor nfsd_reply_cache_free_locked() (Chuck Lever)   
  - nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net (Jeff Layton)   
  - nfsd: move reply cache initialization into nfsd startup (Jeff Layton)   
  - block: use "unsigned long" for blk_validate_block_size(). (Tetsuo Handa)   
  - gtp: pull network headers in gtp_dev_xmit() (Eric Dumazet) [Orabug: 37029110] {CVE-2024-44999}
  - hrtimer: Prevent queuing of hrtimer without a function callback (Phil Chang)   
  - nvmet-rdma: fix possible bad dereference when freeing rsps (Sagi Grimberg)   
  - ext4: set the type of max_zeroout to unsigned int to avoid overflow (Baokun Li)   
  - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc (Guanrui Huang)   
  - usb: dwc3: core: Skip setting event buffers for host only controllers (Krishna Kurapati)   
  - platform/x86: lg-laptop: fix %s null argument warning (Gergo Koteles)   
  - clocksource: Make watchdog and suspend-timing multiplication overflow safe (Adrian Hunter)   
  - s390/iucv: fix receive buffer virtual vs physical address confusion (Alexander Gordeev)   
  - openrisc: Call setup_memory() earlier in the init sequence (Oreoluwa Babatunde)   
  - NFS: avoid infinite loop in pnfs_update_layout. (NeilBrown)   
  - nvmet-tcp: do not continue for invalid icreq (Hannes Reinecke)   
  - net: hns3: add checking for vf id of mailbox (Jian Shen)   
  - Bluetooth: bnep: Fix out-of-bound access (Luiz Augusto von Dentz)   
  - usb: gadget: fsl: Increase size of name buffer for endpoints (Uwe Kleine-König)   
  - f2fs: fix to do sanity check in update_sit_entry (Zhiguo Niu)   
  - btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() (David Sterba)   
  - btrfs: change BUG_ON to assertion in tree_move_down() (David Sterba)   
  - btrfs: send: handle unexpected data in header buffer in begin_cmd() (David Sterba)   
  - btrfs: handle invalid root reference found in may_destroy_subvol() (David Sterba)   
  - btrfs: change BUG_ON to assertion when checking for delayed_node root (David Sterba)   
  - powerpc/boot: Only free if realloc() succeeds (Michael Ellerman)   
  - powerpc/boot: Handle allocation failure in simple_realloc() (Li zeming)   
  - parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 (Helge Deller)   
  - memory: stm32-fmc2-ebi: check regmap_read return value (Christophe Kerello)   
  - x86: Increase brk randomness entropy for 64-bit systems (Kees Cook)   
  - md: clean up invalid BUG_ON in md_ioctl (Li Nan)   
  - netlink: hold nlk->cb_mutex longer in __netlink_dump_start() (Eric Dumazet)   
  - clocksource/drivers/arm_global_timer: Guard against division by zero (Martin Blumenstingl)   
  - virtiofs: forbid newlines in tags (Stefan Hajnoczi)   
  - drm/lima: set gp bus_stop bit before hard reset (Erico Nunes)   
  - net/sun3_82586: Avoid reading past buffer in debug output (Kees Cook)   
  - media: drivers/media/dvb-core: copy user arrays safely (Philipp Stanner)   
  - fs: binfmt_elf_efpic: don't use missing interpreter's properties (Max Filippov)   
  - media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil)   
  - quota: Remove BUG_ON from dqget() (Jan Kara)   
  - fuse: fix UAF in rcu pathwalks (Al Viro)   
  - afs: fix __afs_break_callback() / afs_drop_open_mmap() race (Al Viro)   
  - ext4: do not trim the group with corrupted block bitmap (Baokun Li)   
  - nvmet-trace: avoid dereferencing pointer too early (Daniel Wagner)   
  - powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (Kunwu Chan)   
  - memory: tegra: Skip SID programming if SID registers aren't set (Ashish Mhetre)   
  - arm64: Fix KASAN random tag seed initialization (Samuel Holland)   
  - hwmon: (ltc2992) Avoid division by zero (Antoniu Miclaus)   
  - IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock (Chengfeng Ye)   
  - wifi: iwlwifi: fw: Fix debugfs command sending (Mukesh Sisodiya)   
  - wifi: iwlwifi: abort scan when rfkill on but device enabled (Miri Korenblit)   
  - gfs2: setattr_chown: Add missing initialization (Andreas Gruenbacher)   
  - scsi: spi: Fix sshdr use (Mike Christie)   
  - media: qcom: venus: fix incorrect return value (Hans Verkuil)   
  - binfmt_misc: cleanup on filesystem umount (Christian Brauner)   
  - staging: ks7010: disable bh on tx_dev_lock (Chengfeng Ye)   
  - drm/amd/display: Validate hw_points_num before using it (Alex Hung)   
  - staging: iio: resolver: ad2s1210: fix use before initialization (David Lechner)   
  - media: radio-isa: use dev_name to fill in bus_info (Hans Verkuil)   
  - i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer (Jarkko Nikula)   
  - i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out (Jarkko Nikula)   
  - s390/smp,mcck: fix early IPI handling (Heiko Carstens)   
  - RDMA/rtrs: Fix the problem of variable not initialized fully (Zhu Yanjun)   
  - i2c: riic: avoid potential division by zero (Wolfram Sang)   
  - wifi: cw1200: Avoid processing an invalid TIM IE (Jeff Johnson)   
  - wifi: mac80211: fix BA session teardown race (Johannes Berg)   
  - wifi: cfg80211: check wiphy mutex is held for wdev mutex (Johannes Berg)   
  - ssb: Fix division by zero issue in ssb_calc_clock_rate (Rand Deeb)   
  - ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (Parsa Poorshikhian)   
  - net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang) [Orabug: 37029097] {CVE-2024-44995}
  - net: hns3: fix wrong use of semaphore up (Jie Wang)   
  - netfilter: nf_queue: drop packets with cloned unconfirmed conntracks (Florian Westphal)   
  - netfilter: flowtable: initialise extack before use (Donald Hunter) [Orabug: 37070666] {CVE-2024-45018}
  - netfilter: allow ipv6 fragments to arrive on different devices (Tom Hughes)   
  - mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size (Eugene Syromiatnikov)   
  - mlxbf_gige: disable RX filters until RX path initialized (David Thompson)   
  - net: dsa: vsc73xx: check busy flag in MDIO operations (Pawel Dembicki)   
  - net: dsa: vsc73xx: use read_poll_timeout instead delay loop (Pawel Dembicki)   
  - net: dsa: vsc73xx: pass value in phy_write operation (Pawel Dembicki)   
  - net: axienet: Fix register defines comment description (Radhey Shyam Pandey)   
  - atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter) [Orabug: 37029103] {CVE-2024-44998}
  - net/mlx5e: Correctly report errors for ethtool rx flows (Cosmin Ratiu)   
  - igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (Faizal Rahim)   
  - igc: remove I226 Qbv BaseTime restriction (Muhammad Husaini Zulkifli)   
  - igc: Correct the launchtime offset (Muhammad Husaini Zulkifli)   
  - s390/uv: Panic for set and remove shared access UVC errors (Claudio Imbrenda)   
  - drm/amdgpu/jpeg2: properly set atomics vmid field (Alex Deucher)   
  - memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [Orabug: 37070671] {CVE-2024-45021}
  - drm/amdgpu: Actually check flags for all context ops. (Bas Nieuwenhuizen)   
  - btrfs: tree-checker: add dev extent item checks (Qu Wenruo)   
  - selinux: fix potential counting error in avc_add_xperms_decision() (Zhen Lei)   
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Al Viro) [Orabug: 37070679] {CVE-2024-45025}
  - bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin)   
  - btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() (Alexander Lobakin)   
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Alexander Lobakin)   
  - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64() (Alexander Lobakin)   
  - vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [Orabug: 37029118] {CVE-2024-45003}
  - dm persistent data: fix memory allocation failure (Mikulas Patocka)   
  - dm resume: don't return EINVAL when signalled (Khazhismel Kumykov)   
  - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE (Haibo Xu)   
  - s390/dasd: fix error recovery leading to data corruption on ESE devices (Stefan Haberland) [Orabug: 37070686] {CVE-2024-45026}
  - thunderbolt: Mark XDomain as unplugged when router is removed (Mika Westerberg) [Orabug: 37070774] {CVE-2024-46702}
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Mathias Nyman) [Orabug: 37029124] {CVE-2024-45006}
  - ALSA: usb-audio: Support Yamaha P-125 quirk entry (Juan José Arboleda)   
  - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (Lianqin Hu)   
  - char: xillybus: Check USB endpoints when probing device (Eli Billauer) [Orabug: 37070649] {CVE-2024-45011}
  - char: xillybus: Refine workqueue handling (Eli Billauer)   
  - char: xillybus: Don't destroy workqueue from work item running on it (Eli Billauer) [Orabug: 37029128] {CVE-2024-45007}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn) [Orabug: 37017950] {CVE-2024-44947}
  - LTS version: v5.15.165 (Vijayendra Suman)   
  - Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" (Niklas Cassel)   
  - media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" (Sean Young)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode (Michael Walle)   
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Eric Dumazet) [Orabug: 36897690] {CVE-2024-42114}
  - binfmt_flat: Fix corruption when not offsetting data start (Kees Cook) [Orabug: 37029015] {CVE-2024-44966}
  - usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. (Chris Wulff)   
  - nvme/pci: Add APST quirk for Lenovo N60z laptop (WangYuli)   
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [Orabug: 36984016] {CVE-2024-43882}
  - arm64: cpufeature: Fix the visibility of compat hwcaps (Amit Daniel Kachhap)   
  - arm64: dts: qcom: msm8996: correct #clock-cells for QMP PHY nodes (Dmitry Baryshkov)   
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. (Mahesh Salgaonkar) [Orabug: 36897773] {CVE-2024-42126}
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [Orabug: 36953968] {CVE-2024-42259}
  - mptcp: fully established after ADD_ADDR echo on MPJ (Matthieu Baerts (NGI0))   
  - wifi: mac80211: check basic rates validity (Johannes Berg)   
  - PCI: dwc: Restore MSI Receiver mask during resume (Jisheng Zhang)   
  - net: stmmac: Enable mac_managed_pm phylink config (Shenwei Wang)   
  - netfilter: nf_tables: prefer nft_chain_validate (Florian Westphal) [Orabug: 36896845] {CVE-2024-41042}
  - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal)   
  - netfilter: nf_tables: bail out if stateful expression provides no .clone (Pablo Neira Ayuso)   
  - netfilter: nf_tables: set element extended ACK reporting support (Pablo Neira Ayuso)   
  - tls: fix race between tx work scheduling and socket close (Jakub Kicinski) [Orabug: 36529710] {CVE-2024-26585}
  - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (Lukas Wunner) [Orabug: 36964228] {CVE-2024-42302}
  - btrfs: fix double inode unlock for direct IO sync writes (Filipe Manana) [Orabug: 37195039] {CVE-2024-43885}
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Christoph Hellwig) [Orabug: 36809257] {CVE-2024-39472}
  - btrfs: fix corruption after buffer fault in during direct IO append write (Filipe Manana)   
  - selftests: mptcp: join: check backup support in signal endp (Matthieu Baerts (NGI0))   
  - selftests: mptcp: join: validate backup in MPJ (Matthieu Baerts (NGI0))   
  - mptcp: pm: fix backup support in signal endpoints (Matthieu Baerts (NGI0))   
  - mptcp: export local_address (Geliang Tang)   
  - mptcp: pm: only set request_bkup flag when sending MP_PRIO (Matthieu Baerts (NGI0))   
  - mptcp: fix bad RCVPRUNED mib accounting (Paolo Abeni)   
  - mptcp: mib: count MPJ with backup flag (Matthieu Baerts (NGI0))   
  - mptcp: fix NL PM announced address accounting (Paolo Abeni)   
  - mptcp: distinguish rcv vs sent backup flag in requests (Matthieu Baerts (NGI0))   
  - mptcp: sched: check both directions for backup (Matthieu Baerts (NGI0))   
  - drm/mgag200: Set DDC timeout in milliseconds (Thomas Zimmermann)   
  - drm/bridge: analogix_dp: properly handle zero sized AUX transactions (Lucas Stach)   
  - sched/smt: Fix unbalance sched_smt_present dec/inc (Yang Yingliang) [Orabug: 37028981] {CVE-2024-44958}
  - sched/smt: Introduce sched_smt_present_inc/dec() helper (Yang Yingliang)   
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [Orabug: 37028935] {CVE-2024-44948}
  - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Waiman Long) [Orabug: 36992992] {CVE-2024-43889}
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [Orabug: 36992997] {CVE-2024-43890}
  - power: supply: axp288_charger: Round constant_charge_voltage writes down (Hans de Goede)   
  - power: supply: axp288_charger: Fix constant_charge_voltage writes (Hans de Goede)   
  - genirq/irqdesc: Honor caller provided affinity in alloc_desc() (Shay Drory)   
  - irqchip/xilinx: Fix shift out of bounds (Radhey Shyam Pandey)   
  - kcov: properly check for softirq context (Andrey Konovalov)   
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [Orabug: 36993008] {CVE-2024-43893}
  - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() (Thomas Gleixner)   
  - ntp: Safeguard against time_constant overflow (Justin Stitt)   
  - irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' (Arseniy Krasnov)   
  - irqchip/meson-gpio: support more than 8 channels gpio irq (Qianggui Song)   
  - clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() (Paul E. McKenney)   
  - clocksource: Scale the watchdog read retries automatically (Feng Tang)   
  - torture: Enable clocksource watchdog with "tsc=watchdog" (Paul E. McKenney)   
  - clocksource: Reduce the default clocksource_watchdog() retries to 2 (Waiman Long)   
  - ntp: Clamp maxerror and esterror to operating range (Justin Stitt)   
  - vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler (Jason Wang)   
  - tick/broadcast: Move per CPU pointer access into the atomic section (Thomas Gleixner) [Orabug: 37195086] {CVE-2024-44968}
  - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic (Vamshi Gajjela)   
  - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)   
  - usb: gadget: u_serial: Set start_delayed during suspend (Prashanth K)   
  - usb: gadget: core: Check for unset descriptor (Chris Wulff) [Orabug: 37028987] {CVE-2024-44960}
  - USB: serial: debug: do not echo input by default (Marek Marczykowski-Górecki)   
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [Orabug: 36992970] {CVE-2024-43883}
  - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (Takashi Iwai)   
  - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (Steven 'Steve' Kendall)   
  - ALSA: line6: Fix racy access to midibuf (Takashi Iwai) [Orabug: 37028956] {CVE-2024-44954}
  - drm/client: fix null pointer dereference in drm_client_modeset_probe (Ma Ke) [Orabug: 36993013] {CVE-2024-43894}
  - ALSA: usb-audio: Re-add ScratchAmp quirk entries (Takashi Iwai)   
  - spi: spi-fsl-lpspi: Fix scldiv calculation (Stefan Wahren)   
  - kprobes: Fix to check symbol prefixes correctly (Masami Hiramatsu (Google))   
  - bpf: kprobe: remove unused declaring of bpf_kprobe_override (Menglong Dong)   
  - i2c: smbus: Send alert notifications to all devices if source not found (Guenter Roeck)   
  - spi: spidev: Add missing spi_device_id for bh2228fv (Geert Uytterhoeven)   
  - ASoC: codecs: wsa881x: Correct Soundwire ports mask (Krzysztof Kozlowski)   
  - ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (Krzysztof Kozlowski)   
  - i2c: smbus: Improve handling of stuck alerts (Guenter Roeck)   
  - arm64: cputype: Add Cortex-A725 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X1C definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X925 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-A720 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X3 definitions (Mark Rutland)   
  - arm64: cputype: Add Neoverse-V3 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X4 definitions (Mark Rutland)   
  - arm64: barrier: Restore spec_bar() macro (Mark Rutland)   
  - arm64: Add Neoverse-V2 part (Besar Wicaksono)   
  - arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space (James Morse)   
  - ext4: fix wrong unit use in ext4_mb_find_by_goal (Kemeng Shi)   
  - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime (Zheng Zucheng)   
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)   
  - profiling: remove profile=sleep support (Tetsuo Handa)   
  - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington)   
  - s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [Orabug: 37029019] {CVE-2024-44969}
  - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (Kemeng Shi)   
  - ext4: fix uninitialized variable in ext4_inlinedir_to_tree (Xiaxi Shen)   
  - media: uvcvideo: Fix the bandwdith quirk on USB 3.x (Michal Pecio)   
  - media: uvcvideo: Ignore empty TS packets (Ricardo Ribalda)   
  - drm/amd/display: Add null checker before passing variables (Alex Hung) [Orabug: 36993047] {CVE-2024-43902}
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (Ma Jun) [Orabug: 36993077] {CVE-2024-43907}
  - drm/amdgpu: Fix the null pointer dereference to ras_manager (Ma Jun) [Orabug: 36993083] {CVE-2024-43908}
  - drm/amdgpu/pm: Fix the null pointer dereference for smu7 (Ma Jun) [Orabug: 36993089] {CVE-2024-43909}
  - btrfs: fix bitmap leak when loading free space cache on duplicate entry (Filipe Manana)   
  - wifi: nl80211: don't give key data to userspace (Johannes Berg)   
  - udf: prevent integer overflow in udf_bitmap_free_blocks() (Roman Smirnov)   
  - PCI: Add Edimax Vendor ID to pci_ids.h (FUJITA Tomonori)   
  - selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT (Yonghong Song)   
  - ACPI: SBS: manage alarm sysfs attribute through psy core (Thomas Weißschuh)   
  - ACPI: battery: create alarm sysfs attribute atomically (Thomas Weißschuh)   
  - clocksource/drivers/sh_cmt: Address race condition for clock events (Niklas Söderlund)   
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [Orabug: 36993126] {CVE-2024-43914}
  - md: do not delete safemode_timer in mddev_suspend (Li Nan)   
  - rcutorture: Fix rcu_torture_fwd_cb_cr() data race (Paul E. McKenney)   
  - net: fec: Stop PPS on driver remove (Csókás, Bence)   
  - l2tp: fix lockdep splat (James Chapman)   
  - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (Joe Hattori) [Orabug: 37029031] {CVE-2024-44971}
  - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (Dmitry Antipov)   
  - net: linkwatch: use system_unbound_wq (Eric Dumazet)   
  - net: bridge: mcast: wait for previous gc cycles when removing port (Nikolay Aleksandrov) [Orabug: 36993143] {CVE-2024-44934}
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [Orabug: 36983958] {CVE-2024-43861}
  - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Kuniyuki Iwashima) [Orabug: 36993146] {CVE-2024-44935}
  - sctp: move hlist_node and hashent out of sctp_ep_common (Xin Long)   
  - x86/mm: Fix pti_clone_entry_text() for i386 (Peter Zijlstra)   
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [Orabug: 37029011] {CVE-2024-44965}
  - irqchip/mbigen: Fix mbigen node address layout (Yipeng Zou)   
  - netfilter: ipset: Add list flush to cancel_gc (Alexander Maltsev)   
  - mptcp: fix duplicate data handling (Paolo Abeni)   
  - r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY (Heiner Kallweit)   
  - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (Ma Ke)   
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling (Zack Rusin) [Orabug: 36983964] {CVE-2024-43863}
  - Revert "ALSA: firewire-lib: operate for period elapse event in process context" (Edmund Raile)   
  - Revert "ALSA: firewire-lib: obsolete workqueue for period update" (Edmund Raile)   
  - ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G (Mavroudis Chatzilazaridis)   
  - ALSA: usb-audio: Correct surround channels in UAC1 channel map (Takashi Iwai)   
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (Al Viro) [Orabug: 36963807] {CVE-2024-42265}
  - HID: wacom: Modify pen IDs (Tatsunosuke Tobita)   
  - platform/chrome: cros_ec_proto: Lock device when updating MKBP version (Patryk Duda)   
  - power: supply: bq24190_charger: replace deprecated strncpy with strscpy (Justin Stitt)   
  - riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() (Zhe Qiao) [Orabug: 36963814] {CVE-2024-42267}
  - ipv6: fix ndisc_is_useropt() handling for PIO (Maciej Żenczykowski)   
  - net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (Shahar Shitrit)   
  - net: mvpp2: Don't re-use loop iterator (Dan Carpenter)   
  - net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [Orabug: 36964005] {CVE-2024-42271}
  - rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). (Kuniyuki Iwashima)   
  - rtnetlink: enable alt_ifname for setlink/newlink (Florent Fourcot)   
  - ALSA: hda: conexant: Fix headset auto detect fail in the polling mode (songxiebing)   
  - drm/vmwgfx: Fix overlay when using Screen Targets (Ian Forbes)   
  - drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [Orabug: 36983978] {CVE-2024-43867}
  - MIPS: dts: loongson: Fix ls2k1000-rtc interrupt (Jiaxun Yang)   
  - MIPS: dts: loongson: Fix liointc IRQ polarity (Jiaxun Yang)   
  - MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a (Jiaxun Yang)   
  - MIPS: Loongson64: DTS: Add RTC support to Loongson-2K1000 (Binbin Zhou)   
  - remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init (Aleksandr Mishin)   
  - drm/dp_mst: Fix all mstb marked as not probed after suspend/resume (Wayne Lin)   
  - irqchip/imx-irqsteer: Handle runtime power management correctly (Shenwei Wang) [Orabug: 36964084] {CVE-2024-42290}
  - irqchip/imx-irqsteer: Add runtime PM support (Lucas Stach)   
  - irqchip/imx-irqsteer: Constify irq_chip struct (Lucas Stach)   
  - irqdomain: Fixed unbalanced fwnode get and put (Herve Codina)   
  - leds: triggers: Flush pending brightness before activating trigger (Thomas Weißschuh)   
  - leds: trigger: Call synchronize_rcu() before calling trig->activate() (Hans de Goede)   
  - leds: trigger: Store brightness set by led_trigger_event() (Heiner Kallweit)   
  - leds: trigger: Remove unused function led_trigger_rename_static() (Heiner Kallweit)   
  - leds: trigger: use RCU to protect the led_cdevs list (Johannes Berg)   
  - drivers: soc: xilinx: check return status of get_api_version() (Jay Buddhabhatti)   
  - soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver (Michael Tretter)   
  - ext4: check the extent status again before inserting delalloc block (Zhang Yi)   
  - ext4: factor out a common helper to query extent map (Zhang Yi)   
  - ext4: convert to exclusive lock while inserting delalloc extents (Zhang Yi)   
  - ext4: refactor ext4_da_map_blocks() (Zhang Yi)   
  - ext4: make ext4_es_insert_extent() return void (Baokun Li)   
  - sysctl: always initialize i_uid/i_gid (Thomas Weißschuh) [Orabug: 36964269] {CVE-2024-42312}
  - arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB (Krishna Kurapati)   
  - arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB (Krishna Kurapati)   
  - arm64: dts: qcom: msm8998: switch USB QMP PHY to new style of bindings (Dmitry Baryshkov)   
  - arm64: dts: qcom: msm8998: drop USB PHY clock index (Johan Hovold)   
  - arm64: dts: qcom: msm8996: Move '#clock-cells' to QMP PHY child node (Shawn Guo)   
  - powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC (Esben Haabendal)   
  - fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT (Seth Forshee (DigitalOcean))   
  - nvme-pci: add missing condition check for existence of mapped data (Leon Romanovsky) [Orabug: 36964021] {CVE-2024-42276}
  - nvme: separate command prep and issue (Jens Axboe)   
  - nvme: split command copy into a helper (Jens Axboe)   
  - iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en (Artem Chernyshev) [Orabug: 36964025] {CVE-2024-42277}
  - ceph: fix incorrect kmalloc size of pagevec mempool (ethanwu)   
  - ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable (Pierre-Louis Bossart)   
  - spi: spidev: add correct compatible for Rohm BH2228FV (Conor Dooley)   
  - spi: spidev: order compatibles alphabetically (Krzysztof Kozlowski)   
  - spidev: Add Silicon Labs EM3581 device compatible (Vincent Tremblay)   
  - spi: spidev: Replace OF specific code by device property API (Andy Shevchenko)   
  - spi: spidev: Replace ACPI specific code by device_get_match_data() (Andy Shevchenko)   
  - spi: spidev: Make probe to fail early if a spidev compatible is used (Javier Martinez Canillas)   
  - lirc: rc_dev_get_from_fd(): fix file leak (Al Viro)   
  - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (Al Viro)   
  - apparmor: Fix null pointer deref when receiving skb during sock creation (Xiao Liang)   
  - mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [Orabug: 36964031] {CVE-2024-42280}
  - bpf: Fix a segment issue when downgrading gso_size (Fred Li) [Orabug: 36964037] {CVE-2024-42281}
  - net: nexthop: Initialize all fields in dumped nexthops (Petr Machata) [Orabug: 36964043] {CVE-2024-42283}
  - net: stmmac: Correct byte order of perfect_match (Simon Horman)   
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [Orabug: 36964046] {CVE-2024-42284}
  - netfilter: nft_set_pipapo_avx2: disable softinterrupts (Florian Westphal)   
  - net: bonding: correctly annotate RCU in bond_should_notify_peers() (Johannes Berg)   
  - ipv4: Fix incorrect source address in Record Route option (Ido Schimmel)   
  - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later (Gregory CLEMENT)   
  - bpf, events: Use prog to emit ksymbol event for main program (Hou Tao)   
  - dma: fix call order in dmam_free_coherent (Lance Richardson) [Orabug: 36964522] {CVE-2024-43856}
  - libbpf: Fix no-args func prototype BTF dumping syntax (Andrii Nakryiko)   
  - um: time-travel: fix signal blocking race/hang (Johannes Berg)   
  - um: time-travel: fix time-travel-start option (Johannes Berg)   
  - phy: cadence-torrent: Check return value on register read (Ma Ke)   
  - dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels (Vignesh Raghavendra)   
  - jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park) [Orabug: 36964529] {CVE-2024-43858}
  - kdb: address -Wformat-security warnings (Arnd Bergmann)   
  - kernel: rerun task_work while freezing in get_signal() (Pavel Begunkov)   
  - io_uring/io-wq: limit retrying worker initialisation (Pavel Begunkov)   
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [Orabug: 36964202] {CVE-2024-42295}
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 (WangYuli)   
  - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables (Hilda Wu)   
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov)   
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov)   
  - drm/panfrost: Mark simple_ondemand governor as softdep (Dragan Simic)   
  - MIPS: Loongson64: Test register availability before use (Jiaxun Yang)   
  - MIPS: Loongson64: reset: Prioritise firmware service (Jiaxun Yang)   
  - MIPS: Loongson64: Remove memory node for builtin-dtb (Jiaxun Yang)   
  - MIPS: Loongson64: env: Hook up Loongsson-2K (Jiaxun Yang)   
  - MIPS: dts: loongson: Fix GMAC phy node (Jiaxun Yang)   
  - MIPS: ip30: ip30-console: Add missing include (Jiaxun Yang)   
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [Orabug: 36964536] {CVE-2024-43860}
  - remoteproc: stm32_rproc: Fix mailbox interrupts queuing (Gwenael Treuveur)   
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov)   
  - selftests/sigaltstack: Fix ppc64 GCC build (Michael Ellerman)   
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [Orabug: 36964053] {CVE-2024-42285}
  - platform: mips: cpu_hwmon: Disable driver on unsupported hardware (Jiaxun Yang)   
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (Thomas Gleixner)   
  - rtc: isl1208: Fix return value of nvmem callbacks (Joy Chakraborty)   
  - drm/i915/dp: Reset intel_dp->link_trained before retraining the link (Imre Deak)   
  - drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell (Alex Deucher)   
  - drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 (Nitin Gote)   
  - perf/x86/intel/pt: Fix a topa_entry base address calculation (Adrian Hunter)   
  - perf/x86/intel/pt: Fix topa_entry base length (Marco Cavenati)   
  - perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR (Kan Liang)   
  - perf: Fix event leak upon exit (Frederic Weisbecker) [Orabug: 36983986] {CVE-2024-43870}
  - rtc: cmos: Fix return value of nvmem callbacks (Joy Chakraborty)   
  - mm/numa_balancing: teach mpol_to_str about the balancing mode (Tvrtko Ursulin)   
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [Orabug: 36983990] {CVE-2024-43871}
  - devres: Fix devm_krealloc() wasting memory (Zijun Hu)   
  - gve: Fix an edge case for TSO skb validity check (Bailey Forrest)   
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [Orabug: 37203371] {CVE-2024-42292}
  - kbuild: Fix '-S -c' in x86 stack protector scripts (Nathan Chancellor)   
  - decompress_bunzip2: fix rare decompression failure (Ross Lagerwall)   
  - ubi: eba: properly rollback inside self_check_eba (Fedor Pchelkin)   
  - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use (Bastien Curutchet)   
  - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed (Huacai Chen) [Orabug: 36964218] {CVE-2024-42299}
  - dev/parport: fix the array out-of-bounds risk (tuhaowen) [Orabug: 36964222] {CVE-2024-42301}
  - binder: fix hang of unregistered readers (Carlos Llamas)   
  - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (Manivannan Sadhasivam)   
  - PCI: dw-rockchip: Fix initial PERST# GPIO value (Niklas Cassel)   
  - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (Wei Liu)   
  - hwrng: amd - Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - tools/memory-model: Fix bug in lock.cat (Alan Stern)   
  - ALSA: usb-audio: Add a quirk for Sonix HD USB Camera (wangdicheng)   
  - ALSA: usb-audio: Move HD Webcam quirk to the right place (Takashi Iwai)   
  - ALSA: usb-audio: Fix microphone sound on HD webcam. (wangdicheng)   
  - KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() (Sean Christopherson)   
  - media: uvcvideo: Fix integer overflow calculating timestamp (Ricardo Ribalda)   
  - jbd2: make jbd2_journal_get_max_txn_bufs() internal (Jan Kara)   
  - leds: ss4200: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - wifi: mwifiex: Fix interface type change (Rafael Beims)   
  - selftests/landlock: Add cred_transfer test (Mickaël Salaün)   
  - io_uring: tighten task exit cancellations (Pavel Begunkov)   
  - ext4: make sure the first directory block is not a hole (Baokun Li) [Orabug: 36964231] {CVE-2024-42304}
  - ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [Orabug: 36964236] {CVE-2024-42305}
  - m68k: amiga: Turn off Warp1260 interrupts during boot (Paolo Pisati)   
  - udf: Avoid using corrupted block bitmap buffer (Jan Kara) [Orabug: 36964241] {CVE-2024-42306}
  - task_work: Introduce task_work_cancel() again (Frederic Weisbecker)   
  - task_work: s/task_work_cancel()/task_work_cancel_func()/ (Frederic Weisbecker)   
  - apparmor: use kvfree_sensitive to free data->data (Fedor Pchelkin)   
  - sched/fair: Use all little CPUs for CPU-bound workloads (Pierre Gondois)   
  - drm/amd/display: Check for NULL pointer (Sung Joon Kim) [Orabug: 36964246] {CVE-2024-42308}
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [Orabug: 36964252] {CVE-2024-42309}
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [Orabug: 36964258] {CVE-2024-42310}
  - ext2: Verify bitmap and itable block numbers before using them (Jan Kara)   
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [Orabug: 36964264] {CVE-2024-42311}
  - ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error (Igor Pylypiv)   
  - media: venus: fix use after free in vdec_close (Dikshita Agarwal) [Orabug: 36964274] {CVE-2024-42313}
  - char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (Joe Hattori)   
  - fuse: verify {g,u}id mount options correctly (Eric Sandeen)   
  - sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks (Tejun Heo)   
  - ipv6: take care of scope when choosing the src addr (Nicolas Dichtel)   
  - af_packet: Handle outgoing VLAN packets without hardware offloading (Chengen Du)   
  - net: netconsole: Disable target before netpoll cleanup (Breno Leitao)   
  - tick/broadcast: Make takeover of broadcast hrtimer reliable (Yu Liao)   
  - dt-bindings: thermal: correct thermal zone node name limit (Krzysztof Kozlowski)   
  - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer (Tetsuo Handa)   
  - mm/hugetlb: fix possible recursive locking detected warning (Miaohe Lin)   
  - landlock: Don't lose track of restrictions on cred_transfer (Jann Horn) [Orabug: 36964283] {CVE-2024-42318}
  - fs/ntfs3: Missed error return (Konstantin Komarov)   
  - rtc: interface: Add RTC offset to alarm after fix-up (Csókás, Bence)   
  - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (Ryusuke Konishi)   
  - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP (David Hildenbrand)   
  - fs/ntfs3: Fix field-spanning write in INDEX_HDR (Konstantin Komarov)   
  - fs/ntfs3: Replace inode_trylock with inode_lock (Konstantin Komarov)   
  - pinctrl: freescale: mxs: Fix refcount of child (Peng Fan)   
  - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - pinctrl: ti: ti-iodelay: Drop if block with always false condition (Uwe Kleine-König)   
  - pinctrl: single: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - pinctrl: core: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - pinctrl: rockchip: update rk3308 iomux routes (Dmitry Yashin)   
  - fs/ntfs3: Fix getting file type (Konstantin Komarov)   
  - fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting (Konstantin Komarov)   
  - fs/ntfs3: Fix transform resident to nonresident for compressed files (Konstantin Komarov)   
  - fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT (Konstantin Komarov)   
  - fs/ntfs3: Use ALIGN kernel macro (Konstantin Komarov)   
  - net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports (Martin Willi)   
  - net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports (Martin Willi)   
  - netfilter: nf_set_pipapo: fix initial map fill (Florian Westphal)   
  - netfilter: nft_set_pipapo: constify lookup fn args where possible (Florian Westphal)   
  - netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [Orabug: 37013754] {CVE-2024-44944}
  - bnxt_re: Fix imm_data endianness (Jack Wang)   
  - RDMA/hns: Fix insufficient extend DB for VFs. (Chengchang Tang)   
  - RDMA/hns: Fix undifined behavior caused by invalid max_sge (Chengchang Tang)   
  - RDMA/hns: Fix missing pagesize and alignment check in FRMR (Chengchang Tang)   
  - macintosh/therm_windtunnel: fix module unload. (Nick Bowler)   
  - powerpc/xmon: Fix disassembly CPU feature checks (Michael Ellerman)   
  - net: missing check virtio (Denis Arefev) [Orabug: 36964424] {CVE-2024-43817}
  - vhost/vsock: always initialize seqpacket_allow (Michael S. Tsirkin) [Orabug: 36983999] {CVE-2024-43873}
  - PCI: endpoint: Clean up error handling in vpci_scan_bus() (Dan Carpenter) [Orabug: 36984004] {CVE-2024-43875}
  - Input: elan_i2c - do not leave interrupt disabled on suspend failure (Dmitry Torokhov)   
  - RDMA/device: Return error earlier if port in not valid (Leon Romanovsky)   
  - mtd: make mtd_test.c a separate module (Arnd Bergmann)   
  - ASoC: max98088: Check for clk_prepare_enable() error (Chen Ni)   
  - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs (Honggang LI)   
  - RDMA/mlx4: Fix truncated output warning in alias_GUID.c (Leon Romanovsky)   
  - RDMA/mlx4: Fix truncated output warning in mad.c (Leon Romanovsky)   
  - Input: qt1050 - handle CHIP_ID reading error (Andrei Lalaev)   
  - RDMA/cache: Release GID table even if leak is detected (Leon Romanovsky)   
  - RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE (Chiara Meiohas)   
  - coresight: Fix ref leak when of_coresight_parse_endpoint() fails (James Clark)   
  - clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock (Taniya Das)   
  - clk: qcom: branch: Add helper functions for setting retain bits (Konrad Dybcio)   
  - PCI: Fix resource double counting on remove & rescan (Ilpo Järvinen)   
  - SUNRPC: Fixup gss_status tracepoint error output (Benjamin Coddington)   
  - sparc64: Fix incorrect function signature and add prototype for prom_cif_init (Andreas Larsson)   
  - ext4: avoid writing unitialized memory to disk in EA inodes (Jan Kara)   
  - ext4: don't track ranges in fast_commit if inode has inlined data (Luis Henriques (SUSE))   
  - ext4: return early for non-eligible fast_commit track events (Ritesh Harjani)   
  - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Olga Kornievskaia)   
  - SUNRPC: avoid soft lockup when transmitting UDP to reachable server. (NeilBrown)   
  - xprtrdma: Fix rpcrdma_reqs_reset() (Chuck Lever)   
  - mfd: omap-usb-tll: Use struct_size to allocate tll (Javier Carrasco)   
  - mfd: rsmu: Split core code into separate module (Arnd Bergmann)   
  - perf intel-pt: Fix exclude_guest setting (Adrian Hunter)   
  - perf intel-pt: Fix aux_watermark calculation for 64-bit size (Adrian Hunter)   
  - media: venus: flush all buffers in output plane streamoff (Dikshita Agarwal)   
  - ext4: fix infinite loop when replaying fast_commit (Luis Henriques (SUSE))   
  - Revert "leds: led-core: Fix refcount leak in of_led_get()" (Luca Ceresoli)   
  - drm/qxl: Add check for drm_cvt_mode (Chen Ni) [Orabug: 36964455] {CVE-2024-43829}
  - drm/etnaviv: fix DMA direction handling for cached RW buffers (Lucas Stach)   
  - perf report: Fix condition in sort__sym_cmp() (Namhyung Kim)   
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [Orabug: 36964458] {CVE-2024-43830}
  - drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property (Hsiao Chien Sung)   
  - drm/mediatek: Add missing plane settings when async update (Hsiao Chien Sung)   
  - media: renesas: vsp1: Store RPF partition configuration per RPF instance (Laurent Pinchart)   
  - media: renesas: vsp1: Fix _irqsave and _irq mix (Laurent Pinchart)   
  - media: uvcvideo: Override default flags (Daniel Schaefer)   
  - saa7134: Unchecked i2c_transfer function result fixed (Aleksandr Burakov)   
  - media: i2c: Fix imx412 exposure control (Bryan O'Donoghue)   
  - media: imon: Fix race getting ictx->lock (Ricardo Ribalda)   
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (Zheng Yejian)   
  - drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() (Douglas Anderson)   
  - drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators (Douglas Anderson)   
  - drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit (Friedrich Vock)   
  - drm/amd/pm: Fix aldebaran pcie speed reporting (Lijo Lazar)   
  - xdp: fix invalid wait context of page_pool_destroy() (Taehee Yoo) [Orabug: 36964469] {CVE-2024-43834}
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Amit Cohen)   
  - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o (Alan Maguire)   
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [Orabug: 36964479] {CVE-2024-43839}
  - bpf: annotate BTF show functions with __printf (Alan Maguire)   
  - selftests/bpf: Close fd in error path in drop_on_reuseport (Geliang Tang)   
  - locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers (John Stultz)   
  - wifi: virt_wifi: don't use strlen() in const context (Johannes Berg)   
  - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (Gaosheng Cui)   
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID (En-Wei Wu) [Orabug: 36964486] {CVE-2024-43841}
  - perf: Fix default aux_watermark calculation (Adrian Hunter)   
  - perf: Prevent passing zero nr_pages to rb_alloc_aux() (Adrian Hunter)   
  - perf: Fix perf_aux_size() for greater-than 32-bit size (Adrian Hunter)   
  - perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation (Adrian Hunter)   
  - netfilter: nf_tables: rise cap on SELinux secmark context (Pablo Neira Ayuso)   
  - libbpf: Checking the btf_type kind when fixing variable offsets (Donglin Peng)   
  - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down (Csókás, Bence)   
  - net: fec: Refactor: #define magic constants (Csókás Bence)   
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [Orabug: 36984009] {CVE-2024-43879}
  - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (Baochen Qiang)   
  - wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers (Baochen Qiang)   
  - mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors (Ido Schimmel)   
  - mlxsw: spectrum_acl_erp: Fix object nesting warning (Ido Schimmel) [Orabug: 36984012] {CVE-2024-43880}
  - lib: objagg: Fix general protection fault (Ido Schimmel) [Orabug: 36964494] {CVE-2024-43846}
  - selftests/bpf: Check length of recv in test_sockmap (Geliang Tang)   
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Guangguan Wang)   
  - tcp: fix races in tcp_v[46]_err() (Eric Dumazet)   
  - tcp: fix race in tcp_write_err() (Eric Dumazet)   
  - tcp: add tcp_done_with_error() helper (Eric Dumazet)   
  - tcp: annotate lockless access to sk->sk_err (Eric Dumazet)   
  - tcp: annotate lockless accesses to sk->sk_err_soft (Eric Dumazet)   
  - net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP (Hagar Hemdan)   
  - selftests/bpf: Fix prog numbers in test_sockmap (Geliang Tang)   
  - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (Samasth Norway Ananda)   
  - firmware: turris-mox-rwtm: Initialize completion before mailbox (Marek Behún)   
  - firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (Marek Behún)   
  - firmware: turris-mox-rwtm: Do not complete if there are no waiters (Marek Behún)   
  - vmlinux.lds.h: catch .bss..L* sections into BSS") (Christophe Leroy)   
  - ARM: spitz: fix GPIO assignment for backlight (Dmitry Torokhov)   
  - ARM: pxa: spitz: use gpio descriptors for audio (Arnd Bergmann)   
  - m68k: cmpxchg: Fix return value for default case in __arch_xchg() (Thorsten Blum)   
  - x86/xen: Convert comma to semicolon (Chen Ni)   
  - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages (Eero Tamminen)   
  - arm64: dts: amlogic: gx: correct hdmi clocks (Jerome Brunet)   
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625 (Chen-Yu Tsai)   
  - arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux (Rafał Miłecki)   
  - arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property (Chen-Yu Tsai)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix board reset (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node (Marco Felsch)   
  - arm64: dts: rockchip: Increase VOP clk rate on RK3328 (Jonas Karlman)   
  - soc: qcom: pdr: fix parsing of domains lists (Dmitry Baryshkov)   
  - soc: qcom: pdr: protect locator_addr with the main mutex (Dmitry Baryshkov) [Orabug: 36964502] {CVE-2024-43849}
  - memory: fsl_ifc: Make FSL_IFC config visible and selectable (Esben Haabendal)   
  - arm64: dts: qcom: msm8996: specify UFS core_clk frequencies (Dmitry Baryshkov)   
  - soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers (Stephen Boyd)   
  - arm64: dts: qcom: sm8250: add power-domain to UFS PHY (Dmitry Baryshkov)   
  - arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm845: add power-domain to UFS PHY (Dmitry Baryshkov)   
  - hwmon: (max6697) Fix swapped temp{1,8} critical alarms (Guenter Roeck)   
  - hwmon: (max6697) Fix underflow when writing limit attributes (Guenter Roeck)   
  - drm/meson: fix canvas release in bind function (Yao Zi)   
  - pwm: stm32: Always do lazy disabling (Uwe Kleine-König)   
  - hwmon: (adt7475) Fix default duty on fan is disabled (Wayne Tung)   
  - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - x86/pci/xen: Fix PCIBIOS_* return code handling (Ilpo Järvinen)   
  - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling (Ilpo Järvinen)   
  - x86/of: Return consistent error type from x86_of_pci_irq_enable() (Ilpo Järvinen)   
  - hfsplus: fix to avoid false alarm of circular locking (Chao Yu)   
  - block: initialize integrity buffer to zero before writing it to media (Christoph Hellwig) [Orabug: 36964514] {CVE-2024-43854}
  - block: cleanup bio_integrity_prep (Jinyoung Choi)   
  - block: refactor to use helper (Nitesh Shetty)   
  - platform/chrome: cros_ec_debugfs: fix wrong EC message version (Tzung-Bi Shih)   
  - f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [Orabug: 36964212] {CVE-2024-42297}
  - f2fs: fix return value of f2fs_convert_inline_inode() (Chao Yu) [Orabug: 36964207] {CVE-2024-42296}
  - LTS version: v5.15.164 (Vijayendra Suman)   
  - tap: add missing verification for short frame (Si-Wei Liu)   [Orabug: 36879156] {CVE-2024-41090} 
  - tun: add missing verification for short frame (Dongli Zhang)   [Orabug: 36879156] {CVE-2024-41091} 
  - wifi: rt2x00: use explicitly signed or unsigned types (Jason A. Donenfeld)   
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn) [Orabug: 36874755] {CVE-2024-41012} {CVE-2024-41020}
  - ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused (Shengjiu Wang)   
  - arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB (Krishna Kurapati)   
  - arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB (Krishna Kurapati)   
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (Seunghun Han)   
  - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (Edson Juliano Drosdeck)   
  - fs/ntfs3: Validate ff offset (lei lu) [Orabug: 36891672] {CVE-2024-41019}
  - jfs: don't walk off the end of ealist (lei lu) [Orabug: 36891666] {CVE-2024-41017}
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [Orabug: 36891654] {CVE-2024-41015}
  - Add gitignore file for samples/fanotify/ subdirectory (Linus Torvalds)   
  - docs: Fix formatting of literal sections in fanotify docs (Gabriel Krisman Bertazi)   
  - samples: Make fs-monitor depend on libc and headers (Gabriel Krisman Bertazi)   
  - samples: Add fs error monitoring example (Gabriel Krisman Bertazi)   
  - wifi: mac80211: disable softirqs for queued frame handling (Johannes Berg)   
  - mm/damon/core: merge regions aggressively when max_nr_regions is unmet (SeongJae Park)   
  - minmax: relax check to allow comparison between unsigned arguments and signed constants (David Laight)   
  - minmax: allow comparisons of 'int' against 'unsigned char/short' (David Laight)   
  - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (David Laight)   
  - minmax: fix header inclusions (Andy Shevchenko)   
  - minmax: clamp more efficiently by avoiding extra comparison (Jason A. Donenfeld)   
  - minmax: sanity check constant bounds when clamping (Jason A. Donenfeld)   
  - tracing: Define the is_signed_type() macro once (Bart Van Assche)   
  - spi: mux: set ctlr->bits_per_word_mask (David Lechner)   
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [Orabug: 36896968] {CVE-2024-41059}
  - selftests/vDSO: fix clang build errors and warnings (John Hubbard)   
  - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices (Uwe Kleine-König)   
  - riscv: stacktrace: fix usage of ftrace_graph_ret_addr() (Puranjay Mohan)   
  - fs: better handle deep ancestor chains in is_subdir() (Christian Brauner)   
  - drm/radeon: check bo_va->bo is non-NULL before using it (Pierre-Eric Pelloux-Prayer) [Orabug: 36896974] {CVE-2024-41060}
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [Orabug: 36896993] {CVE-2024-41063}
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (Xingui Yang)   
  - powerpc/eeh: avoid possible crash when edev->pdev changes (Ganesh Goudar) [Orabug: 36897001] {CVE-2024-41064}
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Anjali K) [Orabug: 36897008] {CVE-2024-41065}
  - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (Yunshui Jiang)   
  - net: usb: qmi_wwan: add Telit FN912 compositions (Daniele Palmas)   
  - ALSA: dmaengine_pcm: terminate dmaengine before synchronize (Shengjiu Wang)   
  - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx (Aivaz Latypov)   
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana) [Orabug: 36897343] {CVE-2024-41078}
  - platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB (Armin Wolf)   
  - platform/x86: lg-laptop: Change ACPI device id (Armin Wolf)   
  - platform/x86: lg-laptop: Remove LGEX0815 hotkey handling (Armin Wolf)   
  - platform/x86: wireless-hotkey: Add support for LG Airplane Button (Armin Wolf)   
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [Orabug: 36897031] {CVE-2024-41068}
  - can: kvaser_usb: fix return value for hif_usb_send_regout (Chen Ni)   
  - ASoC: ti: omap-hdmi: Fix too long driver name (Primoz Fiser)   
  - ASoC: ti: davinci-mcasp: Set min period size using FIFO config (Jai Luthra)   
  - ALSA: dmaengine: Synchronize dma channel after drop() (Jai Luthra)   
  - bytcr_rt5640 : inverse jack detect for Archos 101 cesium (Thomas GENTY)   
  - Input: i8042 - add Ayaneo Kun to i8042 quirk table (Tobias Jakobi)   
  - Input: elantech - fix touchpad state on resume for Lenovo N24 (Jonathan Denose)   
  - mips: fix compat_sys_lseek syscall (Arnd Bergmann)   
  - ALSA: hda/realtek: Add more codec ID to no shutup pins list (Kailang Yang)   
  - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency (Alexey Makhalov)   
  - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (Michael Ellerman) [Orabug: 36897047] {CVE-2024-41070}
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [Orabug: 36897311] {CVE-2024-41072}
  - nvme: avoid double free special payload (Chunguang Xu) [Orabug: 36897316] {CVE-2024-41073}
  - mei: demote client disconnect warning on suspend to debug (Alexander Usyskin)   
  - fs/file: fix the check in find_next_fd() (Yuntao Wang)   
  - kconfig: remove wrong expr_trans_bool() (Masahiro Yamada)   
  - kconfig: gconf: give a proper initial state to the Save button (Masahiro Yamada)   
  - null_blk: fix validation of block size (Andreas Hindborg) [Orabug: 36897338] {CVE-2024-41077}
  - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (Wei Li)   
  - ila: block BH in ila_output() (Eric Dumazet) [Orabug: 36897359] {CVE-2024-41081}
  - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() (Eric Dumazet)   
  - Input: silead - Always support 10 fingers (Hans de Goede)   
  - selftests/openat2: Fix build warnings on ppc64 (Michael Ellerman)   
  - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (Dmitry Antipov)   
  - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option (Ayala Beker)   
  - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd (Yedidya Benshimol)   
  - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup (Yedidya Benshimol)   
  - wifi: mac80211: handle tasklet frames before stopping (Johannes Berg)   
  - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (Nicolas Escande)   
  - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs (Dhananjay Ugwekar)   
  - ACPI: EC: Avoid returning AE_OK on errors in address space handler (Armin Wolf)   
  - ACPI: EC: Abort address space access upon error (Armin Wolf)   
  - scsi: qedf: Set qed_slowpath_params to zero before use (Saurav Kashyap)   
  - scsi: qedf: Wait for stag work during unload (Saurav Kashyap)   
  - scsi: qedf: Don't process stag work during unload and recovery (Saurav Kashyap)   
  - scsi: core: alua: I/O errors for ALUA state transitions (Martin Wilck)   
  - scsi: core: Fix a use-after-free (Bart Van Assche)   
  - bpf: Fix overrunning reservations in ringbuf (Daniel Borkmann) [Orabug: 36850238] {CVE-2024-41009}
  - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (Kuan-Wei Chiu)   
  - ARM: 9324/1: fix get_user() broken with veneer (Masahiro Yamada)   
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [Orabug: 36874755] {CVE-2024-41012} {CVE-2024-41020}
  - gcc-plugins: Rename last_stmt() for GCC 14+ (Kees Cook)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.5.el9uek]
changelog:
  - mm/hugetlb: fix adjusting poison page flag in non-HVO scenario (Jane Chu)  [Orabug: 37182268]  
  - x86/bugs: Adjust SRSO mitigation to new features (Boris Ostrovsky)  [Orabug: 37145844]  
  - net/mlx5: disable the 'fast unload' feature on Exadata systems (Qing Huang)  [Orabug: 37093170]  
  - NFS: remove revoked delegation from server's delegation list (Dai Ngo)  [Orabug: 36990366]  
  - perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() (Alexander Antonov)  [Orabug: 36882937]  {CVE-2023-52450}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.6.el9uek]
changelog:
  - ice: Add a per-VF limit on number of FDIR filters (Ahmed Zaki)  [Orabug: 36964088]  {CVE-2024-42291} 
  - scsi: lpfc: Fix a possible null pointer dereference (Huai-Yuan Liu)  [Orabug: 36964437]  {CVE-2024-43821} 
  - power: reset: pwr-mlxbf: support graceful shutdown (Asmaa Mnebhi)  [Orabug: 37208029]  
  - gpio: mlxbf3: Support shutdown() function (Asmaa Mnebhi)  [Orabug: 37208029]  
  - sdhci-of-dwcmshc: disable PM runtime in dwcmshc_remove() (Liming Sun)  [Orabug: 37208029]  
  - ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna)  [Orabug: 37199019]  
  - Revert "ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block" (Gautham Ananthakrishna)  [Orabug: 37199019]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-302.167.6.1.el9uek]
changelog:
  - blk-cgroup: Properly propagate the iostat update up the hierarchy (Waiman Long)  [Orabug: 37311274]  
  - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei)  [Orabug: 37311274]  
  - blk-cgroup: fix list corruption from resetting io stat (Ming Lei)  [Orabug: 37311274]  
  - blk-cgroup: Flush stats before releasing blkcg_gq (Ming Lei)  [Orabug: 37311274]  
  - blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() (Waiman Long)  [Orabug: 37311274]  
  - blk-cgroup: don't update io stat for root cgroup (Ming Lei)  [Orabug: 37311274]  
  - blk-cgroup: Optimize blkcg_rstat_flush() (Waiman Long)  [Orabug: 37311274]  
  - blk-cgroup: Return -ENOMEM directly in blkcg_css_alloc() error path (Waiman Long)  [Orabug: 37311274]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-301.163.2.el9uek]
changelog:
  - x86/efistub: Branch straight to kernel entry point from C code (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/efi: Make the deprecated EFI handover protocol optional (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi: fix panic in kdump kernel (Oleksandr Tymoshenko)  [Orabug: 36943196] {CVE-2024-35800}
  - efi: verify that variable services are supported (Johan Hovold)  [Orabug: 36943196]  
  - efi: libstub: Give efi_main() asmlinkage qualification (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Simplify IDT/GDT preserve/restore in the EFI thunk (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed, efi: Merge multiple definitions of image_offset into one (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move efi32_pe_entry() out of head_64.S (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move efi32_entry out of head_64.S (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move efi32_pe_entry into .text section (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move bootargs parsing out of 32-bit startup code (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move 32-bit entrypoint code into .text section (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Rename efi_thunk_64.S to efi-mixed.S (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi/x86: libstub: Make DXE calls mixed mode safe (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi: libstub: ensure allocated memory to be executable (Baskov Evgeniy)  [Orabug: 36943196]  
  - efi: libstub: declare DXE services table (Baskov Evgeniy)  [Orabug: 36943196]  
  - x86/compressed: Export and rename add_identity_map() (Michael Roth)  [Orabug: 36943196]  
  - x86/compressed/64: Detect/setup SEV/SME features earlier during boot (Michael Roth)  [Orabug: 36943196]  
  - x86/boot: Use MSR read/write helpers instead of inline assembly (Michael Roth)  [Orabug: 36943196]  
  - x86/boot: Introduce helpers for MSR reads/writes (Michael Roth)  [Orabug: 36943196]  
  - x86/compressed/acpi: Move EFI detection to helper (Michael Roth)  [Orabug: 36943196]  
  - efi/libstub: add prototype of efi_tcg2_protocol::hash_log_extend_event() (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi/libstub: x86/mixed: increase supported argument count (Ard Biesheuvel)  [Orabug: 36943196]  
  - uek: kabi: update x86_64 kABI files for new symbols (Yifei Liu)  [Orabug: 37033066]  
  - crypto/octeontx2: Use dynamic allocated memory region for lmtst (Bharat Bhushan)  [Orabug: 36725601]  
  - crypto/octeontx2: Initialize cptlfs device info once (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix rsfec stats reading (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-pf: Add NIXLF error/poison interrupt handlers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: dbg: Add debug prints for NIX AF interrupts (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: poll for tx link credits before link mode change (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: Do not support irq config for both edge (Suneel Garapati)  [Orabug: 36725601]  
  - octeontx2-af: Knobs for NPC default rule counters (Linu Cherian)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: Add Channel info to RPM map (Linu Cherian)  [Orabug: 36725601]  
  - Octeontx2-af: Skip overlap check for SPI field (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Modify SMQ flush sequence to drop packets (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - drivers: spi-cadence-xspi: Add error check for xfer logic register base (Petr Malat)  [Orabug: 36725601]  
  - octeontx2-af: Fix issue with GRE parsing (Kiran Kumar K)  [Orabug: 36725601]  
  - octeontx2-af: add shutdown function (Dave Kleikamp)  [Orabug: 36725601]  
  - uek-rpm: Build T93 embedded kernel (Dave Kleikamp)  [Orabug: 36725601]  
  - driver: soc: marvell: add cpss drivers (Dave Kleikamp)  [Orabug: 36725601]  
  - PCI: boot time optimization (Harman Kalra)  [Orabug: 36725601]  
  - octeontx_edac: Fix mcc_edac failure at boot (Thomas Tai)  [Orabug: 36725601]  
  - soc: Only try to build Marvell SOC code on aarch64 (Dave Kleikamp)  [Orabug: 36725601]  
  - efi/Marvell: Work-around for bootefi memmap errors (Henry Willard)  [Orabug: 36725601]  
  - octeontx2-af: add max_vfs module param (Tom Saeger)  [Orabug: 36725601]  
  - arm64: Fix compiler warning when CONFIG_MRVL_OCTEONTX_EL0_INTR is undefined. (Tom Saeger)  [Orabug: 36725601]  
  - thermal: add CN98XX support for Marvell Octeon TX2 SoC temperature sensors (Dave Kleikamp)  [Orabug: 36725601]  
  - thermal: support for Marvell Octeon TX2 SoC temperature sensors (Eric Saint-Etienne)  [Orabug: 36725601]  
  - crypto: octeontx2: let the core report the driver name instead of the drivers (Dave Kleikamp)  [Orabug: 36725601]  
  - octeontx2-pf: extend ringparam setting/getting API with rx_buf_len (Dave Kleikamp)  [Orabug: 36725601]  
  - octeontx2-pf: Fix arguments to bpf_warn_invalid_xdp_action() (Dave Kleikamp)  [Orabug: 36725601]  
  - octeontx2-af: fix bitmap_weight formatting (Dave Kleikamp)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Support for eCPRI MsgType5 timestamping (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Use correct netdev priv structure for debugging (Baha Mesleh)  [Orabug: 36725601]  
  - gpio: thunder: Fix invalid object pointer in kfree. (Szymon Balcerak)  [Orabug: 36725601]  
  - soc: marvell: bert: BERT support for CN10k (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: soc: marvell: octeontx_info: Fix parsing of two fdt properties (Felix Manlunas)  [Orabug: 36725601]  
  - octeontx2-af: Add validation before accessing fwdata (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add support to parse more VLAN headers (Kiran Kumar K)  [Orabug: 36725601]  
  - drivers: octeontx-edac: Add gic error decoder (Jayanthi Annadurai)  [Orabug: 36725601]  
  - drivers: pci-octeon-pem: Remove unused variables (Suneel Garapati)  [Orabug: 36725601]  
  - octeontx2-af: Add debugfs support to dump NIX TM registers (Anshumali Gaur)  [Orabug: 36725601]  
  - driver: edac: octeontx: offline/poison page on fatal/UE (Wladislav Wiebe)  [Orabug: 36725601]  
  - gpio: thunderx: Fixed 'pin-cfg' values collection. (Szymon Balcerak)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: disable CPRI RX on cleanup (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: ignore mcs untagged error (Baha Mesleh)  [Orabug: 36725601]  
  - driver: i2c: mv64xxx: cn9130 bus lockup issue (Narendra Hadke)  [Orabug: 36725601]  
  - Calculate delay-element (Aaron Williams)  [Orabug: 36725601]  
  - Disable enhanced strobe if not selected (Aaron Williams)  [Orabug: 36725601]  
  - Fix clock timing for MMC DDR modes (Aaron Williams)  [Orabug: 36725601]  
  - soc: marvell: hw_access: fix modpost error (Satheesh Paul)  [Orabug: 36725601]  
  - octeontx2-af: Fix issue with IPV6 GRE and multi VLAN (Kiran Kumar K)  [Orabug: 36725601]  
  - octeontx2-af: Add KPU changes to parse fabric path header (Kiran Kumar K)  [Orabug: 36725601]  
  - xhci: Use more than one Event Ring segment (Jonathan Bell)  [Orabug: 36725601]  
  - xhci: Set DESI bits in ERDP register correctly (Lukas Wunner)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add ioctl to get link info (Satheesh Paul)  [Orabug: 36725601]  
  - mdio: mdio-thunder: Fix driver build when ACPI disabled. (Szymon Balcerak)  [Orabug: 36725601]  
  - mdio: mdio-thunder: Add ACPI support. (Szymon Balcerak)  [Orabug: 36725601]  
  - gpio: thunderx: Add ACPI support. (Szymon Balcerak)  [Orabug: 36725601]  
  - octeontx2-pf: Check for DMAC extraction support before setting DMAC based hardware filter for a VF (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Do not use HW TSO when gso_size < 16bytes (Geetha sowjanya)  [Orabug: 36725601]  
  - drivers: spi: xspi: Modify HW xfer workaround (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx2-af: Added debugfs support to dump NIX TM topology (Anshumali Gaur)  [Orabug: 36725601]  
  - octeontx2-af: reveal only TIM params that are available (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: disable rx on RFOEs on exit (Baha Mesleh)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add dependency in Kconfig for GHES BERT (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2-cpt: Wake up waiting process as last step (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Send UP messages to VF only when VF is up. (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: octeontx2: Honor irqaffinity passed via bootargs (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-af: fix mcam hit counter (Ankur Dwivedi)  [Orabug: 36725601]  
  - octeontx2-af: Fix default entries mcam entry action (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: map management port always to first PF (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: configure 802.3 pause frames in SGMII/QSGMII mode (Hariprasad Kelam)  [Orabug: 36725601]  
  - FWLOG: Correct read length with ppos (Mikko Suni)  [Orabug: 36725601]  
  - octeontx2-pf: Reorder tearing down of PTP RX info work queue, mailbox (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-af: Fix Support of FDSA tag (George Cherian)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: release psm queues on exit (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: ignore MCS bypass errors (Baha Mesleh)  [Orabug: 36725601]  
  - MMC: Fix for SD card support in cadence driver (Paul Way)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add cpri busrt packet limiter (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - genirq: Export irqaffinity_default (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add SW workaround for Zero padding (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-af: Add new devlink param to configure maximum usable NIX LFs (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Honor irqaffinity passed via bootargs (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: add TIM error af interrupt handlers (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: clear state on TIM ring disable (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: disable preemption when enabling TIM (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-vf: Fix VF mbox up message error on PTP RX enable (Sai Krishna)  [Orabug: 36725601]  
  - drivers: spi-cadence-xspi: Change xfer logic base (Suneel Garapati)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add Kconfig option for otx2-ghes-init file. (Piyush Malgujar)  [Orabug: 36725601]  
  - driver: edac: octeontx: Improvements to GIC RAS handler (Chandrakala Chavva)  [Orabug: 36725601]  
  - edac: octeontx: Add support for GIC RAS reporting (Jayanthi Annadurai)  [Orabug: 36725601]  
  - octeontx2-af: Dump hw register state on error (Geetha sowjanya)  [Orabug: 36725601]  
  - Change struct octeontx2_pcie_console_nexus (Ray Asbury)  [Orabug: 36725601]  
  - octeontx2-af: account for cycle wraparound (Pavan Nikhilesh)  [Orabug: 36725601]  
  - drivers: spi: cadence-xspi: Export chip select gpio conditionally (Suneel Garapati)  [Orabug: 36725601]  
  - spi: cadence: Improve MRVL locking mechanism (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix PTP PHC sw timecounter reset ioctl (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: prevent TIM register read reorder (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-dpi: fix incorrect chunk size config (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-dpi: configure dma engine FIFO (Amit Prakash Shukla)  [Orabug: 36725601]  
  - octeontx2-pf: ethtool: support multi advertise mode (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx-pf: Update SGMII mode mapping (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: ethtool: Remove dependency of phyad (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: enable rxc with lookaside cpt lf (Vidya Sagar Velumuri)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to capture counters (Pavan Nikhilesh)  [Orabug: 36725601]  
  - crypto: octeontx2: increase timeout value of load_fvc CPT instruction poll (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: increase timeout value of load_fvc CPT instruction poll (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-dpi: extend sysfs to dump DPI PF registers (Satha Rao)  [Orabug: 36725601]  
  - octeontx2-af: reduce cpt flt interrupt vectors for cn10kb (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: Fix updating PFC configuration during running traffic (Suman Ghosh)  [Orabug: 36725601]  
  - drivers: pci: probe: Read after write fixup for PBUS register (Suneel Garapati)  [Orabug: 36725601]  
  - genirq: Increase the number of interrupters (George Cherian)  [Orabug: 36725601]  
  - drivers: spi-cadence-xspi: Fix clock divisor change logic (Suneel Garapati)  [Orabug: 36725601]  
  - driver: mmc: sdhci-cadence: ACPI support added for eMMC driver for CN10K (Piyush Malgujar)  [Orabug: 36725601]  
  - driver: mmc: sdhci: Add ACPI check (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2-af: Add debug logs. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Add more debug messages (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Fix dangling pointers in the netdev qset (Geetha sowjanya)  [Orabug: 36725601]  
  - drivers: cadence-xspi: Optimize workaround logic (Suneel Garapati)  [Orabug: 36725601]  
  - edac: octeontx: Add error syndrome (Jayanthi Annadurai)  [Orabug: 36725601]  
  - drivers: i2c-octeon-core: Add recovery for WDOG_TOUT error status (Suneel Garapati)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add CN10 check (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2: Improve mailbox tracepoints for debugging (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: octeontx2: add timeout for load_fvc completion poll (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: avoid RXC register access in FLR on CN10KB (Nithin Dabilpuram)  [Orabug: 36725601]  
  - drivers: i2c-octeon-core: Add error state recovery (Bruno Matic)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add an ioctl to reset PTP PHC sw timecounter offset (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Remove MAC address validation check (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Use TL2 level for egress match all configuration (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Add a new mbox to read/write MCAM hit status (Suman Ghosh)  [Orabug: 36725601]  
  - crypto: octeontx2: fix devlink params get callback (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: fix opcode incase of SGv2 (Srujana Challa)  [Orabug: 36725601]  
  - ptp_clockmatrix: print driver version during probe (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - driver: mfd/misc/ptp: update renasas smu drivers to v1.0 tag (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - driver: edac: octeontx: Init MC grain (Vasyl Gomonovych)  [Orabug: 36725601]  
  - rqchip/gic-v3: Use raw_spin_lock in irq context (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: don't drop packets with macsec errors (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix register offset definitions (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - drivers: spi: cadence: Reconfigure xSPI config to STIG Mode (Witold Sadowski)  [Orabug: 36725601]  
  - spi: Add xfer() function for cadence xSPI (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: spi: Add arbitration support for Cadence SPI (Suneel Garapati)  [Orabug: 36725601]  
  - watchdog: sbsa_gwdt: Apply the Errata workaround seen on CN10K Processors (George Cherian)  [Orabug: 36725601]  
  - driver: spi: cadence: Remove unused variables (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: Flush WQ before destroy (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Check address for Null before free (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Detach LF resources on probe cleanup (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: add validation checks for function arguments (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2: Fix klockwork issues in BPHY and SSO (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2: Fix klockwork issues. (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: Free NIX_AF_INT_VEC_GEN interrupt too (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: utilize hardware FLR support in SSO (Shijith Thotton)  [Orabug: 36725601]  
  - drivers: marvell: Fix klockwork issues (Suman Ghosh)  [Orabug: 36725601]  
  - arm64: smccc: Add trace events to SMC calls. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for AES_GMAC (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for DH (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for ccm(aes) (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: support md5 and hmac(md5) (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: support sha1, sha256, sha384 and sha512 (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for ECDSA P192, P256 and P384 (Srujana Challa)  [Orabug: 36725601]  
  - crypto: ecdsa - export ecdsa privkey ASN.1 parser (Srujana Challa)  [Orabug: 36725601]  
  - crypto: ecdsa - export ecdsa signature ASN.1 parser (Srujana Challa)  [Orabug: 36725601]  
  - driver: serdes_debugfs: add support for debugfs (anthony chan-MA Eng_IC)  [Orabug: 36725601]  
  - octeontx2-af: fix to get different rq mask (Rakesh Kudurumalla)  [Orabug: 36725601]  
  - crypto: make RFC6979 test vectors generic to all drivers (Srujana Challa)  [Orabug: 36725601]  
  - crypto: add ECDSA test vectors from RFC 6979 (Srujana Challa)  [Orabug: 36725601]  
  - crypto: add ECDSA signature generation support (Srujana Challa)  [Orabug: 36725601]  
  - crypto: ecc - Export additional functions from crypto/ecc.c (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: update TIM adjust GTI errata silicons (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: fix accessing of CPT register on 105xx. (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: Using compound/head page ref count (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fixed sparse errors (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Remove source port check while adding ntuple rule for GTP-U/C (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ptp timestamp conversion when using external clock (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: don't modify pps threshold when sw timecounter is not used (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - crypto: octeontx2: add devlink option to set max_rxc_icb_cnt (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: Define new ethtool modes for CN10KB (Hariprasad Kelam)  [Orabug: 36725601]  
  - driver: spi: cadence: Add ACPI support (Piyush Malgujar)  [Orabug: 36725601]  
  - Octeontx2-pf: Fix error condition for GTP-U/C rule insertion (Suman Ghosh)  [Orabug: 36725601]  
  - drivers:spi:cadence-xspi: Switch to polling mode when in panic (Gowthami Thiagarajan)  [Orabug: 36725601]  
  - drivers:spi:cadence-xspi: Add low-level changes to support kmsg panic/oops write (Gowthami Thiagarajan)  [Orabug: 36725601]  
  - spi: spi-nor: Fix the spi_nor_panic_write (Gowthami Thiagarajan)  [Orabug: 36725601]  
  - drivers: mtd: spi-nor: Support kmsg dumper based on pstore/blk (Gowthami Thiagarajan)  [Orabug: 36725601]  
  - octeontx2-sdp: add CN10kB for using correct mask (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - ptm-ep: Add PTM requestor driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Remove SA stats support (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: fix CPT ctx flush (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: fix issue with spitosa table teardown (Nithin Dabilpuram)  [Orabug: 36725601]  
  - scmi: mailbox: Increase message slots (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2-af: Update minimum receive frame size (Sathesh Edara)  [Orabug: 36725601]  
  - watchdog: sbsa_gwdt: Enable the WDOG_STOP_ON_PANIC (George Cherian)  [Orabug: 36725601]  
  - drivers: watchdog: Add support for panic notifier callback (George Cherian)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Poll for timestamp to commit into PTP ring (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-pf: Use 1 TL4 queue per SDP output queue, enable SDP backpressure (Roy Franz)  [Orabug: 36725601]  
  - spi: cadence: Clear interrupt status before enabling interrupts (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx2-dpi: queue reset of DPI VF during initialization (Sibaranjan Pattnayak)  [Orabug: 36725601]  
  - spi: cadence: Add support for xfer operation. (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx-bphy-netdev: dev_ioctl: split out ndo_eth_ioctl (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix OTX2_RFOE_IOCTL_RX_IND_CFG in case of CNF10K (Janne Kukkonen)  [Orabug: 36725601]  
  - octeontx2-af: consider mode when using cpt base channel for bp (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: update SSO FLR routine (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Add additional checks to validate user-def field value for GTP-u and GTP-C (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-dpi: add sysfs for communication from userspace (Sibaranjan Pattnayak)  [Orabug: 36725601]  
  - octeontx2-sdp: Fix programming EPF_RINFO (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: remove debugfs entries. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix updating host ptp offset multiple times (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - drivers: mmc: sdhci-cadence: Change command delay value (Chandrakala Chavva)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix rfoe ptp clock cleanup (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix issue of using incorrect netdev priv (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix link carrier state update for cnf10k (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Avoid kernel crash when psw jd_ptr is NULL (Mikko Suni)  [Orabug: 36725601]  
  - drivers: pci-octeon-pem: Rectify resetting PEM (Ray Asbury)  [Orabug: 36725601]  
  - drivers: pci-octeon-pem: Rectify RC link recover work (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: pci: octeon-pem: Fix hardware issue (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: pci: octeon-pem: Check on MSI-X vector count (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: pci: controller: Add Octeon PEM driver (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: pci: probe: Add fixup for Marvell PCIeRC bridge (Suneel Garapati)  [Orabug: 36725601]  
  - PCI: marvell-cnxk-ep: rename driver macro name string (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - watchdog: sbsa_wdog: Make sure to program a larger timeout value (George Cherian)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add dependency OCTEONTX2_AF (Jia Ma)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: fix undefined SSO register access (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: fix inline inbound IPsec configuration (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-bphy: Generate PPS OUT on PHC PTP_CLK_REQ_PEROUT (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: update TIM adjust GTI errata silicons (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ioctl OTX2_CPRI_IOCTL_LINK_EVENT cpri context (Janne Kukkonen)  [Orabug: 36725601]  
  - driver: edac: octeontx: Add revision check for new pass of the chip (Chandrakala Chavva)  [Orabug: 36725601]  
  - drivers: spi: cadence: Fix clock operations (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Remove ptp list processing (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Use two send queues for cnf10k (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Use separate xmit function for PTP (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Simplify job submission to hardware (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Simplify error checks and updating stats (Subbaraya Sundeep)  [Orabug: 36725601]  
  - drivers: soc: Removed Below Warning message for generic header file on CN8XX platform. (sdonelli)  [Orabug: 36725601]  
  - octeontx2-dpi: configure writing DMA result to an offset of the event (Sibaranjan Pattnayak)  [Orabug: 36725601]  
  - PCI: add misc character device for BAR4 mem access (Satananda Burla)  [Orabug: 36725601]  
  - cacheinfo: Expose the code to generate a cache-id from a device_node (James Morse)  [Orabug: 36725601]  
  - cacheinfo: Set cache 'id' based on DT data (Rob Herring)  [Orabug: 36725601]  
  - cacheinfo: Allow for >32-bit cache 'id' (Rob Herring)  [Orabug: 36725601]  
  - drivers: base: cacheinfo: Add helper to find the cache size from cpu+level (James Morse)  [Orabug: 36725601]  
  - drivers: base: cacheinfo: Check per_cpu_cacheinfo() is allocated (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache_id (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Add a helper to fill a cpumask from a processor container (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Find PPTT cache level by ID (James Morse)  [Orabug: 36725601]  
  - ACPI / irq: Add acpi_register_partitioned_percpu_gsi() (James Morse)  [Orabug: 36725601]  
  - irqchip/gic-v3: select and translate the partition domain (James Morse)  [Orabug: 36725601]  
  - irqchip/gic-v3: Build PPI partitions on ACPI systems (James Morse)  [Orabug: 36725601]  
  - irqchip/gic-v3: Print DT partitions in the same way as APCI (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Add a helper to build a cpumask from a cpu_node (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Provide a helper to walk processor containers (James Morse)  [Orabug: 36725601]  
  - irqchip/gic, gic-v3: Translate fwspec for DT and ACPI systems in the same way (James Morse)  [Orabug: 36725601]  
  - ACPI / irq: Allow a compile-time arg0 for acpi_register_gsi()'s fwspec (James Morse)  [Orabug: 36725601]  
  - irqchip/gic: Collect GIC_IRQ_TYPE definitions into one place (James Morse)  [Orabug: 36725601]  
  - irqchip/gic-v3: Move partition_create_desc() work to a helper (James Morse)  [Orabug: 36725601]  
  - Documentation/admin-guide/acpi: Move information out of shell script comments (James Morse)  [Orabug: 36725601]  
  - arm64: Add workaround for Cavium erratum 36890 (Andrew Pinski)  [Orabug: 36725601]  
  - octeontx2-pf: Fix coverity issues (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Add NPC support to filter GTP-U and GTP-C packets based on TEID (Suman Ghosh)  [Orabug: 36725601]  
  - PCI: controller: Add Marvell OcteonTx2 PCIe Endpoint driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-dpi: Add DPI DMA PF driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Add CN10K SDP support (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Fix SDP output backpressure (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: add multi-PF support in SDP (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: setup the SDP channel configuration (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Add FLR handling support (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Add mailbox support (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Add SDP PF driver support (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Enable FORCE_COND_CLK_EN only for applicable chips. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - drivers: soc: marvell: Add PCI console driver (Rick Farrington)  [Orabug: 36725601]  
  - firmware: octeontx2: Move AVS reset control to MUB bus (sdonelli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix coverity issues (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - KVM: arm64: Extend timer errata-38627 to kvm (Bharat Bhushan)  [Orabug: 36725601]  
  - clocksource: Add Marvell Errata-38627 workaround (Bharat Bhushan)  [Orabug: 36725601]  
  - EDAC: Octeon: Init SDEI (Vasyl Gomonovych)  [Orabug: 36725601]  
  - drives: soc: marvell: Using struct proc_ops instead of file_operations (Piyush Malgujar)  [Orabug: 36725601]  
  - drives: soc: marvell: Update octtx_info to display sdk-version (Chandrakala Chavva)  [Orabug: 36725601]  
  - drives: soc: marvell: Fix issues reported by static code analysis (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: update to support to print reset counters (Selvam Venkatachalam)  [Orabug: 36725601]  
  - drives: soc: marvell: Remove unnecessary warnings about reset counters (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: support to print reset counters (Selvam Venkatachalam)  [Orabug: 36725601]  
  - drives: soc: marvell: Fixes conversion for BOARD-MAC-ADDRESS-ID-NUM in octeontx_info (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: Fixes unnecessary logging from octeontx info driver (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: Fix OcteonTX info driver (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: Adds MAC addressess overview to board info (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: Display version information for flash components (Aaron Williams)  [Orabug: 36725601]  
  - drives: soc: marvell: publish no of macs in octeontx_info node (Sujeet Baranwal)  [Orabug: 36725601]  
  - drives: soc: marvell: Alter ways of mac address parsing (Sujeet Baranwal)  [Orabug: 36725601]  
  - drives: soc: marvell: Board info logic reorg (Sujeet Baranwal)  [Orabug: 36725601]  
  - drives: soc: marvell: Board information made available (Sujeet Baranwal)  [Orabug: 36725601]  
  - octeontx2-pf: disable preemption while using per_cpu pointer (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Dereference only a valid pointer (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Allow pkts of size morethan MTU to be transmitted (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Skip dma map and unmap when IOMMU is bypassed (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-pf: Add missing changes in otx2_ethtool.c (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-sdpvf: Fix PTP options for SDP interfaces (Roy Franz)  [Orabug: 36725601]  
  - octeontx2-vf: Add partial ethtool support for SDP VFs (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-pf: Support to enable EDSA/Higig2 pkts parsing (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Add ethtool -m option support. (Christina Jacob)  [Orabug: 36725601]  
  - octeontx2-pf: Avoid null pointer dereference (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-vf: Export symbol 'otx2_config_serdes_link_state' (Rakesh Babu)  [Orabug: 36725601]  
  - octeontx2-pf: devlink param support to modify physical interface links. (Rakesh Babu)  [Orabug: 36725601]  
  - octeontx2-pf: Add devlink param to vary rbuf size (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Add devlink param to vary cqe size (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Add devlink support to configure TL1 RR_PRIO (Hariprasad Kelam)  [Orabug: 36725601]  
  - soc: marvell: otx2: Fix initcall funciton should return an 'int' (Vasyl Gomonovych)  [Orabug: 36725601]  
  - soc: marvell: otx2: Fix old kzfree (Vasyl Gomonovych)  [Orabug: 36725601]  
  - octeontx2-af: support for custom L2 header (Satheesh Paul A)  [Orabug: 36725601]  
  - octeontx2-af: Add mbox to alloc/free BPIDs (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: Dynamically allocate bpids for CPT and LBK (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: add programming SDP BPID in cn10k (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: Fix BPID calculation for SDP (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - crypto: octeontx2: add ctx_val workaround (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: fix rsa verify (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: fix dma unmap issue with ahash (Srujana Challa)  [Orabug: 36725601]  
  - arm64: Enable Spectre BHB mitigation for Marvell OcteonTx2 cpus (Linu Cherian)  [Orabug: 36725601]  
  - mtd: spi-nor: winbond: Update w25q256fw flash memory to use 4B opcodes (Witold Sadowski)  [Orabug: 36725601]  
  - mtd: spi-nor: macronix: Add support for mx25um51245g (Witold Sadowski)  [Orabug: 36725601]  
  - mailbox: mvl-mhu: update copyright note (Wojciech Zmuda)  [Orabug: 36725601]  
  - scmi: mailbox: increase timeout for rx response (Jayanthi Annadurai)  [Orabug: 36725601]  
  - clk: control device frequency using sysfs (Wojciech Bartczak)  [Orabug: 36725601]  
  - scmi: perf: octtx2: round off OPP frequencies to neaest 100 (Sujeet Baranwal)  [Orabug: 36725601]  
  - scmi: mailbox: modifies rx buffer size and timeout for rx response (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: mailbox: Cleanup dead code (Wojciech Bartczak)  [Orabug: 36725601]  
  - mailbox: marvell: Initialize interrupts only if there's client for data (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: mailbox: Reject non-configured CPC instances (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: mailbox: Add support for LPI/SPI interrupt configuration in MHU (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: mailbox: Remove superfluous mutex in MHU implementation (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: MHU: Driver adjustment for 10x based octeontx platforms (Wojciech Bartczak)  [Orabug: 36725601]  
  - Marvell MHU: Fixes locking mechanism in MHU driver (Wojciech Bartczak)  [Orabug: 36725601]  
  - mailbox: add OcteonTX2 MHU mailbox driver (Wojciech Bartczak)  [Orabug: 36725601]  
  - soc: marvell: otx2: Enable MSI-X interrupts (Vasyl Gomonovych)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add error injection interface (Vasyl Gomonovych)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add BERT support for OTX2 (Vasyl Gomonovych)  [Orabug: 36725601]  
  - EDAC: Octeon: Add Marvell's OcteonTx2 SoC and CN10KA SoC EDAC driver (Vasyl Gomonovych)  [Orabug: 36725601]  
  - mmc: octeontx2: ACPI support added for eMMC driver for T9x. (Piyush Malgujar)  [Orabug: 36725601]  
  - mmc: octeontx2: Resolve issues reported by static analysis (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Removes static variables in tuning code (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Add MMC polling method to support kmsg panic/oops write (Bhaskara Budiredla)  [Orabug: 36725601]  
  - mmc: octeontx2: cleanup mmc_oops driver (Bhaskara Budiredla)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds CMD tuning for eMMC HS200 mode (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Cleans up mmc code and prepare it for HS200 tuning update (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds device tree entries to control eMMC input timings (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds a way to dynamically control eMMC bus input timings (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds new overrides for eMMC bus output timings (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds mechanism to modify output timings for MMC bus (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: enables mmc polling for pstore path (Bhaskara Budiredla)  [Orabug: 36725601]  
  - mmc: octeontx2: fix handling calibration glitch (Aaron Williams)  [Orabug: 36725601]  
  - mmc: octeontx2: Configure flags for T96 pass B0 (Chandrakala Chavva)  [Orabug: 36725601]  
  - mmc: octeontx2: Use flags for hardware differences (Aaron Williams)  [Orabug: 36725601]  
  - mmc: octeontx2: Fix tuning for T96 C0 (Chandrakala Chavva)  [Orabug: 36725601]  
  - mmc: octeontx2: Add tuning support for HS400 mode (Aaron Williams)  [Orabug: 36725601]  
  - mmc: octeontx2: speed limit for tx2-c0 (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: use calibrated timing taps (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: do not drop bus lock in tuning (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: slot switch by vqmmc/gpio (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: reorganize before vqmmc switching (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: cmd and data out values fixture (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: amend hs400 tuning (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: correct clock divisor (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: fix swiotlb buffer is full (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: avoid single-slot startup issues (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: execute_tuning for octeontx2 (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: track & apply CMD6 bus changes ASAP (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: cn96xx HS200-8wide-100MHz (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: CMD19/21 type correction (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: finish_dma_single() should teardown/unmap (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: use device tree entries (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: emmc tuning for delay (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: skip unavailable slots (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: calibrate tap delay (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: incorporate hw interface io ctl params (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: interrupt addition for ncb fault (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: emmc operation limited to 100 MHz (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: fix shutdown deadlock with active sd-card (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: Configure sample command and data directly (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: Use proper register to clear interrupts (Chandrakala Chavva)  [Orabug: 36725601]  
  - mmc: octeontx2: add check for 8/9xxx chips (Sujeet Baranwal)  [Orabug: 36725601]  
  - firmware: octeontx2: sfp-info: Update sfp_info_data (Piyush Malgujar)  [Orabug: 36725601]  
  - firmware: octeontx2: sfp-info: check supported platforms first (Damian Eppel)  [Orabug: 36725601]  
  - firmware: octeontx2: sfp-info: added support for t9x (Damian Eppel)  [Orabug: 36725601]  
  - firmware: octeontx2: sysfs driver for dumping sfp info (Damian Eppel)  [Orabug: 36725601]  
  - misc: bphy: disable ctr module on non-BPHY boards (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: prevent out-of-bound array iteration (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Restore static resource allocation (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Fix resource release sequence (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Add ioctl to get BPHY irqs bitmask (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Get max irq number from firmware (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Add ioctl to get max irq number (Jakub Palider)  [Orabug: 36725601]  
  - drivers: cleanup el3 handler only if parent process exits (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - misc: otx_bphy_ctr: Add OcteonTx2 BPHY control driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - spi: cadence: Add Marvell IP modification changes (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Add read access size switch (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Change dt-bindings documentation for Cadence XSPI controller (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Add polling mode support (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Change dt-bindings documentation for Cadence XSPI controller (Witold Sadowski)  [Orabug: 36725601]  
  - Firmware: mub: Add Marvell Utility Bus. (sdonelli)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: minor updates (Srikanth Pidugu)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: more debug capabilities (Srikanth Pidugu)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: unified SoC check (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: page access support (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: driver update (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics debugfs driver (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: mvmdio_uio: paged access support (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: mvmdio_uio: lock on accessing mdio bus (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: MDIO uio driver (Damian Eppel)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: use ioremap() instead of ioremap_nocache (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: update ethtool drop stats when mbt erros are set (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: Added FEC stats in debugfs. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: update ethtool drop stats (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add new secondary BCN offset for slave (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: enable skb list processing for delay_request. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add new fields in ethtool stats (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Set external_clock_rate for all RFOE interfaces. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev:cnf10k: Share RFOE PTP offset with host (Roy Franz)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Avoid ptp skb list processing in 1-step mode (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: update drop stats when psw errors are set (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: check psm queue space for ptp queue (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Use atomic update feature to update PTP clock (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Enable force_cond_clk_en bit (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Recalculate UDP checksum. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix updating rx byte stats (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: new entry to dump RPM stats (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: new entry to dump timestamp ring (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: new entry to dump jdt ring (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: Add new debugfs root entry (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: fix for PTP BCN delta (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Use PTP ring tail index to read timestamp (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: PTP 1-step improvements (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev:: Share RFOE PTP offset with host (Roy Franz)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: PTP BCN synchronization support for CNF10k platforms. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add cnf10k rfoe debugfs (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf105xxn: fix ptp timestamp in master mode (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: convert MIO_PTP_TIMESTAMP value to nsecs (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix updating JD pkt length and blocksize (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix improper names used for IRQs. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: IOCTL to read input clock parameters. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix cnf10k link state set (Baha Mesleh)  [Orabug: 36725601]  
  - otx2-bphy-netdev: synchronize BCN to PTP slave clock. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: stop pkt transmission when psm queue is disabled (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95n: fix ptp timestamp in master mode (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: fix compilation warning (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: use platform_get_irq_optional for PSM GPINT2 (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Fix incorrect PTP clock frequency. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95n: ptp: use 950MHz clock for ptp slave (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95n: ptp: Fix ptp clock counter read (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ethtool stats string order (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95n: add PTP slave support. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Fix ptp hardware clock counter conversion (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - cnf10k-rfoe: skb shinfo falls on a different cacheline, avoid reading it (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Adjust structure elements to reduce cache misses (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Avoid costly iova_to_virt of packet dma address in xmit (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Cleanup packet stats maintenance (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Optimize packet length retrieval for non-ecpri packets (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Remove duplicate error checking (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: use sw timecounter for ptp phc (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Add PTP 2S legacy mode support. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - oceontx2-bphy-netdev: cnf10k: Fix 1S sync timestamp fields. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: re-enable cpri gpint when interface is stopped (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix cpri interrupt handling (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10kb: 1-step PTP support for CNF10KB. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cpri: Add missing ethtool stats (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Fix CNF10K_CPRIX_ETH_UL_INT clearing (Janne Kukkonen)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Modify PTP timestamp format. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix cnf10k ecpri rx packet issue (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10kb: Add PTP slave support for CNF10KB. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: add cpri netdev support (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: add prefix for cnf10k registers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: move duplicate code to common headers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - cnf10k-rfoe: Prepend 8-byte PTP header to packets in PTP queue. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95: add jumbo frame support (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: 1-step PTP and slave support. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: rfoe netdev cleanup (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: convert psw ptp timestamp to cpu byte order (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: fix missing ioctls on CNF10K (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: move common ptp structures to rfoe_common.h (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy: Fix issues reported by static analysis. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - cnf10k: rfoe: add jumbo frame support to cnf10k (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: rfoe: fix ptp4l bad message issue (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy: Add PTP slave and external PTP input clock support in RFOE PHC driver. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: fix tx ptp ring entry format change (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix cpri rx packet handling (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: ptp: Fix ptp timestamp reading across lmacs (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Fix incorrect ptp tstamp entry size (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: cnf10kb: add support for psm gpint2 interrupt (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix possibility of processing the mbt multiple times (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix link carrier state update (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: limit cpri error logging rate (Baha Mesleh)  [Orabug: 36725601]  
  - otx2-bphy-netdev: cn10k: fix NULL pointer dereference (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: fix offset of cn10k registers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: remove unwanted debug message (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: added cnf10k bphy netdev functionality (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: separate bphy common code into separate files (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: disable cpri code when cpri hw is not present (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: add debugfs support (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: don't process a packet when psw indicates error (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cpri: fix compilation warnings (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add rfoe rx vlan forwarding configuration (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: avoid multiple kfree of common lmac objects (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix common lmac resource free (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix cleanup sequence in char device release (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: remove unnecessary check when setting INTF_DOWN flag (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add timeout to ptp transmit timestamp polling (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix napi schedule issue when intf is down (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ptp tx processing race condition (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added RFOE LMAC stats to ethtool (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add PTP hardware clock support to rfoe interfaces (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix list_entry usage in the code (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added ioctl to set low level link state (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ptp pending skb list processing (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix kernel crash with ioctl trying to add timer (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Set minimum length of Tx packets to 64 bytes (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Enable accessing RFOE_RX_IND regs before odp netdev init (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Enable MSIXEN bit in IOCTL handler (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: Add support for registering both rfoe and cpri netdev intf (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: Add support for configurable PTP clock rate (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeonx2-bphy-netdev: Add support for switching mode from RFOE to CPRI (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add support for CPRI Ethernet packet processing (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: segregate chardev specific code (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix NULL pointer dereference (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Enable MSIXEN bit in MSIX CAP HDR (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added PTP BCN offset algorithm (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added ioctl to access RFOE_RX_IND registers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added support for configurable packet types (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: netdev cleanup in char dev close (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix napi scheduling issue when interface is down (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: added full packet dump of mbt buffer (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - OcteonTX2 BPHY RFOE netdev driver initial version (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: extend context reading capability (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add mapping for mcs registers (Ankur Dwivedi)  [Orabug: 36725601]  
  - soc: marvell: hw-access: register access via debugfs (Sumit Gaur)  [Orabug: 36725601]  
  - soc: marvell: hw_access: fix pci resource leak (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: fix csr mapping range (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: Extend available ranges (Jakub Palider)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add support to read aura/pool context (Ashwin Sekhar T K)  [Orabug: 36725601]  
  - soc: marvell: hw_access: get cgx info (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add hw context reading support (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: cleaning up existing hw access driver (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: renaming to hw access driver (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: Driver to access and modify device CSRs. (Rakesh Babu)  [Orabug: 36725601]  
  - drivers: soc: fwlog: use max_t instead of max (Pragnesh Patel)  [Orabug: 36725601]  
  - fwlog: fix invalid pointers and copy size in wraparound case (Aaro Koskinen)  [Orabug: 36725601]  
  - drivers: soc: fwlog: fix mapped size (Pragnesh Patel)  [Orabug: 36725601]  
  - drivers: soc: fwlog: Add firmware bootlog support (Pragnesh Patel)  [Orabug: 36725601]  
  - drivers: mmc: sdhci-cadence: Interrupt handling workaround (Jayanthi Annadurai)  [Orabug: 36725601]  
  - drivers: soc: Adds common Marvell OcteonTX header for SMC calls (sdonelli)  [Orabug: 36725601]  
  - octeontx2-af: Update HW workarounds for 96xx C0, 98xx and F95xx B0 chips (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: add TIM adjust GTI errata workaround (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: devlink params to configure TIM (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: add support for changing vlan tpid (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: rvu: enable mcs fips mailboxes (Ankur Dwivedi)  [Orabug: 36725601]  
  - octeontx2-af: Check the msix offset return value (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: NDC sync op af mbox support (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: Move QMEM allocations from GFP_KERNEL to ATOMIC (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: sync kernel structures with firmware (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Add missing stats (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: mcs: add mailboxes for fips (Ankur Dwivedi)  [Orabug: 36725601]  
  - octeontx2-af: convert dev_dbg to tracepoint in mbox (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Introducing REE block for 98xx (Smadar Fuks)  [Orabug: 36725601]  
  - octeontx2-af: Add support for SPI to SA index translation (Kiran Kumar K)  [Orabug: 36725601]  
  - drivers: sdhci: Add option to configure sdhci timeout (Jayanthi Annadurai)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: Add debug option for SD6 controller (Jayanthi Annadurai)  [Orabug: 36725601]  
  - dt-bindings: mmc: sdhci-cadence: SD6 support (Jayanthi Annadurai)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: enable MMC_SDHCI_IO_ACCESSORS support (Jayanthi Annadurai)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: SD6 controller support (Dhananjay Kangude)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: Restructure the code (Dhananjay Kangude)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: Rename functions/structures to SD4 specific (Dhananjay Kangude)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: Change GPIO level interrupt handler to handle_level_irq (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: extend PIN_SEL to cover cn96xx (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: Configure pin function at probe (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: avoid potential deadlock (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: ACPI support for SPI driver (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: Resolve issues detected in static code analysis (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: Add fix for hw issue (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: use read after write for MPI_CFG (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: set tritx in config register (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: Support for octeontx2 spi controller (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for creating netdev interfaces for SDP VFs (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: add support for CPT second pass (Rakesh Kudurumalla)  [Orabug: 36725601]  
  - octeontx2-af: support overriding aura to zero for second pass (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for ECDH (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: notify VF about ptp event (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: Sending tsc value to the userspace (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: extend npa context reading capability (Ashwin Sekhar T K)  [Orabug: 36725601]  
  - octeontx2-af: allow second pass pkts via default ucast entry (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: suppress kpu profile loading warning (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: use cpt channel mask in flow install path (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: fix arguments passed to XAQ aura deinit (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: Support for FDSA tag (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Code placement for cgx.c (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Gracefully skip the cgx_probe for unmapped devices. (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: link mode mapping (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: Limit number of CGX blocks (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: rvu_cgx code placement (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Support for PTP notification to PF (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add programmed macaddr to RVU pfvf (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Show count of dropped packets by DMAC filters (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Skip CGX probe if not connected to NIX (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: RPM extend csr address for T105N (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: new Interface modes support (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Do not allow VFs to overwrite PKIND config (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Put CGX LMAC also in Higig2 mode (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add new CGX_CMDs to set and get PHY modulation type (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Handle physical link state change requests (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: update address of global CGX RX_STATS (Hariprasad Kelam)  [Orabug: 36725601]  
  - crypto: octeontx: enable driver (Harman Kalra)  [Orabug: 36725601]  
  - crypto: octeontx-83: enable crypto device in domain (Harman Kalra)  [Orabug: 36725601]  
  - arm64: Add support for ASID locking (Alex Belits)  [Orabug: 36725601]  
  - kernel/exit.c: Add task cleanup callbacks (Alex Belits)  [Orabug: 36725601]  
  - PCI: octeontx-83: add new quirks (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: add new mbox to support sync cycle on rx path (Satha Rao)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to enable or disable BP on CPT link (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: fix LBK backpressure config (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: set default min and max rx len for CPT link (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for CPT1 in VF driver (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for rsa sign and verify (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for gcm(aes) (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for akcipher rsa (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for hash algorithms (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: TIM: Set conditional clock always on (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: Apply relevant HW issue workarounds for 96xx B0 silicon (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: add NIX mbox message to get HW info (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: sync changes missed from tim (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: ignore sso lf count when checking pffunc validity (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fix TIM disable lf sequence (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: use clock source to compute start cycle (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: reduce TIM TENNS clock source interval (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: fix incorrect TIM interval array size (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: update clock source offset (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: track timer ring intervals (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Setup edge used for GPIO timing (Michal Mazur)  [Orabug: 36725601]  
  - octeontx2-af: fix TIM slot to lf lookup (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add TIM LF teardown (Stanislaw Kardach)  [Orabug: 36725601]  
  - octeontx2-af: fix TIM block address usage (Stanislaw Kardach)  [Orabug: 36725601]  
  - octeontx2-af: update TIM 10ns clk source min interval (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Verify NPA/SSO/NIX PF_FUNC mapping (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: add workaround for TIM reverse lookup (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Add TIM unit support. (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: sync changes missed from sso (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: serialize bar2 alias access (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: add read back of AF_BAR2_SEL register (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: add support for SSO WQE stashing (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add SSO XAQ AURA access errata workaround (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: timeout while draining SSO queues (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: cycle through SSO queues to drain work (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: use SSO HWS AF invalidate instead of LF invalidate (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fix atomic load on NPA LF registers (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: drain XAQ buffers before lf teardown (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fix implitit variable array (Stanislaw Kardach)  [Orabug: 36725601]  
  - octeontx2-af: add intradevice FLR handling (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add additional description to irqs (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add ratelimit to limit the asynchronous err messages (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: add debugfs support for sso (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: remove support to limit xaq depth (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: allow lower threshold in sso group qos mbox (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: update SSO HWS invalidate mbox definition (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to configure SSO group mask (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: enable SSO work interrupt periodic counter (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: invalidate GWC before accessing workslot (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: enable getwork prefetching (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: ratelimit digest prints (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to configure SSO LSW (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fixes for SSO FLR (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: enhance SSO FLR for CN10K (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: add SSO mbox message to release XAQ aura (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: reset HWS group mask during FLR (Michal Mazur)  [Orabug: 36725601]  
  - octeontx2-af: Fix reading SSOW_LF_GWS_TAG after rvu_poll_reg() (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: Make SSO/SSOW LF teardown less CPU intensive (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: add sso error af interrupt handlers (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fix rvu_sso_ggrp_taq_flush (Angela Czubak)  [Orabug: 36725601]  
  - octeontx2-af: drain xaq before reconfiguring aura (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: restore sso hwgrp default thresholds (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: manually dain partially consumed TAQ buffers (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: update SSO HWGRP teardown sequence (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: update SSO GWS teardown sequence (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to get SSO GWS/GGRP stats (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to configure thresholds per HWGRP (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Add SSO unit support to the AF driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - irqchip/gicv3-its: Workaround for Marvell errata 35443 for 9xx (Geetha sowjanya)  [Orabug: 36725601]  
  - irqchip/gic-v3: Extend workaround for interrupt loss on IPI (Linu Cherian)  [Orabug: 36725601]  
  - irqchip/gic-v3: Add workaround for interrupt loss on IPI (Linu Cherian)  [Orabug: 36725601]  
  - iommu/arm-smmu-v3: Force 32 byte command queue memory reads (Linu Cherian)  [Orabug: 36725601]  
  - octeontx2-pf: Add ucast filter count configurability via devlink. (Sai Krishna)  [Orabug: 36725601]  
  - devlink: add documentation for octeontx2 driver (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: ecc - Move ecc.h to include/crypto/internal (Daniele Alessandrelli)  [Orabug: 36725601]  
  - arm64: cpufeature: Add missing .field_width for GIC system registers (Mark Brown)  [Orabug: 36725601]  
  - octeontx2-af: Fix devlink params (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: fix the double free in rvu_npc_freemem() (Su Hui)  [Orabug: 36725601] {CVE-2024-36030}
  - octeontx2-af: Fix multicast/mirror group lock/unlock issue (Suman Ghosh)  [Orabug: 36725601]  
  - net: flower: fix stack-out-of-bounds in fl_set_key_cfm() (Eric Dumazet)  [Orabug: 36725601]  
  - Watchdog: marvell_gti_wdt: Remove redundant dev_err_probe() for platform_get_irq() (Jinjie Ruan)  [Orabug: 36725601]  
  - watchdog: marvell_gti_wdt: Fix error code in probe() (Dan Carpenter)  [Orabug: 36725601]  
  - crypto: octeontx2 - add missing check for dma_map_single (Chen Ni)  [Orabug: 36725601]  
  - i2c: xgene-slimpro: Fix wrong pointer passed to PTR_ERR() (Wei Yongjun)  [Orabug: 36725601]  
  - octeontx2-af: Initialize 'cntr_val' to fix uninitialized symbol error (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Fix transmit scheduler resource leak (Hariprasad Kelam)  [Orabug: 36725601] {CVE-2024-35975}
  - Octeontx2-pf: Free send queue buffers incase of leaf to inner (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: fix FLOW_DIS_IS_FRAGMENT implementation (Asbjørn Sloth Tønnesen)  [Orabug: 36725601]  
  - crypto: octeontx2 - select CONFIG_NET_DEVLINK (Shijith Thotton)  [Orabug: 36725601]  
  - perf/smmuv3: Fix unused variable warning when CONFIG_OF=n (Will Deacon)  [Orabug: 36725601]  
  - net: octeontx2-pf: mcs: consider MACSEC setting (Randy Dunlap)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Fix NULL pointer dereferences (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Clear stats before freeing resource (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Do not reset PN while updating secy (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: update PN only when update_pn is true (Radu Pirea (NXP OSS))  [Orabug: 36725601]  
  - octeontx2-pf: Fix pfc_alloc_status array overflow (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Fix linking objects into multiple modules (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Do xdp_do_flush() after redirects. (Sebastian Andrzej Siewior)  [Orabug: 36725601]  
  - crypto: ecc - Export additional helper functions (Daniele Alessandrelli)  [Orabug: 36725601]  
  - arm64: cpufeature: Always specify and use a field width for capabilities (Mark Brown)  [Orabug: 36725601]  
  - octeontx2-pf: TC flower offload support for mirror (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Add TC flower offload support for TCP flags (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-pf: TC flower offload support for ICMP type and code (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Tc flower offload support for MPLS (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Harden rule validation. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: TC flower offload support for SPI field (Ratheesh Kannoth)  [Orabug: 36725601]  
  - net: flow_dissector: Add IPSEC dissector (Ratheesh Kannoth)  [Orabug: 36725601]  
  - net: flow_dissector: add support for cfm packets (Zahari Doychev)  [Orabug: 36725601]  
  - flow_dissector: Add support for HSRv0 (Kurt Kanzenbach)  [Orabug: 36725601]  
  - flow_dissector: Add support for HSR (Kurt Kanzenbach)  [Orabug: 36725601]  
  - octeontx2-af: Initialize maps. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Fix a double free issue (Suman Ghosh)  [Orabug: 36725601]  
  - Octeontx2-af: Fix an issue in firmware shared data reserved space (Hariprasad Kelam)  [Orabug: 36725601]  
  - Octeontx2-af: Fetch MAC channel info from firmware (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Send UP messages to VF only when VF is up. (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: CN10KB: Fix FIFO length calculation for RPM2 (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2 - By default allocate one CPT LF per CPT VF (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-af: Fix pause frame configuration (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add new devlink param to configure maximum usable NIX block LFs (Suman Ghosh)  [Orabug: 36725601]  
  - drivers: watchdog: marvell_gti: fix zero pretimeout handling (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for offload tc with skbedit mark action (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Use default max_active works instead of one (Subbaraya Sundeep)  [Orabug: 36725601]  
  - net: octeontx2: Use alloc_ordered_workqueue() to create ordered workqueues (Tejun Heo)  [Orabug: 36725601]  
  - octeontx2-pf: Wait till detach_resources msg is complete (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Add new mbox to support multicast/mirror offload (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Fix page pool frag allocation warning (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: update type of prof fields in nix_aw_enq_req (Simon Horman)  [Orabug: 36725601]  
  - octeontx2-pf: Fix page pool cache index corruption. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: fix page_pool creation fail for rings > 32k (Ratheesh Kannoth)  [Orabug: 36725601]  
  - tc: flower: Enable offload support IPSEC SPI field. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - tc: flower: support for SPI (Ratheesh Kannoth)  [Orabug: 36725601]  
  - net: flower: add support for matching cfm fields (Zahari Doychev)  [Orabug: 36725601]  
  - net/sched: flower: Helper function for vlan ethtype checks (Boris Sukholitko)  [Orabug: 36725601]  
  - net/sched: flower: Allow matching on layer 2 miss (Ido Schimmel)  [Orabug: 36725601]  
  - net/sched: flower: Add L2TPv3 filter (Wojciech Drewek)  [Orabug: 36725601]  
  - net/sched: flower: Add PPPoE filter (Wojciech Drewek)  [Orabug: 36725601]  
  - net/sched: flower: Add number of vlan tags filter (Boris Sukholitko)  [Orabug: 36725601]  
  - octeontx2-af: Move validation of ptp pointer before its usage (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-af: CN10KB: fix PFC configuration (Hariprasad Kelam)  [Orabug: 36725601]  
  - drivers: watchdog: marvell_gti: Program the max_hw_heartbeat_ms (George Cherian)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Generate hash key using ecb(aes) (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Promisc enable/disable through mbox (Ratheesh Kannoth)  [Orabug: 36725601]  
  - crypto: octeontx2 - support setting ctx ilen for inline CPT LF (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-pf: Fix graceful exit during PFC configuration failure (Suman Ghosh)  [Orabug: 36725601]  
  - cteonxt2-pf: Fix backpressure config for multiple PFC priorities to work simultaneously (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: TC flower offload support for rxqueue mapping (Ratheesh Kannoth)  [Orabug: 36725601]  
  - act_skbedit: skbedit queue mapping for receive queue (Amritha Nambiar)  [Orabug: 36725601]  
  - net/sched: act_skbedit: Add extack messages for offload failure (Ido Schimmel)  [Orabug: 36725601]  
  - octeontx2-af: TC flower offload support for inner VLAN (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: Code restructure to handle TC outer VLAN offload (Suman Ghosh)  [Orabug: 36725601]  
  - dt-bindings: watchdog: marvell GTI system watchdog driver (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for page pool (Ratheesh Kannoth)  [Orabug: 36725601]  
  - Watchdog: Add marvell GTI watchdog driver (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-af: Fix promiscuous mode (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Remove the PF_FUNC validation for NPC transmit rules (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: octeontx2 - add devlink option to set t106 mode (Srujana Challa)  [Orabug: 36725601]  
  - ptp: idt82p33: remove PEROUT_ENABLE_OUTPUT_MASK (Min Li)  [Orabug: 36725601]  
  - ptp: idt82p33: Add PTP_CLK_REQ_EXTTS support (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: return -EBUSY if phase pull-in is in progress (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: fix is_single_shot (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: Add PTP_CLK_REQ_EXTTS support (Min Li)  [Orabug: 36725601]  
  - ptp: idt82p33: use rsmu driver to access i2c/spi bus (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: repair non-kernel-doc comment (Randy Dunlap)  [Orabug: 36725601]  
  - ptp: clockmatrix: use rsmu driver to access i2c/spi bus (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: Add support for pll_mode=0 and manual ref switch of WF and WP (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: Add support for FW 5.2 (8A34005) (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: Remove idtcm_enable_tod_sync() (Min Li)  [Orabug: 36725601]  
  - octeontx2-af: Fix mcs sa cam entries size (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Remove xdp queues on program detach (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: ethtool expose qos stats (Hariprasad Kelam)  [Orabug: 36725601]  
  - macsec: Use helper macsec_netdev_priv for offload drivers (Subbaraya Sundeep)  [Orabug: 36725601]  
  - macsec: Don't rely solely on the dst MAC address to identify destination MACsec device (Emeel Hakim)  [Orabug: 36725601]  
  - vlan: Add MACsec offload operations for VLAN interface (Emeel Hakim)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Support VLAN in clear text (Subbaraya Sundeep)  [Orabug: 36725601]  
  - ethtool: add support to set/get completion queue event size (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Adjust Tx credits when MCS external bypass is disabled (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2 - register error interrupts for inline cptlf (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Fix MCS block interrupt (Geetha sowjanya)  [Orabug: 36725601]  
  - irqchip/gic-v3: Detect LPI invalidation MMIO registers (Marc Zyngier)  [Orabug: 36725601]  
  - irqchip/gic-v3: Exposes bit values for GICR_CTLR.{IR, CES} (Marc Zyngier)  [Orabug: 36725601]  
  - octeontx2-af: Enable hardware timestamping for VFs (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Fix hash extraction enable configuration (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Restore TC ingress police rules when interface is up (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: octeontx2 - add LF reset on queue disable (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Fix shared counters logic (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Match macsec ethertype along with DMAC (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeonxt2-af: mcs: Fix per port bypass config (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Write TCAM_DATA and TCAM_MASK registers at once (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Fix issues with NPC field hash extract (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Fix PFC TX scheduler free (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: print error message incase of invalid pf mapping (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Fix depth of cam and mem table. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Fix start and end bit for scan config (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Update correct mask to filter IPv4 fragments (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: update CQ context fields (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Offload extended packet number(XPN) feature (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Add devlink option to adjust mcam high prio zone entries (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Update/Fix NPC field hash extract feature (Ratheesh Kannoth)  [Orabug: 36725601]  
  - crypto: octeontx2 - remove errata workaround for CN10KB or CN10KA B0 chip. (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - add ctx_val workaround (Srujana Challa)  [Orabug: 36725601]  
  - perf/uapi: Define PERF_MEM_SNOOPX_PEER in kernel header file (Ravi Bangoria)  [Orabug: 36725601]  
  - octeontx2-af: cn10kb: fix interrupt csr addresses (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Config parser to skip 8B header (Geetha sowjanya)  [Orabug: 36725601]  
  - net: macsec: remove the prepare flag from the MACsec offloading context (Antoine Tenart)  [Orabug: 36725601]  
  - net: atlantic: macsec: remove checks on the prepare phase (Antoine Tenart)  [Orabug: 36725601]  
  - net: phy: mscc: macsec: remove checks on the prepare phase (Antoine Tenart)  [Orabug: 36725601]  
  - net: macsec: remove the prepare phase when offloading (Antoine Tenart)  [Orabug: 36725601]  
  - net: atlantic: macsec: make the prepare phase a noop (Antoine Tenart)  [Orabug: 36725601]  
  - net: phy: mscc: macsec: make the prepare phase a noop (Antoine Tenart)  [Orabug: 36725601]  
  - octeontx2-af: CN10KB: Add USGMII LMAC mode (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Enable PTP PPS output support (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Use PTP HW timestamp counter atomic update feature (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2: Remove unnecessary ternary operators (Ruan Jinjie)  [Orabug: 36725601]  
  - arm64: mm: Convert to GENERIC_IOREMAP (Kefeng Wang)  [Orabug: 36725601]  
  - mm: ioremap: Use more sensible name in ioremap_prot() (Kefeng Wang)  [Orabug: 36725601]  
  - mailbox: pcc: Use PCC mailbox channel pointer instead of standard (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Add pcc_mbox_chan structure to hold shared memory region info (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Consolidate subspace doorbell register parsing (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Consolidate subspace interrupt information parsing (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Refactor all PCC channel information into a structure (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Fix kernel doc warnings (Sudeep Holla)  [Orabug: 36725601]  
  - of: Add of_get_cpu_hwid() to read hardware ID from CPU nodes (Rob Herring)  [Orabug: 36725601]  
  - genirq: GENERIC_IRQ_EFFECTIVE_AFF_MASK depends on SMP (Samuel Holland)  [Orabug: 36725601]  
  - ACPI: irq: Allow acpi_gsi_to_irq() to have an arch-specific fallback (Marc Zyngier)  [Orabug: 36725601]  
  - ACPI: irq: Fix some kernel-doc issues (Xiongfeng Wang)  [Orabug: 36725601]  
  - APCI: irq: Add support for multiple GSI domains (Marc Zyngier)  [Orabug: 36725601]  
  - octeontx2-af: Add validation for lmac type (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Fix devlink unregister (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Free pending and dropped SQEs (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2: Detect the mbox up or down message via register (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Install TC filter rules in hardware based on priority (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Increase the size of dmac filter flows (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Allow both ntuple and TC features on the interface (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Prepare for QOS offload (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: htb offload support for Round Robin scheduling (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: implement transmit schedular allocation algorithm (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for HTB offload (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Fix resource leakage in VF driver unbind (Hariprasad Kelam)  [Orabug: 36725601] {CVE-2023-52905}
  - octeontx2-pf: Refactor schedular queue alloc/free calls (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: qos send queues management (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Fix SQE threshold checking (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Rename tot_tx_queues to non_qos_queues (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add filter profiles in hardware to extract packet headers (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Fix a resource leak in the probe and remove functions (Christophe JAILLET)  [Orabug: 36725601]  
  - spi: cadence: Ensure data lines set to low during dummy-cycle period (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Fix busy cycles calculation (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Remove redundant dev_err call (Shang XiaoJing)  [Orabug: 36725601]  
  - spi: cadence: fix platform_get_irq.cocci warning (Yihao Han)  [Orabug: 36725601]  
  - spi: cadence: Add of_node_put() before return (Wan Jiabing)  [Orabug: 36725601]  
  - spi: cadence: fix static checker warning (Parshuram Thombare)  [Orabug: 36725601]  
  - spi: cadence: Fix spelling mistake "nunber" -> "number" (Colin Ian King)  [Orabug: 36725601]  
  - spi: cadence: add support for Cadence XSPI controller (Parshuram Thombare)  [Orabug: 36725601]  
  - spi: cadence: add dt-bindings documentation for Cadence XSPI controller (Parshuram Thombare)  [Orabug: 36725601]  
  - Documentation: arm64: Document PMU counters access from userspace (Raphael Gault)  [Orabug: 36725601]  
  - octeontx2-af: Add missing mcs flr handler call (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: Fix mcs stats register address (Geetha sowjanya)  [Orabug: 36725601]  
  - i2c: octeon: Handle watchdog timeout (Suneel Garapati)  [Orabug: 36725601]  
  - i2c: octeon: Add platform prefix to macros (Piyush Malgujar)  [Orabug: 36725601]  
  - i2c: thunderx: Support for High speed mode (Suneel Garapati)  [Orabug: 36725601]  
  - i2c: thunderx: Clock divisor logic changes (Suneel Garapati)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: Set NIX DWRR MTU for CN10KB silicon (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: Increase outstanding LMTST transactions (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Fix copy and paste bug in mcs_bbe_intr_handler() (Dan Carpenter)  [Orabug: 36725601]  
  - octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Add support to filter packet based on IP fragment (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Add additional checks while configuring ucast/bcast/mcast rules (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B header extraction support (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: Don't treat lack of CGX interfaces as error (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-pf: Reset MAC stats during probe (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-af: Reset MAC features in FLR (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add FEC stats for RPM/RPM_USX block (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: cn10kb: Add RPM_USX MAC support (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Support variable number of lmacs (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - net: thunderx: remove null check after call container_of() (Haowen Bai)  [Orabug: 36725601]  
  - octeontx2-af: Removed unnecessary debug messages. (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: Enable LBK links only when switch mode is on. (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Add NIX Errata workaround on CN10K silicon (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: add option to toggle DROP_RE enable in rx cfg (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2 - update CPT inbound inline IPsec mailbox (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - add support for AF to CPT PF uplink mbox (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - add SGv2 support for CN10KB or CN10KA B0 (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - hardware configuration for inline IPsec (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - Fix objects shared between several modules (Alexander Lobakin)  [Orabug: 36725601]  
  - crypto: octeontx2 - remove CPT block reset (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - increase CPT HW instruction queue length (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - Remove the unneeded result variable (ye xingchen)  [Orabug: 36725601]  
  - crypto: octeontx2 - simplify the return expression of otx2_cpt_aead_cbc_aes_sha_setkey() (Minghao Chi)  [Orabug: 36725601]  
  - crypto: octeontx2 - use swap() to make code cleaner (chiminghao)  [Orabug: 36725601]  
  - crypto: drivers - move from strlcpy with unused retval to strscpy (Wolfram Sang)  [Orabug: 36725601]  
  - crypto: octeontx2 - fix potential null pointer access (Shijith Thotton)  [Orabug: 36725601]  
  - crypto: octeontx2 - add firmware version in devlink info (Shijith Thotton)  [Orabug: 36725601]  
  - crypto: octeontx2 - disable DMA black hole on an DMA fault (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - CN10K CPT to RNM workaround (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - Use swap() instead of swap_engines() (Jiapeng Chong)  [Orabug: 36725601]  
  - crypto: octeontx2 - Avoid stack variable overflow (Kees Cook)  [Orabug: 36725601]  
  - crypto: octeontx2 - out of bounds access in otx2_cpt_dl_custom_egrp_delete() (Dan Carpenter)  [Orabug: 36725601]  
  - crypto: octeontx2 - add apis for custom engine groups (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - fix missing unlock (Yang Yingliang)  [Orabug: 36725601]  
  - crypto: octeontx2 - add synchronization between mailbox accesses (Harman Kalra)  [Orabug: 36725601]  
  - crypto: octeontx2 - parameters for custom engine groups (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: update CPT inbound inline IPsec config mailbox (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: restore rxc conf after teardown sequence (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to return CPT_AF_FLT_INT info (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: optimize cpt pf identification (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: modify FLR sequence for CPT (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: add mbox for CPT LF reset (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: recover CPT engine when it gets fault (Srujana Challa)  [Orabug: 36725601]  
  - arm64: Declare non global symbols as static (Linu Cherian)  [Orabug: 36725601]  
  - arm64: Add cavium_erratum_23154_cpus missing sentinel (Marc Zyngier)  [Orabug: 36725601]  
  - irqchip/gic-v3: Workaround Marvell erratum 38545 when reading IAR (Linu Cherian)  [Orabug: 36725601]  
  - arm64: re-enable CAVIUM_ERRATUM_23154, disable CAVIUM_ERRATUM_27456 (Dave Kleikamp)  [Orabug: 36725601]  
  - dt-bindings: perf: marvell: cn10k ddr performance monitor (Bharat Bhushan)  [Orabug: 36725601]  
  - hwrng: cavium - fix NULL but dereferenced coccicheck error (Wan Jiabing)  [Orabug: 36725601]  
  - perf/smmuv3: Add devicetree support (Jean-Philippe Brucker)  [Orabug: 36725601]  
  - ethernet: marvell: octeontx2 Fix resource not freed after malloc (Manank Patel)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: fix possible memory leak in otx2_probe() (Yang Yingliang)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Fix error return code in mcs_register_interrupts() (Yang Yingliang)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: fix missing unlock in some error paths (Yang Yingliang)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: remove unneeded semicolon (Yang Li)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Introduce MACSEC hardware offloading (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Add debugfs support (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Handle MCS block interrupts (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Support for stats collection (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Install a default TCAM for normal traffic (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Manage the MCS block hardware resources (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Add mailboxes for port related operations (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: Introduce driver for macsec block. (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Fix unused variable build error (Ren Zhijie)  [Orabug: 36725601]  
  - octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: return correct ptp timestamp for CN10K silicon (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Add egress PFC support (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Reduce minimum mtu size to 60 (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Fixes static warnings (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Limit link bringup time at firmware (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: returning uninitialized variable (Sebin Sebastian)  [Orabug: 36725601]  
  - octeontx2-af: Remove duplicate include (Jiapeng Chong)  [Orabug: 36725601]  
  - octeontx2-af: Skip CGX/RPM probe incase of zero lmac count (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Enable Exact match flag in kex profile (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for exact match table. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Invoke exact match functions if supported (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Wrapper functions for MAC addr add/del/update/reset (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2: Modify mbox request and response structures (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Debugsfs support for exact match. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Drop rules for NPC MCAM (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: FLR handler for exact match table. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: devlink configuration support (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Exact match scan from kex profile (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Exact match support (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Use hashed field in MCAM key (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Don't reset previous pfc config (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: fix operand size in bitwise operation (Shijith Thotton)  [Orabug: 36725601]  
  - marvell/octeontx2/af: fix repeated words in comments (Jilin Yuan)  [Orabug: 36725601]  
  - octeontx2-vf: Add support for adaptive interrupt coalescing (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for adaptive interrupt coalescing (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Vary completion queue event size (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Change receive buffer size using ethtool (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Remove unnecessary synchronize_irq() before free_irq() (Minghao Chi)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: fix error return of allocations (Niels Dossche)  [Orabug: 36725601]  
  - octeontx2-pf: replace bitmap_weight with bitmap_empty where appropriate (Yury Norov)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: add workaround for ptp errata (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: cn10k: add support for new ptp timestamp format (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: fix array bound error (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Add TC feature for VFs (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: PFC config support with DCBx (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Flow control resource management (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Priority flow control configuration support (Sunil Kumar Kori)  [Orabug: 36725601]  
  - octeontx2-af: Fix interrupt name strings (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-nicvf: Free VF PTP resources. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: don't corrupt user memory (Dan Carpenter)  [Orabug: 36725601]  
  - octeontx2-nicvf: fix ioctl callback (Arnd Bergmann)  [Orabug: 36725601]  
  - octeontx2-af: use swap() to make code cleaner (Yang Guang)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: Add channel and channel mask. (Rakesh Babu)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: debugfs for dumping LMTST map table (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: Minor changes. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-af: Increase number of reserved entries in KPU (Kiran Kumar K)  [Orabug: 36725601]  
  - octeontx2-nic: fix mixed module build (Arnd Bergmann)  [Orabug: 36725601]  
  - octeontx2-af: Add support to flush full CPT CTX cache (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: Perform cpt lf teardown in non FLR path (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: Enable CPT HW interrupts (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: Simplify the receive buffer size calculation (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Remove redundant initialization of variable pin (Colin Ian King)  [Orabug: 36725601]  
  - octeontx2-pf: Add XDP support to netdev PF (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-nicvf: Add PTP hardware clock support to NIX VF (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Add external ptp input clock (Yi Guo)  [Orabug: 36725601]  
  - octeontx2-af: Use ptp input clock info from firmware data (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2: Move devlink registration to be last devlink command (Leon Romanovsky)  [Orabug: 36725601]  
  - octeontx2-af: Limit KPU parsing for GTPU packets (Kiran Kumar K)  [Orabug: 36725601]  
  - octeontx2-af: Remove redundant initialization of variable blkaddr (Colin Ian King)  [Orabug: 36725601]  
  - octeontx2-af: Fix uninitialized variable val (Colin Ian King)  [Orabug: 36725601]  
  - octeontx2-af: Hardware configuration for inline IPsec (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: CN10K: Hide RPM stats over ethtool (Hariprasad Kelam)  [Orabug: 36725601]  
  - uek-rpm: Add skx_edac_common.ko to core-x86_64.list (Sherry Yang)  [Orabug: 37033806]  
  - EDAC, i10nm: make skx_common.o a separate module (Arnd Bergmann)  [Orabug: 37033806]  
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez)  [Orabug: 37037203] {CVE-2024-46738}
  - uek-rpm: Enable CONFIG_BLK_DEV_DRBD (Vijayendra Suman)  [Orabug: 36930383]  
  - crypto: qat - specify firmware files for 402xx (Giovanni Cabiddu)  [Orabug: 37041628]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.5.el9uek]
changelog:
  - mm/hugetlb: fix adjusting poison page flag in non-HVO scenario (Jane Chu)  [Orabug: 37182268]
  - x86/bugs: Adjust SRSO mitigation to new features (Boris Ostrovsky)  [Orabug: 37145844]
  - net/mlx5: disable the 'fast unload' feature on Exadata systems (Qing Huang)  [Orabug: 37093170]
  - NFS: remove revoked delegation from server's delegation list (Dai Ngo)  [Orabug: 36990366]
  - perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() (Alexander Antonov)  [Orabug: 36882937]  {CVE-2023-52450}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.6.el9uek]
changelog:
  - ice: Add a per-VF limit on number of FDIR filters (Ahmed Zaki)  [Orabug: 36964088]  {CVE-2024-42291}
  - scsi: lpfc: Fix a possible null pointer dereference (Huai-Yuan Liu)  [Orabug: 36964437]  {CVE-2024-43821}
  - power: reset: pwr-mlxbf: support graceful shutdown (Asmaa Mnebhi)  [Orabug: 37208029]
  - gpio: mlxbf3: Support shutdown() function (Asmaa Mnebhi)  [Orabug: 37208029]
  - sdhci-of-dwcmshc: disable PM runtime in dwcmshc_remove() (Liming Sun)  [Orabug: 37208029]
  - ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna)  [Orabug: 37199019] {CVE-2024-49958}
  - Revert "ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block" (Gautham Ananthakrishna)  [Orabug: 37199019]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.168.1.el9uek]
changelog:
  - LTS version: v5.15.168 (Vijayendra Suman)
  - net: xilinx: axienet: Schedule NAPI in two steps (Sean Anderson)
  - selftests: net: more strict check in net_helper (Paolo Abeni)
  - net: axienet: start napi before enabling Rx/Tx (Andy Chiu)
  - ext4: fix warning in ext4_dio_write_end_io() (Jan Kara)
  - netfilter: ip6t_rpfilter: Fix regression with VRF interfaces (Phil Sutter)
  - net: vrf: determine the dst using the original ifindex for multicast (Antoine Tenart)
  - net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev (Andrea Mayer)
  - xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup (David Ahern)
  - net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT (Eyal Birger)
  - block, bfq: fix uaf for accessing waker_bfqq after splitting (Yu Kuai)
  - kthread: unpark only parked kthread (Frederic Weisbecker) [Orabug: 37206395] {CVE-2024-50019}
  - nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error (Yonatan Maman) [Orabug: 37252307] {CVE-2024-50096}
  - mptcp: pm: do not remove closing subflows (Matthieu Baerts (NGI0))
  - net: dsa: lan9303: ensure chip reset and wait for READY status (Anatolij Gustschin)
  - net: Fix an unsafe loop on the list (Anastasia Kovaleva) [Orabug: 37206408] {CVE-2024-50024}
  - net: explicitly clear the sk pointer, when pf->create fails (Ignat Korchagin)
  - drm/v3d: Stop the active perfmon before being destroyed (Maíra Canal) [Orabug: 37206424] {CVE-2024-50031}
  - hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma (SurajSonawane2415)
  - usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (Icenowy Zheng)
  - usb: xhci: Fix problem with xhci resume from suspend (Jose Alberto Reguero)
  - usb: dwc3: core: Stop processing of pending events if controller is halted (Selvarasu Ganesan)
  - Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant" (Oliver Neukum)
  - HID: plantronics: Workaround for an unexcepted opposite volume key (Wade Wang)
  - resource: fix region_intersects() vs add_memory_driver_managed() (Huang Ying) [Orabug: 37200930] {CVE-2024-49878}
  - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() (Basavaraj Natikar) [Orabug: 37264222] {CVE-2024-50189}
  - hwmon: (adt7470) Add missing dependency on REGMAP_I2C (Javier Carrasco)
  - hwmon: (adm9240) Add missing dependency on REGMAP_I2C (Javier Carrasco)
  - hwmon: (tmp513) Add missing dependency on REGMAP_I2C (Guenter Roeck)
  - x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported (Mitchell Levy)
  - RDMA/hns: Fix UAF for cq async event (Chengchang Tang) [Orabug: 36753395] {CVE-2024-38545}
  - slip: make slhc_remember() more robust against malicious packets (Eric Dumazet) [Orabug: 37206428] {CVE-2024-50033}
  - ppp: fix ppp_async_encode() illegal access (Eric Dumazet) [Orabug: 37206434] {CVE-2024-50035}
  - mctp: Handle error of rtnl_register_module(). (Kuniyuki Iwashima)
  - rtnetlink: Add bulk registration helpers for rtnetlink message handlers. (Kuniyuki Iwashima)
  - net: rtnetlink: add msg kind names (Nikolay Aleksandrov)
  - netfilter: fib: check correct rtable in vrf setups (Florian Westphal)
  - netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces. (Guillaume Nault)
  - netfilter: rpfilter/fib: Populate flowic_l3mdev field (Phil Sutter)
  - netfilter: xtables: avoid NFPROTO_UNSPEC where needed (Florian Westphal) [Orabug: 37206449] {CVE-2024-50038}
  - sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start (Xin Long)
  - net: ibm: emac: mal: fix wrong goto (Rosen Penev)
  - net/sched: accept TCA_STAB only for root qdisc (Eric Dumazet) [Orabug: 37206456] {CVE-2024-50039}
  - igb: Do not bring the device up after non-fatal error (Mohamed Khalfella) [Orabug: 37206463] {CVE-2024-50040}
  - i40e: Fix macvlan leak by synchronizing access to mac_filter_hash (Aleksandr Loktionov) [Orabug: 37206468] {CVE-2024-50041}
  - ice: Fix netif_is_ice() in Safe Mode (Marcin Szycik)
  - gpio: aspeed: Use devm_clk api to manage clock source (Billy Tsai)
  - gpio: aspeed: Add the flush write to ensure the write complete. (Billy Tsai)
  - net: dsa: b53: fix jumbo frames on 10/100 ports (Jonas Gorski)
  - net: dsa: b53: allow lower MTUs on BCM5325/5365 (Jonas Gorski)
  - net: dsa: b53: fix max MTU for BCM5325/BCM5365 (Jonas Gorski)
  - net: dsa: b53: fix max MTU for 1g switches (Jonas Gorski)
  - net: dsa: b53: fix jumbo frame mtu check (Jonas Gorski)
  - thermal: intel: int340x: processor: Fix warning during module unload (Zhang Rui) [Orabug: 37252297] {CVE-2024-50093}
  - thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add (Srinivas Pandruvada)
  - net: phy: bcm84881: Fix some error handling paths (Christophe JAILLET)
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (Luiz Augusto von Dentz) [Orabug: 37206473] {CVE-2024-50044}
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Andy Roulin) [Orabug: 37206481] {CVE-2024-50045}
  - tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe (Neal Cardwell)
  - tcp: fix to allow timestamp undo if no retransmits were sent (Neal Cardwell)
  - net: phy: dp83869: fix memory corruption when enabling fiber (Ingo van Lil) [Orabug: 37264220] {CVE-2024-50188}
  - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() (Yanjun Zhang) [Orabug: 37206486] {CVE-2024-50046}
  - SUNRPC: Fix integer overflow in decode_rc_list() (Dan Carpenter)
  - ice: fix VLAN replay after reset (Dave Ertman)
  - NFSD: Mark filecache "down" if init fails (Chuck Lever)
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (Bob Pearson)
  - fbdev: sisfb: Fix strbuf array overflow (Andrey Shumilin) [Orabug: 37264185] {CVE-2024-50180}
  - drm/amd/display: Check null pointer before dereferencing se (Alex Hung) [Orabug: 37206502] {CVE-2024-50049}
  - driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (Zijun Hu)
  - tools/iio: Add memory allocation failure check for trigger_name (Zhu Jun)
  - virtio_pmem: Check device status before requesting flush (Philip Chen) [Orabug: 37264203] {CVE-2024-50184}
  - comedi: ni_routing: tools: Check when the file could not be opened (Ruffalo Lavoisier)
  - usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario (Shawn Shao)
  - usb: chipidea: udc: enable suspend interrupt after usb reset (Xu Yang)
  - clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (Peng Fan) [Orabug: 37264190] {CVE-2024-50181}
  - remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table (Peng Fan)
  - media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() (Yunke Cao)
  - ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition (Kaixin Wang) [Orabug: 37206539] {CVE-2024-50059}
  - PCI: Mark Creative Labs EMU20k2 INTx masking as broken (Alex Williamson)
  - i2c: i801: Use a different adapter-name for IDF adapters (Hans de Goede)
  - PCI: Add ACS quirk for Qualcomm SA8775P (Subramanian Ananthanarayanan)
  - clk: bcm: bcm53573: fix OF node leak in init (Krzysztof Kozlowski)
  - RDMA/rtrs-srv: Avoid null pointer deref during path establishment (Md Haris Iqbal) [Orabug: 37206562] {CVE-2024-50062}
  - PCI: Add function 0 DMA alias quirk for Glenfly Arise chip (WangYuli)
  - RDMA/mad: Improve handling of timed out WRs of mad agent (Saravanan Vajravel) [Orabug: 37252300] {CVE-2024-50095}
  - ktest.pl: Avoid false positives with grub2 skip regex (Daniel Jordan)
  - s390/cpum_sf: Remove WARN_ON_ONCE statements (Thomas Richter)
  - ext4: nested locking for xattr inode (Wojciech Gładysz)
  - ext4: don't set SB_RDONLY after filesystem errors (Jan Kara) [Orabug: 37264225] {CVE-2024-50191}
  - bpf, x64: Fix a jit convergence issue (Yonghong Song)
  - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Gerald Schaefer)
  - s390/facility: Disable compile time optimization for decompressor code (Heiko Carstens)
  - bpf: Check percpu map value size first (Tao Chen)
  - Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal (Mathias Krause)
  - virtio_console: fix misc probe bugs (Michael S. Tsirkin)
  - fs/ntfs3: Refactor enum_rstbl to suppress static checker (Konstantin Komarov)
  - selftests: net: Remove executable bits from library scripts (Benjamin Poirier)
  - selftests/net: synchronize udpgro tests' tx and rx connection (Lucas Karpinski)
  - selftests/net: give more time to udpgro bg processes to complete startup (Adrien Thierry)
  - tracing: Have saved_cmdlines arrays all in one allocation (Steven Rostedt (Google))
  - drm/crtc: fix uninitialized variable use even harder (Rob Clark)
  - tracing: Remove precision vsnprintf() check from print event (Steven Rostedt (Google))
  - net: ethernet: cortina: Drop TSO support (Linus Walleij)
  - unicode: Don't special case ignorable code points (Gabriel Krisman Bertazi) [Orabug: 37252273] {CVE-2024-50089}
  - ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (Jaroslav Kysela) [Orabug: 36983951] {CVE-2023-52904}
  - perf report: Fix segfault when 'sym' sort key is not used (Namhyung Kim)
  - 9p: add missing locking around taking dentry fid list (Dominique Martinet) [Orabug: 36774627] {CVE-2024-39463}
  - ext4: fix inode tree inconsistency caused by ENOMEM (zhanchengbin)
  - Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings" (Sumit Semwal)
  - ACPI: battery: Fix possible crash when unregistering a battery hook (Armin Wolf) [Orabug: 37206091] {CVE-2024-49955}
  - ACPI: battery: Simplify battery hook locking (Armin Wolf)
  - clk: qcom: gcc-sc8180x: Add GPLL9 support (Satya Priya Kakitapalli)
  - r8169: add tally counter fields added with RTL8125 (Heiner Kallweit) [Orabug: 37206182] {CVE-2024-49973}
  - r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun" (Colin Ian King)
  - dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x (Satya Priya Kakitapalli)
  - dt-bindings: clock: qcom: Add missing UFS QREF clocks (Manivannan Sadhasivam)
  - media: imx335: Fix reset-gpio handling (Umang Jain)
  - media: i2c: imx335: Enable regulator supplies (Kieran Bingham)
  - drm/rockchip: vop: clear DMA stop bit on RK3066 (Val Packett)
  - drm/rockchip: support gamma control on RK3399 (Hugh Cole-Baker)
  - drm/rockchip: define gamma registers for RK3399 (Hugh Cole-Baker)
  - lib/buildid: harden build ID parsing logic (Andrii Nakryiko)
  - build-id: require program headers to be right after ELF header (Alexey Dobriyan)
  - drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` (Mario Limonciello)
  - uprobes: fix kernel info leak via "[uprobes]" vma (Oleg Nesterov)
  - arm64: cputype: Add Neoverse-N3 definitions (Mark Rutland)
  - arm64: Add Cortex-715 CPU part definition (Anshuman Khandual)
  - ext4: dax: fix overflowing extents beyond inode size when partially writing (Zhihao Cheng) [Orabug: 37206370] {CVE-2024-50015}
  - ext4: properly sync file size update after O_SYNC direct IO (Jan Kara)
  - spi: bcm63xx: Fix missing pm_runtime_disable() (Jinjie Ruan)
  - i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
  - i2c: xiic: Use devm_clk_get_enabled() (Andi Shyti)
  - i2c: core: Lock address during client device instantiation (Heiner Kallweit)
  - i2c: create debugfs entry per adapter (Wolfram Sang)
  - kconfig: qconf: fix buffer overflow in debug links (Masahiro Yamada)
  - drm/amd/display: Fix system hang while resume with TBT monitor (Tom Chung) [Orabug: 37206307] {CVE-2024-50003}
  - drm/sched: Add locking to drm_sched_entity_modify_sched (Tvrtko Ursulin)
  - close_range(): fix the logics in descriptor table trimming (Al Viro)
  - tracing/timerlat: Fix a race during cpuhp processing (Wei Li) [Orabug: 37200894] {CVE-2024-49866}
  - tracing/hwlat: Fix a race during cpuhp processing (Wei Li)
  - gpio: davinci: fix lazy disable (Emanuele Ghidoli)
  - btrfs: wait for fixup workers before stopping cleaner kthread during umount (Filipe Manana) [Orabug: 37200896] {CVE-2024-49867}
  - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (Qu Wenruo) [Orabug: 37200902] {CVE-2024-49868}
  - ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (Hans de Goede)
  - ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (Hans de Goede)
  - Input: adp5589-keys - fix adp5589_gpio_get_value() (Nuno Sa)
  - Input: adp5589-keys - fix NULL pointer dereference (Nuno Sa) [Orabug: 37200911] {CVE-2024-49871}
  - rtc: at91sam9: fix OF node leak in probe() error path (Krzysztof Kozlowski)
  - net: stmmac: Fix zero-division error when disabling tc cbs (KhaiWenTan) [Orabug: 37206640] {CVE-2024-49977}
  - tomoyo: fallback to realpath if symlink's pathname does not exist (Tetsuo Handa)
  - iio: magnetometer: ak8975: Fix reading for ak099xx sensors (Barnabás Czémán)
  - clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table (Satya Priya Kakitapalli)
  - clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable() (Manivannan Sadhasivam)
  - media: venus: fix use after free bug in venus_remove due to race condition (Zheng Wang) [Orabug: 37206208] {CVE-2024-49981}
  - clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src (Satya Priya Kakitapalli)
  - clk: qcom: clk-rpmh: Fix overflow in BCM vote (Mike Tipton)
  - media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags (Hans Verkuil)
  - media: sun4i_csi: Implement link validate for sun4i_csi subdev (Laurent Pinchart)
  - clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks (Dmitry Baryshkov)
  - clk: rockchip: fix error for unknown clocks (Sebastian Reichel)
  - aoe: fix the potential use-after-free problem in more places (Chun-Yi Lee) [Orabug: 37206641] {CVE-2024-49982}
  - NFSD: Fix NFSv4's PUTPUBFH operation (Chuck Lever)
  - nfsd: map the EBADMSG to nfserr_io to avoid warning (Li Lingfeng) [Orabug: 37200917] {CVE-2024-49875}
  - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (NeilBrown)
  - perf hist: Update hist symbol when updating maps (Matt Fleming)
  - exfat: fix memory leak in exfat_load_bitmap() (Yuezhang Mo) [Orabug: 37206359] {CVE-2024-50013}
  - riscv: define ILLEGAL_POINTER_VALUE for 64bit (Jisheng Zhang)
  - ext4: mark fc as ineligible using an handle in ext4_xattr_set() (Luis Henriques (SUSE))
  - ext4: use handle to mark fc as ineligible in __track_dentry_update() (Luis Henriques (SUSE))
  - ext4: fix fast commit inode enqueueing during a full journal commit (Luis Henriques (SUSE))
  - ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() (Luis Henriques (SUSE))
  - ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() (Luis Henriques (SUSE))
  - ext4: update orig_path in ext4_find_extent() (Baokun Li) [Orabug: 37200941] {CVE-2024-49881}
  - ext4: fix double brelse() the buffer of the extents path (Baokun Li) [Orabug: 37200947] {CVE-2024-49882}
  - ext4: aovid use-after-free in ext4_ext_insert_extent() (Baokun Li) [Orabug: 37200953] {CVE-2024-49883}
  - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (Baokun Li) [Orabug: 37206215] {CVE-2024-49983}
  - ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() (Luis Henriques (SUSE))
  - ext4: propagate errors from ext4_find_extent() in ext4_insert_range() (Baokun Li)
  - ext4: fix slab-use-after-free in ext4_split_extent_at() (Baokun Li) [Orabug: 37200959] {CVE-2024-49884}
  - ext4: correct encrypted dentry name hash when not casefolded (yao.ly)
  - ext4: no need to continue when the number of entries is 1 (Edward Adam Davis) [Orabug: 37206145] {CVE-2024-49967}
  - ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 (Ai Chao)
  - ALSA: line6: add hw monitor volume control to POD HD500X (Hans P. Moller)
  - ALSA: usb-audio: Add native DSD support for Luxman D-08u (Jan Lalinsky)
  - ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET (Lianqin Hu)
  - ALSA: core: add isascii() check to card ID generator (Jaroslav Kysela)
  - drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS (Thomas Zimmermann)
  - parisc: Fix itlb miss handler for 64-bit programs (Helge Deller)
  - perf/core: Fix small negative period being ignored (Luo Gengkun)
  - power: supply: hwmon: Fix missing temp1_max_alarm attribute (Hans de Goede)
  - spi: bcm63xx: Fix module autoloading (Jinjie Ruan)
  - firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp() (Krzysztof Kozlowski)
  - i2c: xiic: Wait for TX empty to avoid missed TX NAKs (Robert Hancock)
  - i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume (Marek Vasut) [Orabug: 37206219] {CVE-2024-49985}
  - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug (Zach Wade) [Orabug: 37200965] {CVE-2024-49886}
  - selftests: vDSO: fix vdso_config for s390 (Heiko Carstens)
  - selftests: vDSO: fix ELF hash table entry size for s390x (Jens Remus)
  - selftests/mm: fix charge_reserved_hugetlb.sh test (David Hildenbrand)
  - selftests: vDSO: fix vDSO symbols lookup for powerpc64 (Christophe Leroy)
  - selftests: vDSO: fix vdso_config for powerpc (Christophe Leroy)
  - selftests: vDSO: fix vDSO name for powerpc (Christophe Leroy)
  - selftests: breakpoints: use remaining time to check if suspend succeed (Yifei Liu)
  - spi: s3c64xx: fix timeout counters in flush_fifo (Ben Dooks)
  - spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
  - usb: typec: tcpm: Check for port partner validity before consuming it (Badhri Jagan Sridharan) [Orabug: 36683242] {CVE-2024-36893}
  - blk-integrity: register sysfs attributes on struct device (Thomas Weißschuh)
  - blk-integrity: convert to struct device_attribute (Thomas Weißschuh)
  - blk-integrity: use sysfs_emit (Thomas Weißschuh)
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate() (Artem Sadovnikov) [Orabug: 37206322] {CVE-2024-50006}
  - ext4: avoid use-after-free in ext4_ext_show_leaf() (Baokun Li) [Orabug: 37205705] {CVE-2024-49889}
  - ext4: ext4_search_dir should return a proper error (Thadeu Lima de Souza Cascardo)
  - of/irq: Refer to actual buffer size in of_irq_parse_one() (Geert Uytterhoeven)
  - drm/amd/pm: ensure the fw_info is not null before using it (Tim Huang) [Orabug: 37205712] {CVE-2024-49890}
  - drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() (Geert Uytterhoeven)
  - scsi: aacraid: Rearrange order of struct aac_srb_unit (Kees Cook)
  - drm/printer: Allow NULL data in devcoredump printer (Matthew Brost)
  - drm/amd/display: Initialize get_bytes_per_element's default to 1 (Alex Hung) [Orabug: 37205726] {CVE-2024-49892}
  - drm/amd/display: Fix index out of bounds in DCN30 color transformation (Srinivasan Shanmugam) [Orabug: 37206158] {CVE-2024-49969} {CVE-2024-49895}
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation (Srinivasan Shanmugam) [Orabug: 37205739] {CVE-2024-49894}
  - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (Srinivasan Shanmugam) [Orabug: 37205745] {CVE-2024-49895} {CVE-2024-49969}
  - drm/amd/display: Check stream before comparing them (Alex Hung) [Orabug: 37205751] {CVE-2024-49896}
  - platform/x86: touchscreen_dmi: add nanote-next quirk (Ckath)
  - HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (Vishnu Sankar)
  - drm/amdgpu: enable gfxoff quirk on HP 705G4 (Peng Liu)
  - drm/amdgpu: add raven1 gfxoff quirk (Peng Liu)
  - jfs: Fix uninit-value access of new_ea in ea_buffer (Zhao Mengmeng) [Orabug: 37205777] {CVE-2024-49900}
  - scsi: smartpqi: correct stream detection (Mahesh Rajashekhara)
  - jfs: check if leafidx greater than num leaves per dmap tree (Edward Adam Davis) [Orabug: 37205789] {CVE-2024-49902}
  - jfs: Fix uaf in dbFreeBits (Edward Adam Davis) [Orabug: 37205794] {CVE-2024-49903}
  - jfs: UBSAN: shift-out-of-bounds in dbFindBits (Remington Brasga)
  - drm/amd/display: Check null pointers before using dc->clk_mgr (Alex Hung) [Orabug: 37205820] {CVE-2024-49907}
  - ata: sata_sil: Rename sil_blacklist to sil_quirks (Damien Le Moal)
  - drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (Srinivasan Shanmugam) [Orabug: 37205857] {CVE-2024-49913}
  - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count (Sanjay K Kumar) [Orabug: 37206262] {CVE-2024-49993}
  - iommu/vt-d: Always reserve a domain ID for identity setup (Lu Baolu)
  - power: reset: brcmstb: Do not go into infinite loop if reset fails (Andrew Davis)
  - iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux (Marc Gonzalez)
  - rcuscale: Provide clear error when async specified without primitives (Paul E. McKenney)
  - fbdev: pxafb: Fix possible use after free in pxafb_task() (Kaixin Wang) [Orabug: 37205935] {CVE-2024-49924}
  - x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() (Kees Cook)
  - ALSA: hdsp: Break infinite MIDI input flush loop (Takashi Iwai)
  - ALSA: asihpi: Fix potential OOB array access (Takashi Iwai) [Orabug: 37206327] {CVE-2024-50007}
  - tools/x86/kcpuid: Protect against faulty "max subleaf" values (Ahmed S. Darwish)
  - ALSA: usb-audio: Add logitech Audio profile quirk (Joshua Pius)
  - ALSA: usb-audio: Define macros for quirk table entries (Takashi Iwai)
  - x86/ioapic: Handle allocation failures gracefully (Thomas Gleixner) [Orabug: 37205954] {CVE-2024-49927}
  - ALSA: usb-audio: Add input value sanity checks for standard types (Takashi Iwai)
  - signal: Replace BUG_ON()s (Thomas Gleixner)
  - nfp: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() (Gustavo A. R. Silva) [Orabug: 37206332] {CVE-2024-50008}
  - wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker (Felix Fietkau)
  - proc: add config & param to block forcing mem writes (Adrian Ratiu)
  - ACPICA: iasl: handle empty connection_node (Aleksandrs Vinarskis)
  - tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process (Jason Xing)
  - net: atlantic: Avoid warning about potential string truncation (Simon Horman)
  - ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family (Ido Schimmel)
  - ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR). (Kuniyuki Iwashima)
  - net: mvpp2: Increase size of queue_name buffer (Simon Horman)
  - tipc: guard against string buffer overrun (Simon Horman) [Orabug: 37206276] {CVE-2024-49995}
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (Pei Xiao) [Orabug: 37206122] {CVE-2024-49962}
  - ACPI: EC: Do not release locks during operation region accesses (Rafael J. Wysocki)
  - wifi: rtw88: select WANT_DEV_COREDUMP (Zong-Zhe Yang)
  - wifi: ath11k: fix array out-of-bound access in SoC stats (Karthikeyan Periyasamy) [Orabug: 37205975] {CVE-2024-49930}
  - nvme-pci: qdepth 1 quirk (Keith Busch)
  - blk_iocost: fix more out of bound shifts (Konstantin Ovsepian) [Orabug: 37205994] {CVE-2024-49933}
  - net: sched: consistently use rcu_replace_pointer() in taprio_change() (Dmitry Antipov)
  - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (Armin Wolf)
  - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (Armin Wolf)
  - ACPI: PAD: fix crash in exit_round_robin() (Seiji Nishikawa) [Orabug: 37206005] {CVE-2024-49935}
  - net: hisilicon: hns_mdio: fix OF node leak in probe() (Krzysztof Kozlowski)
  - net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info() (Krzysztof Kozlowski)
  - net: hisilicon: hip04: fix OF node leak in probe() (Krzysztof Kozlowski)
  - net/xen-netback: prevent UAF in xenvif_flush_hash() (Jeongjun Park) [Orabug: 37206011] {CVE-2024-49936}
  - ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node() (Aleksandr Mishin)
  - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit (Toke Høiland-Jørgensen) [Orabug: 37206028] {CVE-2024-49938}
  - wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() (Dmitry Kandybka)
  - f2fs: Require FMODE_WRITE for atomic write ioctls (Jann Horn) [Orabug: 37200793] {CVE-2024-47740}
  - ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (Takashi Iwai)
  - ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m (Hui Wang)
  - ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs (Takashi Iwai)
  - ALSA: hda/realtek: Fix the push button function for the ALC257 (Oder Chiou)
  - ALSA: mixer_oss: Remove some incorrect kfree_const() usages (Christophe JAILLET)
  - media: usbtv: Remove useless locks in usbtv_video_free() (Benjamin Gaignard) [Orabug: 36598250] {CVE-2024-27072}
  - i2c: xiic: Try re-initialization on bus busy timeout (Robert Hancock)
  - i2c: xiic: improve error message when transfer fails to start (Marc Ferland)
  - i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path (Lars-Peter Clausen)
  - i2c: xiic: Fix RX IRQ busy check (Marek Vasut)
  - i2c: xiic: Switch from waitqueue to completion (Marek Vasut)
  - i2c: xiic: Fix broken locking on tx_msg (Marek Vasut)
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (Xin Long) [Orabug: 37206050] {CVE-2024-49944}
  - ppp: do not assume bh is held in ppp_channel_bridge_input() (Eric Dumazet) [Orabug: 37206060] {CVE-2024-49946}
  - ipv4: ip_gre: Fix drops of small packets in ipgre_xmit (Anton Danilov)
  - net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check (Shenwei Wang)
  - net: stmmac: Disable automatic FCS/Pad stripping (Kurt Kanzenbach)
  - stmmac_pci: Fix underflow size in stmmac_rx (Zekun Shen)
  - net: add more sanity checks to qdisc_pkt_len_init() (Eric Dumazet) [Orabug: 37206063] {CVE-2024-49948}
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Eric Dumazet) [Orabug: 37206069] {CVE-2024-49949}
  - net: ethernet: lantiq_etop: fix memory disclosure (Aleksander Jan Bajkowski) [Orabug: 37206288] {CVE-2024-49997}
  - Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption (Eric Dumazet) [Orabug: 37206080] {CVE-2024-49952}
  - net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED (Phil Sutter)
  - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() (Elena Salomatkina) [Orabug: 37206298] {CVE-2024-50000}
  - net/mlx5: Added cond_resched() to crdump collection (Mohamed Khalfella)
  - net/mlx5: Fix error path in multi-packet WQE transmit (Gerd Bayer) [Orabug: 37206301] {CVE-2024-50001}
  - ieee802154: Fix build error (Jinjie Ruan)
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [Orabug: 37264180] {CVE-2024-50179}
  - mailbox: bcm2835: Fix timeout during suspend mode (Stefan Wahren) [Orabug: 37206129] {CVE-2024-49963}
  - mailbox: rockchip: fix a typo in module autoloading (Liao Chen)
  - static_call: Replace pointless WARN_ON() in static_call_module_notify() (Thomas Gleixner) [Orabug: 37206089] {CVE-2024-49954}
  - static_call: Handle module init failure correctly in static_call_del_module() (Thomas Gleixner) [Orabug: 37206305] {CVE-2024-50002}
  - spi: lpspi: Simplify some error message (Christophe JAILLET)
  - usb: yurex: Fix inconsistent locking bug in yurex_read() (Harshit Mogalapalli)
  - i2c: isch: Add missed 'else' (Andy Shevchenko)
  - i2c: aspeed: Update the stop sw state when the bus recovery occurs (Tommy Huang)
  - mm: only enforce minimum stack gap size if it's sensible (David Gow)
  - lockdep: fix deadlock issue between lockdep and rcu (Zhiguo Niu)
  - bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0 (Song Liu)
  - x86/entry: Remove unwanted instrumentation in common_interrupt() (Dmitry Vyukov)
  - x86/idtentry: Incorporate definitions/declarations of the FRED entries (Xin Li)
  - pps: add an error check in parport_attach (Ma Ke)
  - pps: remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)
  - usb: xhci: fix loss of data on Cadence xHC (Pawel Laszczak)
  - xhci: Add a quirk for writing ERST in high-low order (Daehwan Jung)
  - xhci: Preserve RsvdP bits in ERSTBA register correctly (Lukas Wunner)
  - xhci: Refactor interrupter code for initial multi interrupter support. (Mathias Nyman)
  - xhci: remove xhci_test_trb_in_td_math early development check (Mathias Nyman)
  - xhci: fix event ring segment table related masks and variables in header (Mathias Nyman)
  - USB: misc: yurex: fix race between read and write (Oliver Neukum)
  - usb: yurex: Replace snprintf() with the safer scnprintf() variant (Lee Jones)
  - soc: versatile: realview: fix soc_dev leak during device remove (Krzysztof Kozlowski)
  - soc: versatile: realview: fix memory leak during device remove (Krzysztof Kozlowski)
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow (VanGiang Nguyen) [Orabug: 37200789] {CVE-2024-47739}
  - EDAC/igen6: Fix conversion of system address to physical memory address (Qiuxu Zhuo)
  - nfs: fix memory leak in error path of nfs4_do_reclaim (Li Lingfeng)
  - fs: Fix file_set_fowner LSM hook inconsistencies (Mickaël Salaün)
  - vfs: fix race between evice_inodes() and find_inode()&iput() (Julian Sun) [Orabug: 37200603] {CVE-2024-47679}
  - arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity (Dragan Simic)
  - arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency (Dragan Simic)
  - hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume (Gaosheng Cui)
  - hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init (Gaosheng Cui)
  - hwrng: mtk - Use devm_pm_runtime_enable (Guoqing Jiang)
  - f2fs: avoid potential int overflow in sanity_check_area_boundary() (Nikita Zhandarovich)
  - f2fs: prevent possible int overflow in dir_block_index() (Nikita Zhandarovich)
  - debugobjects: Fix conditions in fill_pool() (Zhen Lei)
  - wifi: mt76: mt7615: check devm_kasprintf() returned value (Ma Ke)
  - wifi: rtw88: 8822c: Fix reported RX band width (Bitterblue Smith)
  - perf/x86/intel/pt: Fix sampling synchronization (Adrian Hunter)
  - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (Ard Biesheuvel) [Orabug: 37200864] {CVE-2024-49858}
  - ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Werner Sembach)
  - ACPI: sysfs: validate return type of _STR method (Thomas Weißschuh) [Orabug: 37200877] {CVE-2024-49860}
  - drbd: Add NULL check for net_conf to prevent dereference in state validation (Mikhail Lobanov)
  - drbd: Fix atomicity violation in drbd_uuid_set_bm() (Qiu-ji Chen)
  - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure (Pavan Kumar Paluri)
  - xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them. (Mathias Nyman)
  - tty: rp2: Fix reset with non forgiving PCIe host bridges (Florian Fainelli)
  - firmware_loader: Block path traversal (Jann Horn) [Orabug: 37200801] {CVE-2024-47742}
  - bus: integrator-lm: fix OF node leak in probe() (Krzysztof Kozlowski)
  - usb: dwc2: drd: fix clock gating on USB role switch (Tomas Marek)
  - usb: cdnsp: Fix incorrect usb_request status (Pawel Laszczak)
  - USB: class: CDC-ACM: fix race between get_serial and set_serial (Oliver Neukum)
  - USB: misc: cypress_cy7c63: check for short transfer (Oliver Neukum)
  - USB: appledisplay: close race between probe and completion handler (Oliver Neukum)
  - usbnet: fix cyclical race on disconnect with work queue (Oliver Neukum)
  - scsi: mac_scsi: Disallow bus errors during PDMA send (Finn Thain)
  - scsi: mac_scsi: Refactor polling loop (Finn Thain)
  - scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages (Finn Thain)
  - drm/amd/display: Validate backlight caps are sane (Mario Limonciello)
  - drm/amd/display: Round calculated vtotal (Robin Chen)
  - Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (Werner Sembach)
  - Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (Werner Sembach)
  - Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (Werner Sembach)
  - Revert "media: tuners: fix error return code of hybrid_tuner_request_state()" (Roman Smirnov)
  - soc: versatile: integrator: fix OF node leak in probe() error path (Krzysztof Kozlowski)
  - ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error (Ma Ke)
  - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler (Sean Anderson)
  - Remove *.orig pattern from .gitignore (Laurent Pinchart)
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Scott Mayhew) [Orabug: 37070761] {CVE-2024-46695}
  - vfio/pci: fix potential memory leak in vfio_intx_enable() (Ye Bin) [Orabug: 36765615] {CVE-2024-38632}
  - x86/mm: Switch to new Intel CPU model defines (Tony Luck)
  - Input: goodix - use the new soc_intel_is_byt() helper (Hans de Goede)
  - drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination (Fangzhi Zuo)
  - netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS (Simon Horman)
  - netfilter: nf_tables: Keep deleted flowtable hooks until after RCU (Phil Sutter)
  - bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() (Jiwon Kim) [Orabug: 37200774] {CVE-2024-47734}
  - net: qrtr: Update packets cloning when broadcasting (Youssef Samir)
  - tcp: check skb is non-NULL in tcp_rto_delta_us() (Josh Hunt) [Orabug: 37200622] {CVE-2024-47684}
  - net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL (Thomas Weißschuh)
  - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (Kaixin Wang) [Orabug: 37200817] {CVE-2024-47747}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Eric Dumazet) [Orabug: 37200629] {CVE-2024-47685}
  - net: xilinx: axienet: Fix packet counting (Sean Anderson)
  - net: axienet: Switch to 64-bit RX/TX statistics (Robert Hancock)
  - net: axienet: Use NAPI for TX completion path (Robert Hancock)
  - net: axienet: Be more careful about updating tx_bd_tail (Robert Hancock)
  - net: axienet: add coalesce timer ethtool configuration (Robert Hancock)
  - net: axienet: reduce default RX interrupt threshold to 1 (Robert Hancock)
  - net: axienet: implement NAPI and GRO receive (Robert Hancock)
  - net: axienet: don't set IRQ timer when IRQ delay not used (Robert Hancock)
  - net: axienet: Clean up DMA start/stop and error handling (Robert Hancock)
  - net: axienet: Clean up device used for DMA calls (Robert Hancock)
  - Revert "dm: requeue IO if mapping table not yet available" (Mikulas Patocka)
  - vhost_vdpa: assign irq bypass producer token correctly (Jason Wang) [Orabug: 37200820] {CVE-2024-47748}
  - vdpa: Add eventfd for the vdpa callback (Xie Yongji)
  - interconnect: qcom: sm8250: Enable sync_state (Konrad Dybcio)
  - coresight: tmc: sg: Do not leak sg_table (Suzuki K Poulose)
  - iio: adc: ad7606: fix standby gpio state to match the documentation (Guillaume Stols)
  - iio: adc: ad7606: fix oversampling gpio array (Guillaume Stols)
  - spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time (Jinjie Ruan)
  - spi: lpspi: release requested DMA channels (Alexander Stein)
  - spi: lpspi: Silence error message upon deferred probe (Alexander Stein)
  - f2fs: get rid of online repaire on corrupted directory (Chao Yu) [Orabug: 37200641] {CVE-2024-47690}
  - f2fs: clean up w/ dotdot_name (Chao Yu)
  - f2fs: introduce F2FS_IPU_HONOR_OPU_WRITE ipu policy (Chao Yu)
  - f2fs: fix to wait page writeback before setting gcing flag (Chao Yu)
  - f2fs: optimize error handling in redirty_blocks (Jack Qiu)
  - f2fs: reduce expensive checkpoint trigger frequency (Chao Yu)
  - f2fs: remove unneeded check condition in __f2fs_setxattr() (Chao Yu)
  - f2fs: fix to update i_ctime in __f2fs_setxattr() (Chao Yu)
  - f2fs: fix typo (Yonggil Song)
  - nfsd: return -EINVAL when namelen is 0 (Li Lingfeng) [Orabug: 37200649] {CVE-2024-47692}
  - nfsd: call cache_put if xdr_reserve_space returns NULL (Guoqing Jiang) [Orabug: 37200782] {CVE-2024-47737}
  - ntb_perf: Fix printk format (Max Hawking)
  - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() (Jinjie Ruan)
  - RDMA/irdma: fix error message in irdma_modify_qp_roce() (Vitaliy Shevtsov)
  - RDMA/cxgb4: Added NULL check for lookup_atid (Mikhail Lobanov) [Orabug: 37200823] {CVE-2024-47749}
  - riscv: Fix fp alignment bug in perf_callchain_user() (Jinjie Ruan)
  - RDMA/hns: Optimize hem allocation performance (Junxian Huang)
  - RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler (Junxian Huang)
  - RDMA/hns: Refactor the abnormal interrupt handler function (Haoyue Xu)
  - RDMA/hns: Fix the wrong type of return value of the interrupt handler (Haoyue Xu)
  - RDMA/hns: Remove unused abnormal interrupt of type RAS (Haoyue Xu)
  - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (Chengchang Tang) [Orabug: 37200776] {CVE-2024-47735}
  - RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range() (wenglianfa)
  - RDMA/hns: Don't modify rq next block addr in HIP09 QPC (Junxian Huang)
  - watchdog: imx_sc_wdt: Don't disable WDT in suspend (Jonas Blixt)
  - IB/core: Fix ib_cache_setup_one error flow cleanup (Patrisious Haddad) [Orabug: 37200653] {CVE-2024-47693}
  - pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function (Wang Jianzheng)
  - pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource() (Yangtao Li)
  - nfsd: fix refcount leak when file is unhashed after being found (Jeff Layton)
  - nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (Jeff Layton)
  - clk: ti: dra7-atl: Fix leak of of_nodes (David Lechner)
  - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds (Md Haris Iqbal) [Orabug: 37200658] {CVE-2024-47695}
  - RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer (Jack Wang)
  - pinctrl: single: fix missing error code in pcs_probe() (Yang Yingliang)
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Zhu Yanjun) [Orabug: 37205520] {CVE-2024-47696}
  - PCI: xilinx-nwl: Clean up clock on probe failure/removal (Sean Anderson)
  - PCI: xilinx-nwl: Fix register misspelling (Sean Anderson)
  - PCI: keystone: Fix if-statement expression in ks_pcie_quirk() (Dan Carpenter) [Orabug: 37205559] {CVE-2024-47756}
  - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (Junlin Li) [Orabug: 37200661] {CVE-2024-47697}
  - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (Junlin Li) [Orabug: 37200668] {CVE-2024-47698}
  - Input: ilitek_ts_i2c - add report id message validation (Emanuele Ghidoli)
  - Input: ilitek_ts_i2c - avoid wrong input subsystem sync (Emanuele Ghidoli)
  - clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228 (Jonas Karlman)
  - remoteproc: imx_rproc: Initialize workqueue earlier (Peng Fan)
  - remoteproc: imx_rproc: Correct ddr alias for i.MX8M (Peng Fan)
  - clk: imx: imx8qxp: Parent should be initialized earlier than the clock (Peng Fan)
  - clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk (Peng Fan)
  - clk: imx: imx8mp: fix clock tree update of TF-A managed clocks (Zhipeng Wang)
  - perf time-utils: Fix 32-bit nsec parsing (Ian Rogers)
  - perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time (Yang Jihong)
  - perf sched timehist: Fix missing free of session in perf_sched__timehist() (Yang Jihong)
  - perf mem: Free the allocated sort string, fixing a leak (Namhyung Kim)
  - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit (Daniel Borkmann)
  - nilfs2: fix potential oob read in nilfs_btree_check_delete() (Ryusuke Konishi) [Orabug: 37200842] {CVE-2024-47757}
  - nilfs2: determine empty node blocks as corrupted (Ryusuke Konishi)
  - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (Ryusuke Konishi) [Orabug: 37200675] {CVE-2024-47699}
  - ext4: avoid OOB when system.data xattr changes underneath the filesystem (Thadeu Lima de Souza Cascardo) [Orabug: 37200681] {CVE-2024-47701}
  - ext4: return error on ext4_find_inline_entry (Thadeu Lima de Souza Cascardo)
  - ext4: avoid negative min_clusters in find_group_orlov() (Kemeng Shi)
  - ext4: avoid potential buffer_head leak in __ext4_new_inode() (Kemeng Shi)
  - ext4: avoid buffer_head leak in ext4_mark_inode_used() (Kemeng Shi)
  - smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso (Jiawei Ye)
  - ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard (yangerkun)
  - kthread: fix task state in kthread worker if being frozen (Chen Yu)
  - xz: cleanup CRC32 edits from 2018 (Lasse Collin)
  - selftests/bpf: Fix C++ compile error from missing _Bool type (Tony Ambardar)
  - selftests/bpf: Fix error compiling test_lru_map.c (Tony Ambardar)
  - selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc (Tony Ambardar)
  - selftests/bpf: Fix compiling core_reloc.c with musl-libc (Tony Ambardar)
  - selftests/bpf: Fix compiling tcp_rtt.c with musl-libc (Tony Ambardar)
  - selftests/bpf: Fix compiling flow_dissector.c with musl-libc (Tony Ambardar)
  - selftests/bpf: Fix compiling kfree_skb.c with musl-libc (Tony Ambardar)
  - selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c (Tony Ambardar)
  - selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc (Tony Ambardar)
  - selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c (Tony Ambardar)
  - tpm: Clean up TPM space after command failure (Jonathan McDowell) [Orabug: 37200850] {CVE-2024-49851}
  - xen/swiotlb: add alignment check for dma buffers (Juergen Gross)
  - xen: use correct end address of kernel for conflict checking (Juergen Gross)
  - drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind() (Yuesong Li)
  - drm/msm: fix %s null argument error (Sherry Yang)
  - ipmi: docs: don't advertise deprecated sysfs entries (Wolfram Sang)
  - drm/msm/a5xx: workaround early ring-buffer emptiness check (Vladimir Lypak)
  - drm/msm: Drop priv->lastctx (Rob Clark)
  - drm/msm/a5xx: fix races in preemption evaluation stage (Vladimir Lypak)
  - drm/msm/a5xx: properly clear preemption records on resume (Vladimir Lypak)
  - drm/msm/a5xx: disable preemption in submits by default (Vladimir Lypak)
  - drm/msm: Fix incorrect file name output in adreno_request_fw() (Aleksandr Mishin)
  - powerpc/8xx: Fix kernel vs user address comparison (Christophe Leroy)
  - powerpc/8xx: Fix initial memory mapping (Christophe Leroy)
  - powerpc/32: Remove 'noltlbs' kernel parameter (Christophe Leroy)
  - powerpc/32: Remove the 'nobats' kernel parameter (Christophe Leroy)
  - drm/mediatek: Use spin_lock_irqsave() for CRTC event lock (Fei Shao)
  - jfs: fix out-of-bounds in dbNextAG() and diAlloc() (Jeongjun Park) [Orabug: 37200739] {CVE-2024-47723}
  - scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() (Dan Carpenter) [Orabug: 37200855] {CVE-2024-49852}
  - drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid() (Liu Ying)
  - drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets (Nikita Zhandarovich)
  - drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode (Jonas Karlman)
  - drm/rockchip: vop: Allow 4096px width scaling (Alex Bee)
  - scsi: NCR5380: Check for phase match during PDMA fixup (Finn Thain)
  - scsi: NCR5380: Add SCp members to struct NCR5380_cmd (Finn Thain)
  - drm/radeon: properly handle vbios fake edid sizing (Alex Deucher)
  - drm/radeon: Replace one-element array with flexible-array member (Paulo Miguel Almeida)
  - drm/amdgpu: properly handle vbios fake edid sizing (Alex Deucher)
  - drm/amdgpu: Replace one-element array with flexible-array member (Paulo Miguel Almeida)
  - drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func (Srinivasan Shanmugam) [Orabug: 37200736] {CVE-2024-47720}
  - drm/stm: Fix an error handling path in stm_drm_platform_probe() (Christophe JAILLET)
  - pmdomain: core: Harden inter-column space in debug summary (Geert Uytterhoeven)
  - mtd: powernv: Add check devm_kasprintf() returned value (Charles Han)
  - fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() (Christophe JAILLET)
  - power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense (Artur Weber)
  - power: supply: axp20x_battery: Remove design from min and max voltage (Chris Morgan)
  - hwmon: (ntc_thermistor) fix module autoloading (Yuntao Liu)
  - mtd: slram: insert break after errors in parsing the map (Mirsad Todorovac)
  - hwmon: (max16065) Fix alarm attributes (Guenter Roeck)
  - hwmon: (max16065) Remove use of i2c_match_id() (Andrew Davis)
  - i2c: Add i2c_get_match_data() (Biju Das)
  - hwmon: (max16065) Fix overflows seen when writing limits (Guenter Roeck)
  - m68k: Fix kernel_clone_args.flags in m68k_clone() (Finn Thain)
  - clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init() (Ankit Agrawal)
  - reset: k210: fix OF node leak in probe() error path (Krzysztof Kozlowski)
  - reset: berlin: fix OF node leak in probe() error path (Krzysztof Kozlowski)
  - ARM: versatile: fix OF node leak in CPUs prepare (Krzysztof Kozlowski)
  - ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property (Krzysztof Kozlowski)
  - ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks (Alexander Dahl)
  - arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes (Lad Prabhakar)
  - spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ (Andy Shevchenko)
  - spi: ppc4xx: handle irq_of_parse_and_map() errors (Ma Ke)
  - block: fix potential invalid pointer dereference in blk_add_partition (Riyan Dhiman) [Orabug: 37200698] {CVE-2024-47705}
  - block: print symbolic error name instead of error code (Christian Heusel)
  - block, bfq: don't break merge chain in bfq_split_bfqq() (Yu Kuai)
  - block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (Yu Kuai)
  - block, bfq: fix possible UAF for bfqq->bic with merge chain (Yu Kuai)
  - net: tipc: avoid possible garbage value (Su Hui)
  - net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input (Justin Iurman)
  - r8169: disable ALDPS per default for RTL8125 (Heiner Kallweit)
  - net: enetc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - bareudp: Pull inner IP header on xmit. (Guillaume Nault)
  - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Gal Pressman)
  - net: geneve: support IPv4/IPv6 as inner protocol (Eyal Birger)
  - bareudp: Pull inner IP header in bareudp_udp_encap_recv(). (Guillaume Nault)
  - Bluetooth: btusb: Fix not handling ZPL/short-transfer (Luiz Augusto von Dentz)
  - can: m_can: m_can_close(): stop clocks after device has been shut down (Marc Kleine-Budde)
  - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). (Kuniyuki Iwashima) [Orabug: 37205475] {CVE-2024-47709}
  - sock_map: Add a cond_resched() in sock_hash_free() (Eric Dumazet) [Orabug: 37200714] {CVE-2024-47710}
  - wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param (Jiawei Ye) [Orabug: 37205501] {CVE-2024-47712}
  - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (Dmitry Antipov) [Orabug: 37200719] {CVE-2024-47713}
  - wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors (Dmitry Antipov)
  - wifi: mt76: mt7915: fix rx filter setting for bfee functionality (Howard Hsu)
  - wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() (Dmitry Antipov)
  - x86/sgx: Fix deadlock in SGX NUMA node search (Aaron Lu) [Orabug: 37200860] {CVE-2024-49856}
  - cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately (Nishanth Menon)
  - netfilter: nf_tables: remove annotation to access set timeout while holding lock (Pablo Neira Ayuso)
  - netfilter: nf_tables: reject expiration higher than timeout (Pablo Neira Ayuso)
  - netfilter: nf_tables: reject element expiration with no timeout (Pablo Neira Ayuso)
  - netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire (Pablo Neira Ayuso)
  - ACPI: CPPC: Fix MASK_VAL() usage (Clément Léger)
  - ACPI: bus: Avoid using CPPC if not supported by firmware (Rafael J. Wysocki)
  - can: j1939: use correct function name in comment (Zhang Changzhong)
  - padata: Honor the caller's alignment in case of chunk_size 0 (Kamlesh Gurudasani)
  - wifi: iwlwifi: mvm: increase the time between ranging measurements (Avraham Stern)
  - mount: handle OOM on mnt_warn_timestamp_expiry (Olaf Hering)
  - fs/namespace: fnic: Switch to use %ptTd (Andy Shevchenko)
  - mount: warn only once about timestamp range expiration (Anthony Iliopoulos)
  - fs: explicitly unregister per-superblock BDIs (Christoph Hellwig)
  - wifi: rtw88: remove CPT execution branch never used (Dmitry Kandybka)
  - net: stmmac: dwmac-loongson: Init ref and PTP clocks rate (Yanteng Si)
  - wifi: ath9k: Remove error checks when creating debugfs entries (Toke Høiland-Jørgensen)
  - wifi: ath9k: fix parameter check in ath9k_init_debug() (Minjie Du)
  - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() (Aleksandr Mishin)
  - crypto: xor - fix template benchmarking (Helge Deller)
  - wifi: rtw88: always wait for both firmware loading attempts (Dmitry Antipov) [Orabug: 37200733] {CVE-2024-47718}
  - EDAC/synopsys: Fix error injection on Zynq UltraScale+ (Shubhrajyoti Datta)
  - EDAC/synopsys: Fix ECC status and IRQ control race condition (Serge Semin)
  - EDAC/synopsys: Re-enable the error interrupts on v3 hw (Sherry Sun)
  - EDAC/synopsys: Use the correct register to disable the error interrupt on v3 hw (Sherry Sun)
  - EDAC/synopsys: Add support for version 3 of the Synopsys EDAC DDR (Dinh Nguyen)
  - USB: usbtmc: prevent kernel-usb-infoleak (Edward Adam Davis) [Orabug: 37159777] {CVE-2024-47671}
  - USB: serial: pl2303: add device id for Macrosilicon MS3020 (Junhao Xie)
  - gpiolib: cdev: Ignore reconfiguration without direction (Kent Gibson)
  - inet: inet_defrag: prevent sk release while still in use (Florian Westphal) [Orabug: 36545059] {CVE-2024-26921}
  - gpio: prevent potential speculation leaks in gpio_device_get_desc() (Hagar Hemdan) [Orabug: 36993133] {CVE-2024-44931}
  - Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex" (Ping-Ke Shih)
  - netfilter: nf_tables: missing iterator type in lookup walk (Pablo Neira Ayuso)
  - netfilter: nft_set_pipapo: walk over current view on netlink dump (Pablo Neira Ayuso) [Orabug: 36598033] {CVE-2024-27017}
  - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (Ferry Meng) [Orabug: 36891660] {CVE-2024-41016}
  - ocfs2: add bounds checking to ocfs2_xattr_find_entry() (Ferry Meng) [Orabug: 37159772] {CVE-2024-47670}
  - spi: spidev: Add missing spi_device_id for jg10309-01 (Geert Uytterhoeven)
  - x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency (Michael Kelley)
  - spi: bcm63xx: Enable module autoloading (Liao Chen)
  - drm: komeda: Fix an issue related to normalized zpos (hongchi.peng)
  - spi: spidev: Add an entry for elgin,jg10309-01 (Fabio Estevam)
  - ASoC: tda7419: fix module autoloading (Liao Chen)
  - ASoC: intel: fix module autoloading (Liao Chen)
  - wifi: iwlwifi: clear trans->state earlier upon error (Emmanuel Grumbach)
  - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead (Emmanuel Grumbach) [Orabug: 37159780] {CVE-2024-47672}
  - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped (Emmanuel Grumbach) [Orabug: 37159785] {CVE-2024-47673}
  - wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation (Daniel Gabay)
  - wifi: iwlwifi: lower message level for FW buffer destination (Benjamin Berg)
  - net: ftgmac100: Ensure tx descriptor updates are visible (Jacky Chou)
  - microblaze: don't treat zero reserved memory regions as error (Mike Rapoport)
  - pinctrl: at91: make it work with current gpiolib (Thomas Blocher)
  - scsi: lpfc: Fix overflow build issue (Sherry Yang)
  - ALSA: hda/realtek - FIxed ALC285 headphone no sound (Kailang Yang)
  - ALSA: hda/realtek - Fixed ALC256 headphone no sound (Kailang Yang)
  - ASoC: allow module autoloading for table db1200_pids (Hongbo Li)
  - ASoC: meson: axg-card: fix 'use-after-free' (Arseniy Krasnov) [Orabug: 37116539] {CVE-2024-46849}
  - dma-buf: heaps: Fix off-by-one in CMA heap fault handler (T.J. Mercier) [Orabug: 37116545] {CVE-2024-46852}
  - soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps" (Krzysztof Kozlowski)
  - spi: nxp-fspi: fix the KASAN report out-of-bounds bug (Han Xu) [Orabug: 37116547] {CVE-2024-46853}
  - net: dpaa: Pad packets to ETH_ZLEN (Sean Anderson) [Orabug: 37116550] {CVE-2024-46854}
  - netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [Orabug: 37116554] {CVE-2024-46855}
  - net: ftgmac100: Enable TX interrupt to avoid TX timeout (Jacky Chou)
  - fou: fix initialization of grc (Muhammad Usama Anjum) [Orabug: 37195062] {CVE-2024-46865}
  - net/mlx5: Add missing masks and QoS bit masks for scheduling elements (Carolina Jubran)
  - net/mlx5: Explicitly set scheduling element and TSAR type (Carolina Jubran)
  - net/mlx5e: Add missing link modes to ptys2ethtool_map (Shahar Shitrit)
  - igb: Always call igb_xdp_ring_update_tail() under Tx lock (Sriram Yagnaraman)
  - ice: fix accounting for filters shared by multiple VSIs (Jacob Keller)
  - hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2 (Patryk Biel)
  - hwmon: (pmbus) Introduce and use write_byte_data callback (Mårten Lindahl)
  - selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected() (Michal Luczaj)
  - eeprom: digsy_mtc: Fix 93xx46 driver probe failure (Andy Shevchenko)
  - arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E (FUKAUMI Naoki)
  - fs/ntfs3: Use kvfree to free memory allocated by kvmalloc (Konstantin Komarov)
  - net: tighten bad gso csum offset check in virtio_net_hdr (Willem de Bruijn)
  - minmax: reduce min/max macro expansion in atomisp driver (Lorenzo Stoakes)
  - arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma (Quentin Schulz)
  - mptcp: pm: Fix uaf in __timer_delete_sync (Edward Adam Davis) [Orabug: 37116564] {CVE-2024-46858}
  - platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array (Hans de Goede)
  - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (Hans de Goede) [Orabug: 37116566] {CVE-2024-46859}
  - NFS: Avoid unnecessary rescanning of the per-server delegation list (Trond Myklebust)
  - NFSv4: Fix clearing of layout segments in layoutreturn (Trond Myklebust)
  - Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table (Takashi Iwai)
  - drm/msm/adreno: Fix error return if missing firmware-name (Rob Clark)
  - platform/surface: aggregator_registry: Add support for Surface Laptop Go 3 (Maximilian Luz)
  - scripts: kconfig: merge_config: config files: add a trailing newline (Anders Roxell)
  - HID: multitouch: Add support for GT7868Q (Dmitry Savin)
  - Input: synaptics - enable SMBus for HP Elitebook 840 G2 (Jonathan Denose)
  - Input: ads7846 - ratelimit the spi_sync error message (Marek Vasut)
  - btrfs: update target inode's ctime on unlink (Jeff Layton)
  - powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL (Christophe Leroy)
  - net: phy: vitesse: repair vsc73xx autonegotiation (Pawel Dembicki)
  - net: ethernet: use ip_hdrlen() instead of bit shift (Moon Yeounsu)
  - usbnet: ipheth: fix carrier detection in modes 1 and 4 (Foster Snowhill)
  - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (Lizhi Xu) [Orabug: 37200925] {CVE-2024-49877}
  - ocfs2: fix null-ptr-deref when journal load failed. (Julian Sun) [Orabug: 37206096] {CVE-2024-49957}
  - ocfs2: remove unreasonable unlock in ocfs2_read_blocks (Lizhi Xu) [Orabug: 37206135] {CVE-2024-49965}
  - ocfs2: cancel dqi_sync_work before freeing oinfo (Joseph Qi) [Orabug: 37206140] {CVE-2024-49966}
  - ocfs2: fix uninit-value in ocfs2_get_block() (Joseph Qi)
  - ocfs2: fix the la space leak when unmounting an ocfs2 volume (Heming Zhao)
  - mm: krealloc: consider spare memory for __GFP_ZERO (Danilo Krummrich)
  - jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit (Kemeng Shi)
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (Baokun Li) [Orabug: 37206108] {CVE-2024-49959}
  - drm: omapdrm: Add missing check for alloc_ordered_workqueue (Ma Ke) [Orabug: 37200934] {CVE-2024-49879}
  - of/irq: Support #msi-cells=<0> in of_msi_get_domain (Andrew Jones)
  - parisc: Fix stack start for ADDR_NO_RANDOMIZE personality (Helge Deller)
  - parisc: Fix 64-bit userspace syscall path (Helge Deller)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.168.2.el9uek]
changelog:
  - Revert "rds: ib: Make sure receives are posted before connection is up" (Gerd Rausch)  [Orabug: 37244182]
  - uek-rpm/ol9/config-mips64: Align MIPS64 Crypto configs with x86_64 (Vijay Kumar)  [Orabug: 37218693]
  - rds: ib: Avoid reuse of IB MRs when cleaning is in progress (Håkon Bugge)  [Orabug: 37206836]
  - spec: Set CONFIG_CRYPTO_FIPS_NAME for standard & embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - spec: Set CONFIG_CRYPTO_FIPS_NAME for container kernels (Jonah Palmer)  [Orabug: 37137136]
  - spec: Add UEK release macros for UEK7 (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 Pensando embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 T93 embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 MIPS64 embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8 Bluefield 3 smartnic embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8/ol9 standard kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8/ol9 container kernels (Jonah Palmer)  [Orabug: 37137136]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.168.3.el9uek]
changelog:
  - ACPI: CPPC: Make rmw_lock a raw_spin_lock (Pierre Gondois) [Orabug: 37268714] {CVE-2024-50249}
  - net: usb: usbnet: fix name regression (Oliver Neukum)
  - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (Matthieu Baerts (NGI0))
  - parport: Proper fix for array out-of-bounds access (Takashi Iwai) [Orabug: 37227435] {CVE-2024-50074}
  - netfilter: xtables: fix typo causing some targets not to load on IPv6 (Pablo Neira Ayuso)
  - block, bfq: fix procress reference leakage for bfqq in merge chain (Yu Kuai)
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (Ido Schimmel) [Orabug: 37304697] {CVE-2024-53042}
  - usb: dwc3: core: Fix system suspend on TI AM62 platforms (Roger Quadros)
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Greg Kroah-Hartman)
  - jfs: Fix sanity check in dbMount (Dave Kleikamp)
  - octeontx2-af: Fix potential integer overflows on integer shifts (Colin Ian King)
  - gtp: allow -1 to be specified as file description from userspace (Pablo Neira Ayuso)
  - scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages (Justin Tee)  [Orabug: 37070103]  {CVE-2024-43816}
  - blk-cgroup: Properly propagate the iostat update up the hierarchy (Waiman Long)  [Orabug: 37264361]
  - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei)  [Orabug: 37264361] {CVE-2024-38384}
  - blk-cgroup: fix list corruption from resetting io stat (Ming Lei)  [Orabug: 37264361] {CVE-2024-38663}
  - blk-cgroup: Flush stats before releasing blkcg_gq (Ming Lei)  [Orabug: 37264361]
  - blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() (Waiman Long)  [Orabug: 37264361]
  - blk-cgroup: don't update io stat for root cgroup (Ming Lei)  [Orabug: 37264361]
  - blk-cgroup: Optimize blkcg_rstat_flush() (Waiman Long)  [Orabug: 37264361]
  - blk-cgroup: Return -ENOMEM directly in blkcg_css_alloc() error path (Waiman Long)  [Orabug: 37264361]
  - vfio/iommu_type1: replace kfree with kvfree (Jiacheng Shi)  [Orabug: 37263362]
  - i2c: i801: Add support for Intel Birch Stream SoC (Jarkko Nikula)  [Orabug: 37249533]
  - nvme: fix deadlock between reset and scan (Bitao Hu)  [Orabug: 37244604]
  - virt: sevguest: Add TSM_REPORTS support for SNP_GET_EXT_REPORT (Dan Williams)  [Orabug: 37070016]
  - virt: sevguest: Prep for kernel internal get_ext_report() (Dan Williams)  [Orabug: 37070016]
  - configfs-tsm: Introduce a shared ABI for attestation reports (Dan Williams)  [Orabug: 37070016]
  - virt: coco: Add a coco/Makefile and coco/Kconfig (Dan Williams)  [Orabug: 37070016]
  - virt: sevguest: Fix passing a stack buffer as a scatterlist target (Dan Williams)  [Orabug: 37070016]
  - x86/sev: Change snp_guest_issue_request()'s fw_err argument (Dionna Glaze)  [Orabug: 37070016]
  - crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL (Peter Gonda)  [Orabug: 37070016]
  - virt/coco/sev-guest: Double-buffer messages (Dionna Glaze)  [Orabug: 37070016]
  - virt/coco/sev-guest: Add throttling awareness (Dionna Glaze)  [Orabug: 37070016]
  - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Do some code style cleanups (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Carve out the request issuing logic into a helper (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Simplify extended guest request handling (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (Borislav Petkov (AMD))  [Orabug: 37070016]
  - x86/sev: Mark snp_abort() noreturn (Borislav Petkov)  [Orabug: 37070016]
  - kbuild: Drop -Wdeclaration-after-statement (Peter Zijlstra)  [Orabug: 37070016]
  - apparmor: Free up __cleanup() name (Peter Zijlstra)  [Orabug: 37070016]
  - fwctl: Expand adaption of code for UEK7 (Liam Merwick)  [Orabug: 37070016]
  - mm/slab: Add __free() support for kvfree (Dan Williams)  [Orabug: 37070016]
  - mm: move kvmalloc-related functions to slab.h (Matthew Wilcox (Oracle))  [Orabug: 37070016]
  - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Tom Lendacky)  [Orabug: 37070016]
  - iommu/amd: Do not identity map v2 capable device when snp is enabled (Vasant Hegde)  [Orabug: 37070016]
  - virt: sevguest: Add CONFIG_CRYPTO dependency (Arnd Bergmann)  [Orabug: 37070016]
  - virt/sev-guest: Remove unnecessary free in init_crypto() (Rafael Mendonca)  [Orabug: 37070016]
  - virt/sev-guest: Add a MODULE_ALIAS (Cole Robinson)  [Orabug: 37070016]
  - virt/sev-guest: Return -EIO if certificate buffer is not large enough (Tom Lendacky)  [Orabug: 37070016]
  - virt/sev-guest: Prevent IV reuse in the SNP guest driver (Peter Gonda)  [Orabug: 37070016]
  - x86/compressed/64: Add identity mappings for setup_data entries (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Borislav Petkov (AMD))  [Orabug: 37070016]
  - x86/sev: Use the GHCB protocol when available for SNP CPUID requests (Tom Lendacky)  [Orabug: 37070016]
  - x86/boot: Fix the setup data types max limit (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Don't use cc_platform_has() for early SEV-SNP calls (Tom Lendacky)  [Orabug: 37070016]
  - x86/sev: Fix calculation of end address based on number of pages (Tom Lendacky)  [Orabug: 37070016]
  - x86/sev: Fix kernel crash due to late update to read-only ghcb_version (Ashwin Dayanand Kamat)  [Orabug: 37070016]
  - x86/sev: Add SEV-SNP guest feature negotiation support (Nikunj A Dadhania)  [Orabug: 37070016]
  - Revert "x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV" (Borislav Petkov)  [Orabug: 37070016]
  - x86/boot: Don't propagate uninitialized boot_params->cc_blob_address (Michael Roth)  [Orabug: 37070016]
  - KVM: SVM: Only dump VMSA to klog at KERN_DEBUG level (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: Dump Virtual Machine Save Area (VMSA) to klog (Jarkko Sakkinen)  [Orabug: 37070016]
  - KVM: SVM: Exit to userspace on ENOMEM/EFAULT GHCB errors (Sean Christopherson)  [Orabug: 37070016]
  - iommu/amd: Add support for AVIC when SNP is enabled (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Do not support IOMMUv2 APIs when SNP is enabled (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Do not support IOMMU_DOMAIN_IDENTITY after SNP is enabled (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Set translation valid bit only when IO page tables are in use (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Introduce function to check and enable SNP (Brijesh Singh)  [Orabug: 37070016]
  - iommu/amd: Globally detect SNP support (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Process all IVHDs before enabling IOMMU features (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Introduce global variable for storing common EFR and EFR2 (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Introduce Support for Extended Feature 2 Register (Suravee Suthikulpanit)  [Orabug: 37070016]
  - x86/sev: Remove duplicated assignment to variable info (Colin Ian King)  [Orabug: 37070016]
  - x86/sev: Fix address space sparse warning (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Get the AP jump table address from secrets page (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Add missing __init annotations to SEV init routines (Michael Roth)  [Orabug: 37070016]
  - crypto: ccp - Log when resetting PSP SEV state (Peter Gonda)  [Orabug: 37070016]
  - virt: sev-guest: Pass the appropriate argument type to iounmap() (Tom Lendacky)  [Orabug: 37070016]
  - virt: sevguest: Rename the sevguest dir and files to sev-guest (Tom Lendacky)  [Orabug: 37070016]
  - virt: sevguest: Change driver name to reflect generic SEV support (Tom Lendacky)  [Orabug: 37070016]
  - x86/boot: Put globals that are accessed early into the .data section (Michael Roth)  [Orabug: 37070016]
  - virt: sevguest: Fix bool function returning negative value (Haowen Bai)  [Orabug: 37070016]
  - virt: sevguest: Fix return value check in alloc_shared_pages() (Yang Yingliang)  [Orabug: 37070016]
  - x86/sev-es: Replace open-coded hlt-loop with sev_es_terminate() (Peter Gonda)  [Orabug: 37070016]
  - virt: sevguest: Add documentation for SEV-SNP CPUID Enforcement (Michael Roth)  [Orabug: 37070016]
  - virt: sevguest: Add support to get extended report (Brijesh Singh)  [Orabug: 37070016]
  - virt: sevguest: Add support to derive key (Brijesh Singh)  [Orabug: 37070016]
  - virt: Add SEV-SNP guest driver (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Register SEV-SNP guest request platform device (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Provide support for SNP guest request NAEs (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Add a sev= cmdline option (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Use firmware-validated CPUID for SEV-SNP guests (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Add SEV-SNP feature detection/setup (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/64: Add identity mapping for Confidential Computing blob (Michael Roth)  [Orabug: 37070016]
  - x86/compressed: Use firmware-validated CPUID leaves for SEV-SNP guests (Michael Roth)  [Orabug: 37070016]
  - x86/compressed: Add SEV-SNP feature detection/setup (Michael Roth)  [Orabug: 37070016]
  - x86/boot: Add a pointer to Confidential Computing blob in bootparams (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/64: Add support for SEV-SNP CPUID table in #VC handlers (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Move MSR-based VMGEXITs for CPUID to helper (Michael Roth)  [Orabug: 37070016]
  - KVM: x86: Move lookup of indexed CPUID leafs to helper (Michael Roth)  [Orabug: 37070016]
  - x86/boot: Add Confidential Computing type to setup_data (Brijesh Singh)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI kexec handling into common code (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI vendor table lookup to helper (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI config table lookup to helper (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI system table lookup to helper (Michael Roth)  [Orabug: 37070016]
  - x86/head/64: Re-enable stack protection (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Use SEV-SNP AP creation to start secondary CPUs (Tom Lendacky)  [Orabug: 37070016]
  - x86/sev: Remove do_early_exception() forward declarations (Borislav Petkov)  [Orabug: 37070016]
  - x86/mm: Validate memory when changing the C-bit (Brijesh Singh)  [Orabug: 37070016]
  - x86/mm/cpa: Generalize __set_memory_enc_pgtable() (Brijesh Singh)  [Orabug: 37070016]
  - x86/kernel: Validate ROM memory before accessing when SEV-SNP is active (Brijesh Singh)  [Orabug: 37070016]
  - x86/kernel: Mark the .bss..decrypted section as shared in the RMP table (Brijesh Singh)  [Orabug: 37070016]
  - x86/head64: Add missing __head annotation to sme_postprocess_startup() (Marco Bonelli)  [Orabug: 37070016]
  - x86/head64: Carve out the guest encryption postprocessing into a helper (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Add helper for validating pages in early enc attribute changes (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Register GHCB memory when SEV-SNP is active (Brijesh Singh)  [Orabug: 37070016]
  - x86/compressed: Register GHCB memory when SEV-SNP is active (Brijesh Singh)  [Orabug: 37070016]
  - x86/compressed: Add helper for validating pages in the decompression stage (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Check the VMPL level (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Add a helper for the PVALIDATE instruction (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Check SEV-SNP features support (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Save the negotiated GHCB version (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Define the Linux-specific guest termination reasons (Brijesh Singh)  [Orabug: 37070016]
  - x86/mm: Extend cc_attr to include AMD SEV-SNP (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Detect/setup SEV/SME features earlier in boot (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/64: Detect/setup SEV/SME features earlier during boot (Michael Roth)  [Orabug: 37070016]
  - KVM: SVM: Update the SEV-ES save area mapping (Tom Lendacky)  [Orabug: 37070016]
  - KVM: SVM: Create a separate mapping for the GHCB save area (Tom Lendacky)  [Orabug: 37070016] [Orabug: 37070016]
  - KVM: SVM: Create a separate mapping for the SEV-ES save area (Tom Lendacky)  [Orabug: 37070016]
  - KVM: SVM: Define sev_features and VMPL field in the VMSA (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Move common memory encryption code to mem_encrypt.c (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/sev: Rename mem_encrypt.c to mem_encrypt_amd.c (Kuppuswamy Sathyanarayanan)  [Orabug: 37070016]
  - x86/sev: Get rid of excessive use of defines (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Shorten GHCB terminate macro names (Brijesh Singh)  [Orabug: 37070016]
  - x86/coco: Add API to handle encryption mask (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/coco: Explicitly declare type of confidential computing platform (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/hyperv: Initialize GHCB page in Isolation VM (Tianyu Lan)  [Orabug: 37070016]
  - x86/cc: Move arch/x86/{kernel/cc_platform.c => coco/core.c} (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/hyper-v: Add hyperv Isolation VM check in the cc_platform_has() (Tianyu Lan)  [Orabug: 37070016]
  - crypto: ccp - Add SEV_INIT_EX support (David Rientjes)  [Orabug: 37070016]
  - crypto: ccp - Add psp_init_on_probe module parameter (Peter Gonda)  [Orabug: 37070016]
  - crypto: ccp - Add SEV_INIT rc error logging on init (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: Hide SEV migration lockdep goo behind CONFIG_PROVE_LOCKING (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Init target VMCBs in sev_migrate_from (Peter Gonda)  [Orabug: 37070016]
  - KVM, SEV: Add KVM_EXIT_SHUTDOWN metadata for SEV-ES (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Mark nested locking of vcpu->lock (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: Simplify and harden helper to flush SEV guest page(s) (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Add cond_resched() to loop in sev_clflush_pages() (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Allow SEV intra-host migration of VM with mirrors (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: improve split between svm_prepare_guest_switch and sev_es_prepare_guest_switch (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: KVM: sev_migrate_tests: Add mirror command tests (Peter Gonda)  [Orabug: 37070016]
  - selftests: KVM: sev_migrate_tests: Fix sev_ioctl() (Peter Gonda)  [Orabug: 37070016]
  - selftests: KVM: sev_migrate_tests: Fix test_sev_mirror() (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Mark nested locking of kvm->lock (Wanpeng Li)  [Orabug: 37070016]
  - KVM: SVM: Do not terminate SEV-ES guests on GHCB validation failure (Tom Lendacky)  [Orabug: 37070016]
  - KVM: SEV: Fall back to vmalloc for SEV-ES scratch area if necessary (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: accept signals in sev_lock_two_vms (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: do not take kvm->lock when destroying (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Prohibit migration of a VM that has mirrors (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Do COPY_ENC_CONTEXT_FROM with both VMs locked (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: sev_migrate_tests: add tests for KVM_CAP_VM_COPY_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: move mirror status to destination of KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: cleanup locking for KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: do not use list_replace_init on an empty list (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: sev_migrate_tests: free all VMs (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: fix check for circular KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Fix typo in and tweak name of cmd_allowed_from_miror() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Drop a redundant setting of sev->asid during initialization (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Set sev_info.active after initial checks in sev_guest_init() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: unify cgroup cleanup code for svm_vm_migrate_from (Paolo Bonzini)  [Orabug: 37070016]
  - selftest: KVM: Add intra host migration tests (Peter Gonda)  [Orabug: 37070016]
  - KVM: selftests: Use pattern matching in .gitignore (Sean Christopherson)  [Orabug: 37070016]
  - selftest: KVM: Add open sev dev helper (Peter Gonda)  [Orabug: 37070016]
  - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. (Ashish Kalra)  [Orabug: 37070016]
  - EFI: Introduce the new AMD Memory Encryption GUID. (Ashish Kalra)  [Orabug: 37070016]
  - mm: x86: Invoke hypercall when page encryption status is changed (Brijesh Singh)  [Orabug: 37070016]
  - x86/kvm: Add AMD SEV specific Hypercall3 (Brijesh Singh)  [Orabug: 37070016]
  - KVM: SEV: Add support for SEV-ES intra host migration (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Add support for SEV intra host migration (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: provide helpers to charge/uncharge misc_cg (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Refactor out sev_es_state struct (Peter Gonda)  [Orabug: 37070016]
  - x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV (Tianyu Lan)  [Orabug: 37070016]
  - x86/sev: Allow #VC exceptions on the VC2 stack (Joerg Roedel)  [Orabug: 37070016]
  - KVM: generalize "bugged" VM to "dead" VM (Paolo Bonzini)  [Orabug: 37070016]
  - x86/sev: Carve out HV call's return value verification (Borislav Petkov)  [Orabug: 37070016]
  - KVM: Free new dirty bitmap if creating a new memslot fails (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Fix comments that refer to the non-existent install_new_memslots() (Jun Miao)  [Orabug: 37070016]
  - KVM: x86: Retry page fault if MMU reload is pending and root has no sp (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs vCPUs (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Dynamically allocate "new" memslots from the get-go (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Wait 'til the bitter end to initialize the "new" memslot (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Optimize overlapping memslots check (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Optimize gfn lookup in kvm_zap_gfn_range() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Call kvm_arch_flush_shadow_memslot() on the old slot in kvm_invalidate_memslot() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Keep memslots in tree-based structures instead of array-based ones (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: s390: Introduce kvm_s390_get_gfn_end() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: s390: Add a routine for setting userspace CPU state (Eric Farman)  [Orabug: 37070016]
  - KVM: Use interval tree to do fast hva lookup in memslots (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Resolve memslot ID via a hash table instead of via a static array (Maciej S. Szmigiero)  [Orabug: 37070016]
  - Revert "kvm: fix possible spectre gadgets in include/linux/kvm_host.h" (Liam Merwick)  [Orabug: 37070016]
  - KVM: Move WARN on invalid memslot index to update_memslots() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Integrate gfn_to_memslot_approx() into search_memslots() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: x86: Use nr_memslot_pages to avoid traversing the memslots array (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: x86: Don't call kvm_mmu_change_mmu_pages() if the count hasn't changed (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Don't make a full copy of the old memslot in __kvm_set_memory_region() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: s390: Skip gfn/size sanity checks on memslot DELETE or FLAGS_ONLY (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86: Don't assume old/new memslots are non-NULL at memslot commit (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Use prepare/commit hooks to handle generic memslot metadata updates (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Stop passing kvm_userspace_memory_region to arch memslot hooks (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86: Use "new" memslot instead of userspace memory region (Sean Christopherson)  [Orabug: 37070016]
  - KVM: s390: Use "new" memslot instead of userspace memory region (Sean Christopherson)  [Orabug: 37070016]
  - KVM: PPC: Avoid referencing userspace memory region in memslot updates (Sean Christopherson)  [Orabug: 37070016]
  - KVM: MIPS: Drop pr_debug from memslot commit to avoid using "mem" (Sean Christopherson)  [Orabug: 37070016]
  - KVM: arm64: Use "new" memslot instead of userspace memory region (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Let/force architectures to deal with arch specific memslot data (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Use "new" memslot's address space ID instead of dedicated param (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Resync only arch fields when slots_arch_lock gets reacquired (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Open code kvm_delete_memslot() into its only caller (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Require total number of memslot pages to fit in an unsigned long (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Extract zapping of rmaps for gfn range to separate helper (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Drop a redundant remote TLB flush in kvm_zap_gfn_range() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Retry page fault if root is invalidated by memslot update (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Properly dereference rcu-protected TDP MMU sptep iterator (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Don't rebuild page when the page is synced and no tlb flushing is required (Hou Wenlong)  [Orabug: 37070016]
  - KVM: x86/mmu: Avoid memslot lookup in rmap_add (David Matlack)  [Orabug: 37070016]
  - KVM: MMU: pass struct kvm_page_fault to mmu_set_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: pass kvm_mmu_page struct to make_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: set ad_disabled in TDP MMU role (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: remove unnecessary argument to mmu_set_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: clean up make_spte return value (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: inline set_spte in FNAME(sync_page) (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: inline set_spte in mmu_set_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: x86/mmu: Avoid memslot lookup in page_fault_handle_page_track (David Matlack)  [Orabug: 37070016]
  - KVM: x86/mmu: Pass the memslot around via struct kvm_page_fault (David Matlack)  [Orabug: 37070016] [Orabug: 37070016]
  - KVM: MMU: unify tdp_mmu_map_set_spte_atomic and tdp_mmu_set_spte_atomic_no_dirty_log (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: mark page dirty in make_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: x86/mmu: Verify shadow walk doesn't terminate early in page faults (Sean Christopherson)  [Orabug: 37070016]
  - KVM: MMU: change tracepoints arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change disallowed_hugepage_adjust() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change kvm_mmu_hugepage_adjust() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change fast_page_fault() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change tdp_mmu_map_handle_target_level() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change kvm_tdp_mmu_map() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change FNAME(fetch)() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change __direct_map() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change handle_abnormal_pfn() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change kvm_faultin_pfn() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change page_fault_handle_page_track() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change direct_page_fault() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change mmu->page_fault() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: Introduce struct kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: pass unadulterated gpa to direct_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: X86: Don't unsync pagetables when speculative (Lai Jiangshan)  [Orabug: 37070016]
  - KVM: X86: Change kvm_sync_page() to return true when remote flush is needed (Lai Jiangshan)  [Orabug: 37070016]
  - KVM: X86: Remove kvm_mmu_flush_or_zap() (Lai Jiangshan)  [Orabug: 37070016]
  - KVM: X86: Don't flush current tlb on shadow page modification (Lai Jiangshan)  [Orabug: 37070016]
  - net: mana: Fix RX buf alloc_size alignment and atomic op panic (Haiyang Zhang)  [Orabug: 37029115]  {CVE-2024-45001}
  - net/mlx5: pretend 'fast unload' succeeded on Exadata systems (Gerd Rausch)  [Orabug: 37224000]
  - rds: Do not invoke the transport's recv_path() while in atomic context (Håkon Bugge)  [Orabug: 36368605]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.171.4.el9uek]
changelog:
  - rds: recv_payload_bad_checksum was not 0 after running rds-stress on UEK6 (William Kucharski)  [Orabug: 37265126]
  - rds: If RDS Checksums are enabled for RDMA RDS operations, the extension headers will overflow causing incorrect operation (William Kucharski)  [Orabug: 37265124]
  - rds: rds_message_alloc() needlessly zeroes m_used_sgs (William Kucharski)  [Orabug: 37265122]
  - rds: tracepoint in rds_receive_csum_err() prints pointless information (William Kucharski)  [Orabug: 37265120]
  - rds: rds_inc_init() should initialize the inc->i_conn_path field (William Kucharski)  [Orabug: 37265116]
  - rds: Race condition in adding RDS payload checksum extension header may result in RDS header corruption (William Kucharski)  [Orabug: 37265114]
  - Revert "net/mlx5: disable the 'fast unload' feature on Exadata systems" (Qing Huang)  [Orabug: 37285222]
  - Revert "net/mlx5: pretend 'fast unload' succeeded on Exadata systems" (Qing Huang)  [Orabug: 37285222]
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688618] [Orabug: 37279176]
  - blk-mq: fix missing blk_account_io_done() in error path (Yu Kuai)  [Orabug: 37228086]
  - rds: Add rds stuck shutdown timeout (Rohit Nair)  [Orabug: 37214078]
  - KVM: x86: Stop compiling vmenter.S with OBJECT_FILES_NON_STANDARD (Sean Christopherson)  [Orabug: 37273739]
  - KVM: SVM: Create a stack frame in __svm_sev_es_vcpu_run() (Sean Christopherson)  [Orabug: 37273739]
  - KVM: SVM: Create a stack frame in __svm_vcpu_run() for unwinding (Sean Christopherson)  [Orabug: 37273739]
  - mm/memory-failure: pass the folio and the page to collect_procs() (Matthew Wilcox (Oracle))  [Orabug: 37270260]
  - LTS version: v5.15.171 (Vijayendra Suman)
  - mac80211: always have ieee80211_sta_restart() (Johannes Berg)
  - vt: prevent kernel-infoleak in con_font_get() (Jeongjun Park)
  - drm/i915: Fix potential context UAFs (Rob Clark)
  - Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device" (Jason-JH.Lin)
  - mm: shmem: fix data-race in shmem_getattr() (Jeongjun Park) [Orabug: 37268580] {CVE-2024-50228}
  - wifi: iwlwifi: mvm: fix 6 GHz scan construction (Johannes Berg) [Orabug: 37304734] {CVE-2024-53055}
  - nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [Orabug: 37268588] {CVE-2024-50230}
  - x86/bugs: Use code segment selector for VERW operand (Pawan Gupta) [Orabug: 37227383] {CVE-2024-50072}
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Edward Adam Davis) [Orabug: 37268563] {CVE-2024-50218}
  - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Matt Fleming) [Orabug: 37268568] {CVE-2024-50219}
  - mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations accesses reserves (Mel Gorman)
  - mm/page_alloc: explicitly define what alloc flags deplete min reserves (Mel Gorman)
  - mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags (Mel Gorman)
  - mm/page_alloc: treat RT tasks similar to __GFP_HIGH (Mel Gorman)
  - mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE (Mel Gorman)
  - mm/page_alloc: split out buddy removal code from rmqueue into separate helper (Mel Gorman)
  - mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked() (Wonhyuk Yang)
  - mm/page_alloc: call check_new_pages() while zone spinlock is not held (Eric Dumazet)
  - riscv: Remove duplicated GET_RM (Chunyan Zhang)
  - riscv: Remove unused GENERATING_ASM_OFFSETS (Chunyan Zhang)
  - riscv: Use '%u' to format the output of 'cpu' (WangYuli)
  - riscv: efi: Set NX compat flag in PE/COFF header (Heinrich Schuchardt)
  - riscv: vdso: Prevent the compiler from inserting calls to memset() (Alexandre Ghiti)
  - nilfs2: fix potential deadlock with newly created symlinks (Ryusuke Konishi) [Orabug: 37268584] {CVE-2024-50229}
  - iio: light: veml6030: fix microlux value calculation (Javier Carrasco)
  - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (Zicheng Qu) [Orabug: 37268595] {CVE-2024-50232}
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Zicheng Qu) [Orabug: 37268597] {CVE-2024-50233}
  - wifi: iwlegacy: Clear stale interrupts before resuming device (Ville Syrjälä) [Orabug: 37268602] {CVE-2024-50234}
  - wifi: ath10k: Fix memory leak in management tx (Manikanta Pubbisetty) [Orabug: 37268610] {CVE-2024-50236}
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Felix Fietkau) [Orabug: 37268613] {CVE-2024-50237}
  - xhci: Use pm_runtime_get to prevent RPM on unsupported systems (Basavaraj Natikar)
  - xhci: Fix Link TRB DMA in command ring stopped completion event (Faisal Hassan)
  - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (Javier Carrasco)
  - usb: phy: Fix API devm_usb_put_phy() can not release the phy (Zijun Hu)
  - usbip: tools: Fix detach_port() invalid port error path (Zongmin Zhou)
  - misc: sgi-gru: Don't disable preemption in GRU driver (Dimitri Sivanich)
  - net: amd: mvme147: Fix probe banner message (Daniel Palmer)
  - scsi: scsi_transport_fc: Allow setting rport state to current state (Benjamin Marzinski)
  - fs/ntfs3: Additional check in ni_clear() (Konstantin Komarov) [Orabug: 37268638] {CVE-2024-50244}
  - fs/ntfs3: Fix possible deadlock in mi_read (Konstantin Komarov) [Orabug: 37268644] {CVE-2024-50245}
  - fs/ntfs3: Fix warning possible deadlock in ntfs_set_state (Konstantin Komarov)
  - fs/ntfs3: Check if more than chunk-size bytes are written (Andrew Ballance) [Orabug: 37268655] {CVE-2024-50247}
  - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (Xiongfeng Wang)
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [Orabug: 37268670] {CVE-2024-50251}
  - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension (Benoît Monin)
  - netfilter: Fix use-after-free in get_info() (Dong Chenchen) [Orabug: 37268689] {CVE-2024-50257}
  - bpf: Fix out-of-bounds write in trie_get_next_key() (Byeonguk Jeong) [Orabug: 37268702] {CVE-2024-50262}
  - netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (Zichen Xie) [Orabug: 37268697] {CVE-2024-50259}
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Pedro Tammela) [Orabug: 37304740] {CVE-2024-53057}
  - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Furong Xu) [Orabug: 37304745] {CVE-2024-53058}
  - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (Christophe JAILLET)
  - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (Daniel Gabay) [Orabug: 37304749] {CVE-2024-53059}
  - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (Emmanuel Grumbach)
  - mac80211: Add support to trigger sta disconnect on hardware restart (Youghandhar Chintala)
  - mac80211: do drv_reconfig_complete() before restarting all (Johannes Berg)
  - RDMA/bnxt_re: synchronize the qp-handle table array (Selvin Xavier)
  - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (Patrisious Haddad)
  - RDMA/cxgb4: Dump vendor specific QP details (Leon Romanovsky)
  - wifi: brcm80211: BRCM_TRACING should depend on TRACING (Geert Uytterhoeven)
  - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (Felix Fietkau)
  - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (Geert Uytterhoeven)
  - cgroup: Fix potential overflow issue when checking max_depth (Xiu Jianfeng)
  - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (Koba Ko) [Orabug: 37264072] {CVE-2024-50141}
  - ACPI: PRM: Change handler_addr type to void pointer (Sudeep Holla)
  - ACPI: PRM: Remove unnecessary blank lines (Aubrey Li)
  - ksmbd: fix user-after-free from session log off (Namjae Jeon) [Orabug: 37227413] {CVE-2024-50086}
  - selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test (Donet Tom)
  - LTS version: v5.15.170 (Vijayendra Suman)
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [Orabug: 37264074] {CVE-2024-50142}
  - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (Zichen Xie) [Orabug: 37252324] {CVE-2024-50103}
  - net: phy: dp83822: Fix reset pin definitions (Michel Alex)
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too (Jiri Slaby (SUSE))
  - selinux: improve error checking in sel_write_load() (Paul Moore)
  - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (Haiyang Zhang)
  - xfrm: fix one more kernel-infoleak in algo dumping (Petr Vaganov) [Orabug: 37252349] {CVE-2024-50110}
  - ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (José Relvas)
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Sean Christopherson) [Orabug: 37252372] {CVE-2024-50115}
  - openat2: explicitly return -E2BIG for (usize > PAGE_SIZE) (Aleksa Sarai)
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [Orabug: 37252377] {CVE-2024-50116}
  - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (Shubham Panwar)
  - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (Christian Heusel)
  - drm/amd: Guard against bad data for ATIF ACPI method (Mario Limonciello) [Orabug: 37252383] {CVE-2024-50117}
  - btrfs: zoned: fix zone unusable accounting for freed reserved extent (Naohiro Aota)
  - ALSA: hda/realtek: Update default depop procedure (Kailang Yang)
  - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (Andrey Shumilin) [Orabug: 37264274] {CVE-2024-50205}
  - bpf,perf: Fix perf_event_detach_bpf_prog error handling (Jiri Olsa)
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (Jinjie Ruan) [Orabug: 37320233] {CVE-2024-50210}
  - r8169: avoid unsolicited interrupts (Heiner Kallweit)
  - net: sched: fix use-after-free in taprio_change() (Dmitry Antipov) [Orabug: 37252407] {CVE-2024-50127}
  - net: wwan: fix global oob in wwan_rtnl_policy (Lin Ma) [Orabug: 37252410] {CVE-2024-50128}
  - net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x (Peter Rashleigh)
  - net: plip: fix break; causing plip to never transmit (Jakub Boehm)
  - be2net: fix potential memory leak in be_xmit() (Wang Hai) [Orabug: 37264143] {CVE-2024-50167}
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [Orabug: 37264149] {CVE-2024-50168}
  - xfrm: respect ip protocols rules criteria when performing dst lookups (Eyal Birger)
  - xfrm: extract dst lookup parameters into a struct (Eyal Birger)
  - tracing: Consider the NULL character when validating the event length (Leo Yan) [Orabug: 37252415] {CVE-2024-50131}
  - platform/x86: dell-sysman: add support for alienware products (Crag Wang)
  - ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (Alexey Klimov)
  - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning (junhua huang)
  - platform/x86: dell-wmi: Ignore suspend notifications (Armin Wolf)
  - udf: fix uninit-value use in udf_get_fileshortad (Gianfranco Trad) [Orabug: 37264080] {CVE-2024-50143}
  - arm64: Force position-independent veneers (Mark Rutland)
  - ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (Shengjiu Wang)
  - ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (Alexey Klimov)
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Hans de Goede) [Orabug: 37252420] {CVE-2024-50134}
  - exec: don't WARN for racy path_noexec check (Mateusz Guzik) [Orabug: 37206344] {CVE-2024-50010}
  - XHCI: Separate PORT and CAPs macros into dedicated file (Frank Li)
  - usb: gadget: Add function wakeup support (Elson Roy Serrao)
  - KVM: s390: gaccess: Check if guest address is in memslot (Nico Boehr)
  - KVM: s390: gaccess: Cleanup access to guest pages (Janis Schoetterl-Glausch)
  - KVM: s390: gaccess: Refactor access address range check (Janis Schoetterl-Glausch)
  - KVM: s390: gaccess: Refactor gpa and length calculation (Janis Schoetterl-Glausch)
  - arm64: probes: Fix uprobes for big-endian kernels (Mark Rutland) [Orabug: 37264236] {CVE-2024-50194}
  - arm64:uprobe fix the uprobe SWBP_INSN in big-endian (junhua huang)
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [Orabug: 37264096] {CVE-2024-50148}
  - s390: Initialize psw mask in perf_arch_fetch_caller_regs() (Heiko Carstens)
  - usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [Orabug: 37264102] {CVE-2024-50150}
  - smb: client: fix OOBs when building SMB2_IOCTL request (Paulo Alcantara) [Orabug: 37264107] {CVE-2024-50151}
  - scsi: target: core: Fix null-ptr-deref in target_alloc_device() (Wang Hai) [Orabug: 37264112] {CVE-2024-50153}
  - genetlink: hold RCU in genlmsg_mcast() (Eric Dumazet)
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Kuniyuki Iwashima) [Orabug: 37264114] {CVE-2024-50154}
  - net: systemport: fix potential memory leak in bcm_sysport_xmit() (Wang Hai) [Orabug: 37264156] {CVE-2024-50171}
  - net: xilinx: axienet: fix potential memory leak in axienet_start_xmit() (Wang Hai)
  - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid (Li RongQing)
  - net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit() (Wang Hai)
  - macsec: don't increment counters for an unrelated SA (Sabrina Dubroca)
  - net: usb: usbnet: fix race in probe failure (Oliver Neukum)
  - drm/msm: Allocate memory for disp snapshot with kvzalloc() (Douglas Anderson)
  - drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (Douglas Anderson) [Orabug: 37264122] {CVE-2024-50156}
  - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (Jonathan Marek)
  - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Bhargava Chenna Marreddy) [Orabug: 37264280] {CVE-2024-50208}
  - RDMA/bnxt_re: Return more meaningful error (Kalesh AP)
  - ipv4: give an IPv4 dev to blackhole_netdev (Xin Long)
  - RDMA/irdma: Fix misspelling of "accept*" (Alexander Zubkov)
  - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Anumula Murali Mohan Reddy)
  - ALSA: hda/cs8409: Fix possible NULL dereference (Murad Masimov) [Orabug: 37264129] {CVE-2024-50160}
  - ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin (Florian Klink)
  - x86/resctrl: Avoid overflow in MB settings in bw_validate() (Martin Kletzander)
  - RDMA/bnxt_re: Add a check for memory allocation (Kalesh AP) [Orabug: 37264285] {CVE-2024-50209}
  - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (Saravanan Vajravel)
  - bpf: devmap: provide rxq after redirect (Florian Kauer) [Orabug: 37264132] {CVE-2024-50162}
  - bpf: Make sure internal and UAPI bpf_redirect flags don't overlap (Toke Høiland-Jørgensen) [Orabug: 37264134] {CVE-2024-50163}
  - LTS version: v5.15.169 (Vijayendra Suman)
  - ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (Vasiliy Kovalev)
  - powerpc/mm: Always update max/min_low_pfn in mem_topology_setup() (Aneesh Kumar K.V)
  - nilfs2: propagate directory read errors from nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37264266] {CVE-2024-50202}
  - mptcp: prevent MPC handshake on port-based signal endpoints (Paolo Abeni)
  - mptcp: fallback when MPTCP opts are dropped after 1st data (Matthieu Baerts (NGI0))
  - tcp: fix mptcp DSS corruption due to large pmtu xmit (Paolo Abeni) [Orabug: 37227408] {CVE-2024-50083}
  - mptcp: handle consistently DSS corruption (Paolo Abeni) [Orabug: 37264210] {CVE-2024-50185}
  - mptcp: track and update contiguous data status (Geliang Tang)
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Marc Zyngier) [Orabug: 37264231] {CVE-2024-50192}
  - pinctrl: ocelot: fix system hang on level based interrupts (Sergey Matsievskiy) [Orabug: 37264246] {CVE-2024-50196}
  - x86/entry_32: Clear CPU buffers after register restore in NMI return (Pawan Gupta) [Orabug: 37264234] {CVE-2024-50193}
  - x86/entry_32: Do not clobber user EFLAGS.ZF (Pawan Gupta)
  - x86/apic: Always explicitly disarm TSC-deadline timer (Zhang Rui)
  - x86/resctrl: Annotate get_mem_config() functions as __init (Nathan Chancellor)
  - USB: serial: option: add Telit FN920C04 MBIM compositions (Daniele Palmas)
  - USB: serial: option: add support for Quectel EG916Q-GL (Benjamin B. Frost)
  - xhci: Mitigate failed set dequeue pointer commands (Mathias Nyman)
  - xhci: Fix incorrect stream context type macro (Mathias Nyman)
  - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (Luiz Augusto von Dentz)
  - Bluetooth: Remove debugfs directory on module init failure (Aaron Thompson)
  - iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
  - iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
  - iio: light: opt3001: add missing full-scale range value (Emil Gedenryd)
  - iio: light: veml6030: fix IIO device retrieval from embedded device (Javier Carrasco) [Orabug: 37264254] {CVE-2024-50198}
  - iio: light: veml6030: fix ALS sensor resolution (Javier Carrasco)
  - iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (Christophe JAILLET)
  - iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
  - iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (Javier Carrasco)
  - iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (Javier Carrasco)
  - iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (Javier Carrasco)
  - drm/vmwgfx: Handle surface check failure correctly (Nikolay Kuratov)
  - drm/radeon: Fix encoder->possible_clones (Ville Syrjälä) [Orabug: 37264263] {CVE-2024-50201}
  - io_uring/sqpoll: close race on waiting for sqring entries (Jens Axboe)
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [Orabug: 37227403] {CVE-2024-50082}
  - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (Johannes Wikner)
  - x86/bugs: Skip RSB fill at VMEXIT (Johannes Wikner)
  - x86/entry: Have entry_ibpb() invalidate return predictions (Johannes Wikner)
  - x86/cpufeatures: Add a IBPB_NO_RET BUG flag (Johannes Wikner)
  - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Jim Mattson)
  - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Michael Mueller)
  - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (Thomas Weißschuh)
  - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (Lu Baolu) [Orabug: 37252321] {CVE-2024-50101}
  - io_uring/sqpoll: do not put cpumask on stack (Felix Moessbauer)
  - io_uring/sqpoll: retain test for whether the CPU is valid (Jens Axboe)
  - io_uring/sqpoll: do not allow pinning outside of cpuset (Felix Moessbauer)
  - drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) (Wachowski, Karol)
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao) [Orabug: 36835836] {CVE-2024-40953}
  - dm-crypt, dm-verity: disable tasklets (Mikulas Patocka)
  - wifi: mac80211: fix potential key use-after-free (Johannes Berg)
  - secretmem: disable memfd_secret() if arch cannot set direct map (Patrick Roy) [Orabug: 37264195] {CVE-2024-50182}
  - mm/swapfile: skip HugeTLB pages for unuse_vma (Liu Shixin) [Orabug: 37264256] {CVE-2024-50199}
  - fat: fix uninitialized variable (OGAWA Hirofumi)
  - irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (Nianyao Tang)
  - net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY (Oleksij Rempel)
  - arm64: probes: Fix simulate_ldr*_literal() (Mark Rutland)
  - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [Orabug: 37252316] {CVE-2024-50099}
  - posix-clock: Fix missing timespec64 check in pc_clock_settime() (Jinjie Ruan) [Orabug: 37264241] {CVE-2024-50195}
  - net: enetc: add missing static descriptor and inline keyword (Wei Fang)
  - net: enetc: remove xdp_drops statistic from enetc_xdp_drop() (Wei Fang)
  - udf: Fix bogus checksum computation in udf_rename() (Jan Kara) [Orabug: 37320204] {CVE-2024-43845}
  - udf: Don't return bh from udf_expand_dir_adinicb() (Jan Kara)
  - udf: Handle error when expanding directory (Jan Kara)
  - udf: Remove old directory iteration code (Jan Kara)
  - udf: Convert udf_link() to new directory iteration code (Jan Kara)
  - udf: Convert udf_mkdir() to new directory iteration code (Jan Kara)
  - udf: Convert udf_add_nondir() to new directory iteration (Jan Kara)
  - udf: Implement adding of dir entries using new iteration code (Jan Kara)
  - udf: Convert udf_unlink() to new directory iteration code (Jan Kara)
  - udf: Convert udf_rmdir() to new directory iteration code (Jan Kara)
  - udf: Convert empty_dir() to new directory iteration code (Jan Kara)
  - udf: Convert udf_get_parent() to new directory iteration code (Jan Kara)
  - udf: Convert udf_lookup() to use new directory iteration code (Jan Kara)
  - udf: Convert udf_readdir() to new directory iteration (Jan Kara)
  - udf: Convert udf_rename() to new directory iteration code (Jan Kara)
  - udf: Provide function to mark entry as deleted using new directory iteration code (Jan Kara)
  - udf: Implement searching for directory entry using new iteration code (Jan Kara)
  - udf: Move udf_expand_dir_adinicb() to its callsite (Jan Kara)
  - udf: Convert udf_expand_dir_adinicb() to new directory iteration (Jan Kara)
  - udf: New directory iteration code (Jan Kara)
  - ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (Vasiliy Kovalev)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-303.171.5.el9uek]
changelog:
  - intel_idle: fix ACPI _CST matching for newer Xeon platforms (Artem Bityutskiy)  [Orabug: 37249457]
  - x86: Fix CPUIDLE_FLAG_IRQ_ENABLE leaking timer reprogram (Peter Zijlstra)  [Orabug: 37249457]
  - perf/tests: Add AMX instructions to x86 instruction decoder test (Adrian Hunter)  [Orabug: 37249457]
  - x86/insn: Add AMX instructions to the x86 instruction decoder (Adrian Hunter)  [Orabug: 37249457]
  - intel_idle: add Granite Rapids Xeon support (Artem Bityutskiy)  [Orabug: 37249457]
  - cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again* (Peter Zijlstra)  [Orabug: 37249457]
  - intel_idle: Fix false positive RCU splats due to incorrect hardirqs state (Waiman Long)  [Orabug: 37249457]
  - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE (Peter Zijlstra)  [Orabug: 37249457]
  - intel_idle: Add a new flag to initialize the AMX state (Chang S. Bae)  [Orabug: 37249457]
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle (Chang S. Bae)  [Orabug: 37249457]
  - intel_idle: enable interrupts before C1 on Xeons (Artem Bityutskiy)  [Orabug: 37249457]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.171.5.1.el9uek]
changelog:
  - sunrpc: fix a NULL deref in svc_process() when ->sv_stats doesn't exist (Calum Mackay)  [Orabug: 37346134]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-303.171.5.2.el9uek]
changelog:
  - build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock)  [Orabug: 37393454]
  - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna)  [Orabug: 37384237]
  - x86/pkeys: Change caller of update_pkru_in_sigframe() (Aruna Ramakrishna)  [Orabug: 37384237]
  - Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" (Sherry Yang)  [Orabug: 37383283]


author: Sherry Yang <sherry.yang@oracle.com> [5.15.0-303.171.5.2.1.el9uek]
changelog:
  - cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Vishal Verma)  [Orabug: 37410450]  
  - vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37423790]  
  - vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang)  [Orabug: 37423790]


author: Sherry Yang <sherry.yang@oracle.com> [5.15.0-303.171.5.2.1.el9uek]
changelog:
  - cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Vishal Verma)  [Orabug: 37410450]
  - vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37423790]
  - vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang)  [Orabug: 37423790]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-303.171.5.2.2.el9uek]
changelog:
  - Uek-rpm/ol9: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for mips64 (Vijay Kumar)  [Orabug: 37509583]  
  - uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for all archs (Saeed Mirzamohammadi)  [Orabug: 37509575]  
  - Revert "crypto: jitter - permanent and intermittent health errors" (Saeed Mirzamohammadi)  [Orabug: 37492621]  
  - Revert "crypto: jitter - correct health test during initialization" (Saeed Mirzamohammadi)  [Orabug: 37492621]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.4.el9uek]
changelog:
  - LTS version: v5.15.167 (Vijayendra Suman)
  - udp: fix receiving fraglist GSO packets (Felix Fietkau)
  - memcg: protect concurrent access to mem_cgroup_idr (Shakeel Butt) [Orabug: 36993003] {CVE-2024-43892}
  - btrfs: fix race between direct IO write and fsync when using same fd (Filipe Manana) [Orabug: 37195092] {CVE-2024-46734}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann)
  - x86/mm: Fix PTI for i386 some more (Thomas Gleixner)
  - net: drop bad gso csum_start and offset in virtio_net_hdr (Willem de Bruijn) [Orabug: 37195028] {CVE-2024-43897}
  - gso: fix dodgy bit handling for GSO_UDP_L4 (Yan Zhai)
  - net: change maximum number of UDP segments to 128 (Yuri Benditovich)
  - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation (Willem de Bruijn)
  - gpio: rockchip: fix OF node leak in probe() (Krzysztof Kozlowski)
  - drm/i915/fence: Mark debug_fence_free() with __maybe_unused (Andy Shevchenko)
  - drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused (Andy Shevchenko)
  - ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode (Matteo Martelli)
  - nvmet-tcp: fix kernel crash if commands allocation fails (Maurizio Lombardi) [Orabug: 37074464] {CVE-2024-46737}
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Jonathan Cameron) [Orabug: 37116411] {CVE-2024-46822}
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header (James Morse)
  - ACPI: processor: Fix memory leaks in error paths of processor_add() (Jonathan Cameron)
  - ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() (Jonathan Cameron)
  - workqueue: Improve scalability of workqueue watchdog touch (Nicholas Piggin) [Orabug: 37116487] {CVE-2024-46839}
  - workqueue: wq_watchdog_touch is always called with valid CPU (Nicholas Piggin)
  - nilfs2: protect references to superblock parameters exposed in sysfs (Ryusuke Konishi) [Orabug: 37074676] {CVE-2024-46780}
  - nilfs2: replace snprintf in show functions with sysfs_emit (Qing Wang)
  - ksmbd: Unlock on in ksmbd_tcp_set_interfaces() (Dan Carpenter)
  - ksmbd: unset the binding mark of a reused connection (Namjae Jeon) [Orabug: 37074716] {CVE-2024-46795}
  - perf/aux: Fix AUX buffer serialization (Peter Zijlstra) [Orabug: 37070802] {CVE-2024-46713}
  - uprobes: Use kzalloc to allocate xol area (Sven Schnelle)
  - clocksource/drivers/timer-of: Remove percpu irq related code (Daniel Lezcano)
  - clocksource/drivers/imx-tpm: Fix next event not taking effect sometime (Jacky Bai)
  - clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX (Jacky Bai)
  - Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic (Naman Jain)
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (Saurabh Sengar) [Orabug: 37074472] {CVE-2024-46739}
  - nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc (Geert Uytterhoeven)
  - binder: fix UAF caused by offsets overwrite (Carlos Llamas) [Orabug: 37074476] {CVE-2024-46740}
  - usb: dwc3: core: update LC timer as per USB Spec V3.2 (Faisal Hassan)
  - iio: adc: ad7124: fix chip ID mismatch (Dumitru Ceclan)
  - iio: adc: ad7124: fix config comparison (Dumitru Ceclan)
  - iio: fix scale application in iio_convert_raw_to_processed_unlocked (Matteo Martelli)
  - iio: buffer-dmaengine: fix releasing dma channel on error (David Lechner)
  - staging: iio: frequency: ad9834: Validate frequency parameter value (Aleksandr Mishin) [Orabug: 37159727] {CVE-2024-47663}
  - cifs: Check the lease context if we actually got a lease (Ronnie Sahlberg)
  - NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (Trond Myklebust)
  - ata: pata_macio: Use WARN instead of BUG (Michael Ellerman)
  - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Jiaxun Yang) [Orabug: 37116454] {CVE-2024-46832}
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Kent Overstreet) [Orabug: 37159756] {CVE-2024-47668}
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk (Stefan Wiehler) [Orabug: 37074487] {CVE-2024-46743}
  - Squashfs: sanity check symbolic link size (Phillip Lougher) [Orabug: 37074494] {CVE-2024-46744}
  - usbnet: ipheth: race between ipheth_close and error handling (Oliver Neukum)
  - Input: uinput - reject requests with unreasonable number of slots (Dmitry Torokhov) [Orabug: 37074502] {CVE-2024-46745}
  - HID: amd_sfh: free driver_data after destroying hid device (Olivier Sobrie) [Orabug: 37074507] {CVE-2024-46746}
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Camila Alvarez) [Orabug: 37074512] {CVE-2024-46747}
  - s390/vmlinux.lds.S: Move ro_after_init section behind rodata section (Heiko Carstens)
  - btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() (David Sterba)
  - kselftests: dmabuf-heaps: Ensure the driver name is null-terminated (Zenghui Yu)
  - i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup (Jarkko Nikula) [Orabug: 37159737] {CVE-2024-47665}
  - net: dpaa: avoid on-stack arrays of NR_CPUS elements (Vladimir Oltean)
  - PCI: Add missing bridge lock to pci_bus_lock() (Dan Williams) [Orabug: 37074530] {CVE-2024-46750}
  - riscv: set trap vector earlier (yang.zhang)
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (Filipe Manana) [Orabug: 37074542] {CVE-2024-46752}
  - btrfs: clean up our handling of refs == 0 in snapshot delete (Josef Bacik) [Orabug: 37116493] {CVE-2024-46840}
  - btrfs: replace BUG_ON with ASSERT in walk_down_proc() (Josef Bacik)
  - fs/ntfs3: Check more cases when directory is corrupted (Konstantin Komarov)
  - smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() (Zqiang)
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (Sascha Hauer) [Orabug: 37074560] {CVE-2024-46755}
  - dma-mapping: benchmark: Don't starve others when doing the test (Yicong Yang)
  - ext4: fix possible tid_t sequence overflows (Luis Henriques (SUSE))
  - drm/amdgpu: Set no_hw_access when VF request full GPU fails (Yifan Zha)
  - libbpf: Add NULL checks to bpf_object__{prev_map,next_map} (Andreas Ziegler)
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074565] {CVE-2024-46756}
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074570] {CVE-2024-46757}
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074578] {CVE-2024-46758}
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074583] {CVE-2024-46759}
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (Krishna Kumar) [Orabug: 37074594] {CVE-2024-46761}
  - devres: Initialize an uninitialized struct member (Zijun Hu)
  - um: line: always fill *error_out in setup_one_line() (Johannes Berg) [Orabug: 37116517] {CVE-2024-46844}
  - cgroup: Protect css->cgroup write under css_set_lock (Waiman Long)
  - iommu/vt-d: Handle volatile descriptor status read (Jacob Pan)
  - dm init: Handle minors larger than 255 (Benjamin Marzinski)
  - ASoC: topology: Properly initialize soc_enum values (Amadeusz Sławiński)
  - net: dsa: vsc73xx: fix possible subblocks range of CAPT block (Pawel Dembicki)
  - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN (Jonas Gorski)
  - fou: Fix null-ptr-deref in GRO. (Kuniyuki Iwashima) [Orabug: 37074606] {CVE-2024-46763}
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers (Eric Dumazet)
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers (Eric Dumazet)
  - bareudp: Fix device stats updates. (Guillaume Nault)
  - usbnet: modern method to get random MAC (Oliver Neukum)
  - net: usb: don't write directly to netdev->dev_addr (Jakub Kicinski)
  - ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset (Larysa Zaremba)
  - igc: Unlock on error in igc_io_resume() (Dan Carpenter)
  - tcp_bpf: fix return value of tcp_bpf_sendmsg() (Cong Wang) [Orabug: 37074692] {CVE-2024-46783}
  - platform/x86: dell-smbios: Fix error path in dell_smbios_init() (Aleksandr Mishin)
  - igb: Fix not clearing TimeSync interrupts for 82580 (Daiwei Li)
  - can: m_can: Release irq on error in m_can_open (Simon Horman)
  - can: bcm: Remove proc entry when dev is unregistered. (Kuniyuki Iwashima) [Orabug: 37074624] {CVE-2024-46771}
  - drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 (Marek Olšák)
  - pcmcia: Use resource_size function on resource object (Jules Irenge)
  - media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse (Chen Ni)
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Kishon Vijay Abraham I) [Orabug: 37159749] {CVE-2024-47667}
  - media: vivid: don't set HDMI TX controls if there are no HDMI outputs (Hans Verkuil)
  - drm/amd/display: Check HDCP returned status (Alex Hung)
  - usb: uas: set host status byte on data completion error (Shantanu Goel)
  - wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 (Arend van Spriel)
  - leds: spi-byte: Call of_node_put() on error path (Andy Shevchenko)
  - media: vivid: fix wrong sizeimage value for mplane (Hans Verkuil)
  - udf: Avoid excessive partition lengths (Jan Kara) [Orabug: 37074664] {CVE-2024-46777}
  - netfilter: nf_conncount: fix wrong variable type (Yunjian Wang)
  - iommu: sun50i: clear bypass register (Jernej Skrabec)
  - af_unix: Remove put_pid()/put_cred() in copy_peercred(). (Kuniyuki Iwashima)
  - irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 (Pali Rohár)
  - smack: unix sockets: fix accept()ed socket label (Konstantin Andreev)
  - ALSA: hda: Add input value sanity checks to HDMI channel map controls (Takashi Iwai)
  - mptcp: pm: send ACK on an active subflow (Matthieu Baerts (NGI0))
  - mptcp: pr_debug: add missing
   at the end (Matthieu Baerts (NGI0))
  - mptcp: pm: skip connecting to already established sf (Matthieu Baerts (NGI0))
  - mptcp: pm: do not remove already closed subflows (Matthieu Baerts (NGI0))
  - mptcp: pm: ADD_ADDR 0 is not a new address (Matthieu Baerts (NGI0))
  - mptcp: close subflow when receiving TCP+FIN (Matthieu Baerts (NGI0))
  - mptcp: avoid duplicated SUB_CLOSED events (Matthieu Baerts (NGI0))
  - mptcp: pm: avoid possible UaF when selecting endp (Matthieu Baerts (NGI0))
  - mptcp: constify a bunch of of helpers (Paolo Abeni)
  - mptcp: pm: fullmesh: select the right ID later (Matthieu Baerts (NGI0))
  - mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR (Matthieu Baerts (NGI0))
  - mptcp: pm: only decrement add_addr_accepted for MPJ req (Matthieu Baerts (NGI0))
  - mptcp: pm: re-using ID of unused flushed subflows (Matthieu Baerts (NGI0))
  - nilfs2: fix state management in error path of log writing function (Ryusuke Konishi) [Orabug: 37159764] {CVE-2024-47669}
  - nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [Orabug: 37074683] {CVE-2024-46781}
  - sched: sch_cake: fix bulk flow accounting logic for host fairness (Toke Høiland-Jørgensen) [Orabug: 37116442] {CVE-2024-46828}
  - ila: call nf_unregister_net_hooks() sooner (Eric Dumazet) [Orabug: 37074688] {CVE-2024-46782}
  - tracing: Avoid possible softlockup in tracing_iter_reset() (Zheng Yejian)
  - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open (Simon Arlott) [Orabug: 37074711] {CVE-2024-46791}
  - clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API (Satya Priya Kakitapalli)
  - clk: qcom: clk-alpha-pll: Fix the pll post div mask (Satya Priya Kakitapalli)
  - fuse: use unsigned type for getxattr/listxattr size truncation (Jann Horn)
  - fuse: update stats for pages in dropped aux writeback list (Joanne Koong)
  - mmc: cqhci: Fix checking of CQHCI_HALT state (Seunghwan Baek)
  - mmc: sdhci-of-aspeed: fix module autoloading (Liao Chen)
  - mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K (Sam Protsenko)
  - Bluetooth: MGMT: Ignore keys being loaded with invalid type (Luiz Augusto von Dentz)
  - Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" (Luiz Augusto von Dentz)
  - nvme-pci: Add sleep quirk for Samsung 990 Evo (Georg Gottleuber)
  - rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [Orabug: 37116445] {CVE-2024-46829}
  - irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() (Ma Ke)
  - ata: libata: Fix memory leak for error path in ata_host_alloc() (Zheng Qixing)
  - ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx (Maximilien Perreault)
  - ALSA: hda/realtek: add patch for internal mic in Lenovo V145 (Terry Cheong)
  - ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices (Christoffer Sandberg)
  - KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing (Ravi Bangoria)
  - KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE (Maxim Levitsky)
  - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object (robelin) [Orabug: 37074721] {CVE-2024-46798}
  - sch/netem: fix use after free in netem_dequeue (Stephen Hemminger) [Orabug: 37074725] {CVE-2024-46800}
  - i2c: Use IS_REACHABLE() for substituting empty ACPI functions (Richard Fitzgerald)
  - ext4: handle redirtying in ext4_bio_write_page() (Jan Kara)
  - udf: Limit file size to 4TB (Jan Kara)
  - ext4: reject casefold inode flag without casefold feature (Eric Biggers)
  - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (Nikita Kiryushin) [Orabug: 36753533] {CVE-2024-38577}
  - virtio_net: Fix napi_skb_cache_put warning (Breno Leitao) [Orabug: 36964473] {CVE-2024-43835}
  - drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr (Bob Zhou) [Orabug: 36993065] {CVE-2024-43905}
  - media: uvcvideo: Enforce alignment of frame and interval (Ricardo Ribalda)
  - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null (Alex Hung) [Orabug: 37073031] {CVE-2024-46714}
  - block: remove the blk_flush_integrity call in blk_integrity_unregister (Christoph Hellwig)
  - wifi: cfg80211: make hash table duplicates more survivable (Johannes Berg)
  - drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (Marek Vasut) [Orabug: 37116336] {CVE-2024-46810}
  - drm/meson: plane: Add error handling (Haoran Liu)
  - smack: tcp: ipv4, fix incorrect labeling (Casey Schaufler)
  - usb: typec: ucsi: Fix null pointer dereference in trace (Abhishek Pandit-Subedi) [Orabug: 37073064] {CVE-2024-46719}
  - usbip: Don't submit special requests twice (Simon Holesch)
  - rcu/nocb: Remove buggy bypass lock contention mitigation (Frederic Weisbecker)
  - ionic: fix potential irq name truncation (Shannon Nelson)
  - RDMA/efa: Properly handle unexpected AQ completions (Michael Margolin)
  - hwspinlock: Introduce hwspin_lock_bust() (Richard Maina)
  - PCI: al: Check IORESOURCE_BUS existence during probe (Aleksandr Mishin)
  - cpufreq: scmi: Avoid overflow of target_freq in fast switch (Jagadeesh Kona)
  - wifi: iwlwifi: remove fw_running op (Shahar S Matityahu)
  - drm/amdgpu: update type of buf size to u32 for eeprom functions (Tao Zhou)
  - drm/amd/pm: check negtive return for table entries (Jesse Zhang)
  - drm/amdgpu: the warning dereferencing obj for nbio_v7_4 (Jesse Zhang) [Orabug: 37116393] {CVE-2024-46819}
  - drm/amd/pm: check specific index for aldebaran (Jesse Zhang)
  - drm/amdgpu: fix the waring dereferencing hive (Jesse Zhang) [Orabug: 37116300] {CVE-2024-46805}
  - drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs (Ma Jun)
  - apparmor: fix possible NULL pointer dereference (Leesoo Ahn) [Orabug: 37073077] {CVE-2024-46721}
  - drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device (Michael Chen)
  - drm/amdgpu: fix mc_data out-of-bounds read warning (Tim Huang) [Orabug: 37073082] {CVE-2024-46722}
  - drm/amdgpu: fix ucode out-of-bounds read warning (Tim Huang) [Orabug: 37073087] {CVE-2024-46723}
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (Ma Jun) [Orabug: 37073093] {CVE-2024-46724}
  - drm/amdgpu: Fix out-of-bounds write warning (Ma Jun) [Orabug: 37073098] {CVE-2024-46725}
  - drm/amdgpu/pm: Fix uninitialized variable agc_btc_response (Ma Jun)
  - drm/amdgpu/pm: Fix uninitialized variable warning for smu10 (Ma Jun)
  - drm/amd/amdgpu: Check tbo resource pointer (Asad Kamal) [Orabug: 37116315] {CVE-2024-46807}
  - drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create (Hersen Wu)
  - drm/amd/display: Check msg_id before processing transcation (Alex Hung) [Orabug: 37116360] {CVE-2024-46814}
  - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] (Alex Hung) [Orabug: 37116365] {CVE-2024-46815}
  - drm/amd/display: Add array index check for hdcp ddc access (Hersen Wu) [Orabug: 37116295] {CVE-2024-46804}
  - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (Hersen Wu) [Orabug: 37116375] {CVE-2024-46817}
  - drm/amd/display: Check gpio_id before used as array index (Alex Hung) [Orabug: 37116384] {CVE-2024-46818}
  - drm/amdgpu: avoid reading vf2pf info size from FB (Zhigang Luo)
  - drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr (Tim Huang)
  - drm/amdgpu: fix uninitialized scalar variable warning (Tim Huang)
  - drm/amd/pm: fix the Out-of-bounds read warning (Jesse Zhang) [Orabug: 37073129] {CVE-2024-46731}
  - drm/amd/pm: fix warning using uninitialized value of max_vid_step (Jesse Zhang)
  - drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr (Tim Huang)
  - drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc (Ma Jun)
  - drm/amdgpu: fix overflowed array index read warning (Tim Huang)
  - drm/amd/display: Assign linear_pitch_alignment even for VM (Alvin Lee) [Orabug: 37073135] {CVE-2024-46732}
  - drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr (Ma Jun)
  - net: usb: qmi_wwan: add MeiG Smart SRM825L (ZHANG Yuntian)
  - dma-debug: avoid deadlock between dma debug vs printk and netconsole (Rik van Riel)
  - i2c: Fix conditional for substituting empty ACPI functions (Richard Fitzgerald)
  - ALSA: hda/conexant: Mute speakers at suspend / shutdown (Takashi Iwai)
  - ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown (Takashi Iwai)
  - drm: panel-orientation-quirks: Add quirk for OrangePi Neo (Philip Mueller)
  - LTS version: v5.15.166 (Vijayendra Suman)
  - apparmor: fix policy_unpack_test on big endian systems (Guenter Roeck)
  - scsi: aacraid: Fix double-free on probe failure (Ben Hutchings) [Orabug: 37070699] {CVE-2024-46673}
  - igc: Fix qbv tx latency by setting gtxoffset (Faizal Rahim)
  - igc: Fix reset adapter logics when tx mode change (Faizal Rahim)
  - phy: zynqmp: Enable reference clock correctly (Sean Anderson)
  - usb: cdnsp: fix for Link TRB with TC (Pawel Laszczak)
  - usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function (Pawel Laszczak)
  - usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() (Zijun Hu)
  - usb: dwc3: st: add missing depopulate in probe error path (Krzysztof Kozlowski)
  - usb: dwc3: st: fix probed platform device ref count on probe error path (Krzysztof Kozlowski) [Orabug: 37070704] {CVE-2024-46674}
  - usb: dwc3: core: Prevent USB core invalid event buffer address access (Selvarasu Ganesan) [Orabug: 37070709] {CVE-2024-46675}
  - usb: dwc3: omap: add missing depopulate in probe error path (Krzysztof Kozlowski)
  - USB: serial: option: add MeiG Smart SRM825L (ZHANG Yuntian)
  - cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (Ian Ray)
  - soc: qcom: cmd-db: Map shared memory as WC, not WB (Volodymyr Babchuk)
  - nfc: pn533: Add poll mod list filling check (Aleksandr Mishin) [Orabug: 37070716] {CVE-2024-46676}
  - net: busy-poll: use ktime_get_ns() instead of local_clock() (Eric Dumazet)
  - gtp: fix a potential NULL pointer dereference (Cong Wang) [Orabug: 37070721] {CVE-2024-46677}
  - ethtool: check device is present when getting link settings (Jamie Bainbridge) [Orabug: 37070727] {CVE-2024-46679}
  - dmaengine: dw: Add memory bus width verification (Serge Semin)
  - dmaengine: dw: Add peripheral bus width verification (Serge Semin)
  - phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume (Piyush Mehta)
  - phy: xilinx: phy-zynqmp: dynamic clock support for power-save (Piyush Mehta)
  - phy: xilinx: add runtime PM support (Piyush Mehta)
  - PM: runtime: Add DEFINE_RUNTIME_DEV_PM_OPS() macro (Paul Cercueil)
  - PM: core: Add EXPORT[_GPL]_SIMPLE_DEV_PM_OPS macros (Paul Cercueil)
  - PM: core: Remove DEFINE_UNIVERSAL_DEV_PM_OPS() macro (Paul Cercueil)
  - soundwire: stream: fix programming slave ports for non-continous port maps (Krzysztof Kozlowski)
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Chen Ridong) [Orabug: 36964509] {CVE-2024-43853}
  - ata: libata-core: Fix null pointer dereference on error (Niklas Cassel) [Orabug: 36897456] {CVE-2024-41098}
  - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages (Alex Deucher) [Orabug: 36867630] {CVE-2024-41011}
  - Revert "MIPS: Loongson64: reset: Prioritise firmware service" (Greg Kroah-Hartman)
  - mptcp: sched: check both backup in retrans (Matthieu Baerts (NGI0))
  - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (Haiyang Zhang)
  - wifi: mwifiex: duplicate static structs used in driver instances (Sascha Hauer)
  - pinctrl: single: fix potential NULL dereference in pcs_get_function() (Ma Ke) [Orabug: 37070743] {CVE-2024-46685}
  - pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins (Huang-Huang Bao)
  - btrfs: run delayed iputs when flushing delalloc (Josef Bacik)
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Jesse Zhang) [Orabug: 36898008] {CVE-2024-42228}
  - tools: move alignment-related macros to new <linux/align.h> (Alexander Lobakin)
  - Input: MT - limit max slots (Tetsuo Handa) [Orabug: 37029136] {CVE-2024-45008}
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) [Orabug: 35358656] {CVE-2023-31083}
  - mm/numa: no task_numa_fault() call if PTE is changed (Zi Yan)
  - mm/numa: no task_numa_fault() call if PMD is changed (Zi Yan)
  - ALSA: timer: Relax start tick time check for slave timer elements (Takashi Iwai)
  - hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt() (Javier Carrasco)
  - Revert "drm/amd/display: Validate hw_points_num before using it" (Alex Hung)
  - mmc: dw_mmc: allow biu and ciu clocks to defer (Ben Whitten)
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (Marc Zyngier) [Orabug: 37070792] {CVE-2024-46707}
  - cxgb4: add forgotten u64 ivlan cast before shift (Nikolay Kuratov)
  - HID: microsoft: Add rumble support to latest xbox controllers (Siarhei Vishniakou)
  - HID: wacom: Defer calculation of resolution until resolution_code is known (Jason Gerecke)
  - MIPS: Loongson64: Set timer mode in cpu-probe (Jiaxun Yang)
  - scsi: core: Fix the return value of scsi_logical_block_count() (Chaotian Jing)
  - Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman) [Orabug: 36992975] {CVE-2024-43884}
  - mmc: mmc_test: Fix NULL dereference on allocation failure (Dan Carpenter) [Orabug: 37070690] {CVE-2024-45028}
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (Dmitry Baryshkov) [Orabug: 37029059] {CVE-2024-44982}
  - drm/msm/dp: reset the link phy params before link training (Abhinav Kumar)
  - drm/msm/dpu: don't play tricks with debug macros (Dmitry Baryshkov)
  - net: xilinx: axienet: Fix dangling multicast addresses (Sean Anderson)
  - net: xilinx: axienet: Always disable promiscuous mode (Sean Anderson)
  - netfilter: flowtable: validate vlan header (Pablo Neira Ayuso) [Orabug: 37029063] {CVE-2024-44983}
  - ipv6: prevent possible UAF in ip6_xmit() (Eric Dumazet) [Orabug: 37029066] {CVE-2024-44985}
  - ipv6: fix possible UAF in ip6_finish_output2() (Eric Dumazet) [Orabug: 37029068] {CVE-2024-44986}
  - ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet) [Orabug: 37029075] {CVE-2024-44987}
  - netem: fix return value if duplicate enqueue fails (Stephen Hemminger) [Orabug: 37070659] {CVE-2024-45016}
  - net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang) [Orabug: 37029081] {CVE-2024-44988}
  - net: dsa: mv88e6xxx: replace ATU violation prints with trace points (Vladimir Oltean)
  - net: dsa: mv88e6xxx: read FID when handling ATU violations (Hans J. Schultz)
  - dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp() (Dan Carpenter)
  - ice: fix ICE_LAST_OFFSET formula (Maciej Fijalkowski)
  - bonding: fix xfrm state handling when clearing active slave (Nikolay Aleksandrov)
  - bonding: fix xfrm real_dev null pointer dereference (Nikolay Aleksandrov) [Orabug: 37029084] {CVE-2024-44989}
  - bonding: fix null pointer deref in bond_ipsec_offload_ok (Nikolay Aleksandrov) [Orabug: 37029087] {CVE-2024-44990}
  - bonding: fix bond_ipsec_offload_ok return type (Nikolay Aleksandrov)
  - ip6_tunnel: Fix broken GRO (Thomas Bogendoerfer)
  - netfilter: nft_counter: Synchronize nft_counter_reset() against reader. (Sebastian Andrzej Siewior)
  - netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). (Sebastian Andrzej Siewior)
  - kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima) [Orabug: 37013760] {CVE-2024-44946}
  - tc-testing: don't access non-existent variable on exception (Simon Horman)
  - Bluetooth: SMP: Fix assumption of Central always being Initiator (Luiz Augusto von Dentz)
  - Bluetooth: hci_core: Fix LE quote calculation (Luiz Augusto von Dentz)
  - platform/surface: aggregator: Fix warning when controller is destroyed in probe (Maximilian Luz)
  - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (Long Li)
  - dm suspend: return -ERESTARTSYS instead of -EINTR (Mikulas Patocka)
  - media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c) (Aurelien Jarno)
  - nfsd: make svc_stat per-network namespace instead of global (Josef Bacik)
  - nfsd: remove nfsd_stats, make th_cnt a global counter (Josef Bacik)
  - nfsd: make all of the nfsd stats per-network namespace (Josef Bacik)
  - nfsd: expose /proc/net/sunrpc/nfsd in net namespaces (Josef Bacik)
  - nfsd: rename NFSD_NET_* to NFSD_STATS_* (Josef Bacik)
  - sunrpc: use the struct net as the svc proc private (Josef Bacik)
  - sunrpc: remove ->pg_stats from svc_program (Josef Bacik)
  - sunrpc: pass in the sv_stats struct through svc_create_pooled (Josef Bacik)
  - nfsd: stop setting ->pg_stats for unused stats (Josef Bacik)
  - sunrpc: don't change ->sv_stats if it doesn't exist (Josef Bacik)
  - NFSD: Fix frame size warning in svc_export_parse() (Chuck Lever)
  - NFSD: Rewrite synopsis of nfsd_percpu_counters_init() (Chuck Lever)
  - NFSD: Refactor the duplicate reply cache shrinker (Chuck Lever)
  - NFSD: Replace nfsd_prune_bucket() (Chuck Lever)
  - NFSD: Rename nfsd_reply_cache_alloc() (Chuck Lever)
  - NFSD: Refactor nfsd_reply_cache_free_locked() (Chuck Lever)
  - nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net (Jeff Layton)
  - nfsd: move reply cache initialization into nfsd startup (Jeff Layton)
  - block: use "unsigned long" for blk_validate_block_size(). (Tetsuo Handa)
  - gtp: pull network headers in gtp_dev_xmit() (Eric Dumazet) [Orabug: 37029110] {CVE-2024-44999}
  - hrtimer: Prevent queuing of hrtimer without a function callback (Phil Chang)
  - nvmet-rdma: fix possible bad dereference when freeing rsps (Sagi Grimberg)
  - ext4: set the type of max_zeroout to unsigned int to avoid overflow (Baokun Li)
  - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc (Guanrui Huang)
  - usb: dwc3: core: Skip setting event buffers for host only controllers (Krishna Kurapati)
  - platform/x86: lg-laptop: fix %s null argument warning (Gergo Koteles)
  - clocksource: Make watchdog and suspend-timing multiplication overflow safe (Adrian Hunter)
  - s390/iucv: fix receive buffer virtual vs physical address confusion (Alexander Gordeev)
  - openrisc: Call setup_memory() earlier in the init sequence (Oreoluwa Babatunde)
  - NFS: avoid infinite loop in pnfs_update_layout. (NeilBrown)
  - nvmet-tcp: do not continue for invalid icreq (Hannes Reinecke)
  - net: hns3: add checking for vf id of mailbox (Jian Shen)
  - Bluetooth: bnep: Fix out-of-bound access (Luiz Augusto von Dentz)
  - usb: gadget: fsl: Increase size of name buffer for endpoints (Uwe Kleine-König)
  - f2fs: fix to do sanity check in update_sit_entry (Zhiguo Niu)
  - btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() (David Sterba)
  - btrfs: change BUG_ON to assertion in tree_move_down() (David Sterba)
  - btrfs: send: handle unexpected data in header buffer in begin_cmd() (David Sterba)
  - btrfs: handle invalid root reference found in may_destroy_subvol() (David Sterba)
  - btrfs: change BUG_ON to assertion when checking for delayed_node root (David Sterba)
  - powerpc/boot: Only free if realloc() succeeds (Michael Ellerman)
  - powerpc/boot: Handle allocation failure in simple_realloc() (Li zeming)
  - parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 (Helge Deller)
  - memory: stm32-fmc2-ebi: check regmap_read return value (Christophe Kerello)
  - x86: Increase brk randomness entropy for 64-bit systems (Kees Cook)
  - md: clean up invalid BUG_ON in md_ioctl (Li Nan)
  - netlink: hold nlk->cb_mutex longer in __netlink_dump_start() (Eric Dumazet)
  - clocksource/drivers/arm_global_timer: Guard against division by zero (Martin Blumenstingl)
  - virtiofs: forbid newlines in tags (Stefan Hajnoczi)
  - drm/lima: set gp bus_stop bit before hard reset (Erico Nunes)
  - net/sun3_82586: Avoid reading past buffer in debug output (Kees Cook)
  - media: drivers/media/dvb-core: copy user arrays safely (Philipp Stanner)
  - fs: binfmt_elf_efpic: don't use missing interpreter's properties (Max Filippov)
  - media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil)
  - quota: Remove BUG_ON from dqget() (Jan Kara)
  - fuse: fix UAF in rcu pathwalks (Al Viro)
  - afs: fix __afs_break_callback() / afs_drop_open_mmap() race (Al Viro)
  - ext4: do not trim the group with corrupted block bitmap (Baokun Li)
  - nvmet-trace: avoid dereferencing pointer too early (Daniel Wagner)
  - powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (Kunwu Chan)
  - memory: tegra: Skip SID programming if SID registers aren't set (Ashish Mhetre)
  - arm64: Fix KASAN random tag seed initialization (Samuel Holland)
  - hwmon: (ltc2992) Avoid division by zero (Antoniu Miclaus)
  - IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock (Chengfeng Ye)
  - wifi: iwlwifi: fw: Fix debugfs command sending (Mukesh Sisodiya)
  - wifi: iwlwifi: abort scan when rfkill on but device enabled (Miri Korenblit)
  - gfs2: setattr_chown: Add missing initialization (Andreas Gruenbacher)
  - scsi: spi: Fix sshdr use (Mike Christie)
  - media: qcom: venus: fix incorrect return value (Hans Verkuil)
  - binfmt_misc: cleanup on filesystem umount (Christian Brauner)
  - staging: ks7010: disable bh on tx_dev_lock (Chengfeng Ye)
  - drm/amd/display: Validate hw_points_num before using it (Alex Hung)
  - staging: iio: resolver: ad2s1210: fix use before initialization (David Lechner)
  - media: radio-isa: use dev_name to fill in bus_info (Hans Verkuil)
  - i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer (Jarkko Nikula)
  - i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out (Jarkko Nikula)
  - s390/smp,mcck: fix early IPI handling (Heiko Carstens)
  - RDMA/rtrs: Fix the problem of variable not initialized fully (Zhu Yanjun)
  - i2c: riic: avoid potential division by zero (Wolfram Sang)
  - wifi: cw1200: Avoid processing an invalid TIM IE (Jeff Johnson)
  - wifi: mac80211: fix BA session teardown race (Johannes Berg)
  - wifi: cfg80211: check wiphy mutex is held for wdev mutex (Johannes Berg)
  - ssb: Fix division by zero issue in ssb_calc_clock_rate (Rand Deeb)
  - ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (Parsa Poorshikhian)
  - net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang) [Orabug: 37029097] {CVE-2024-44995}
  - net: hns3: fix wrong use of semaphore up (Jie Wang)
  - netfilter: nf_queue: drop packets with cloned unconfirmed conntracks (Florian Westphal)
  - netfilter: flowtable: initialise extack before use (Donald Hunter) [Orabug: 37070666] {CVE-2024-45018}
  - netfilter: allow ipv6 fragments to arrive on different devices (Tom Hughes)
  - mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size (Eugene Syromiatnikov)
  - mlxbf_gige: disable RX filters until RX path initialized (David Thompson)
  - net: dsa: vsc73xx: check busy flag in MDIO operations (Pawel Dembicki)
  - net: dsa: vsc73xx: use read_poll_timeout instead delay loop (Pawel Dembicki)
  - net: dsa: vsc73xx: pass value in phy_write operation (Pawel Dembicki)
  - net: axienet: Fix register defines comment description (Radhey Shyam Pandey)
  - atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter) [Orabug: 37029103] {CVE-2024-44998}
  - net/mlx5e: Correctly report errors for ethtool rx flows (Cosmin Ratiu)
  - igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (Faizal Rahim)
  - igc: remove I226 Qbv BaseTime restriction (Muhammad Husaini Zulkifli)
  - igc: Correct the launchtime offset (Muhammad Husaini Zulkifli)
  - s390/uv: Panic for set and remove shared access UVC errors (Claudio Imbrenda)
  - drm/amdgpu/jpeg2: properly set atomics vmid field (Alex Deucher)
  - memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [Orabug: 37070671] {CVE-2024-45021}
  - drm/amdgpu: Actually check flags for all context ops. (Bas Nieuwenhuizen)
  - btrfs: tree-checker: add dev extent item checks (Qu Wenruo)
  - selinux: fix potential counting error in avc_add_xperms_decision() (Zhen Lei)
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Al Viro) [Orabug: 37070679] {CVE-2024-45025}
  - bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin)
  - btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() (Alexander Lobakin)
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Alexander Lobakin)
  - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64() (Alexander Lobakin)
  - vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [Orabug: 37029118] {CVE-2024-45003}
  - dm persistent data: fix memory allocation failure (Mikulas Patocka)
  - dm resume: don't return EINVAL when signalled (Khazhismel Kumykov)
  - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE (Haibo Xu)
  - s390/dasd: fix error recovery leading to data corruption on ESE devices (Stefan Haberland) [Orabug: 37070686] {CVE-2024-45026}
  - thunderbolt: Mark XDomain as unplugged when router is removed (Mika Westerberg) [Orabug: 37070774] {CVE-2024-46702}
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Mathias Nyman) [Orabug: 37029124] {CVE-2024-45006}
  - ALSA: usb-audio: Support Yamaha P-125 quirk entry (Juan José Arboleda)
  - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (Lianqin Hu)
  - char: xillybus: Check USB endpoints when probing device (Eli Billauer) [Orabug: 37070649] {CVE-2024-45011}
  - char: xillybus: Refine workqueue handling (Eli Billauer)
  - char: xillybus: Don't destroy workqueue from work item running on it (Eli Billauer) [Orabug: 37029128] {CVE-2024-45007}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn) [Orabug: 37017950] {CVE-2024-44947}
  - LTS version: v5.15.165 (Vijayendra Suman)
  - Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" (Niklas Cassel)
  - media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" (Sean Young)
  - ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode (Michael Walle)
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Eric Dumazet) [Orabug: 36897690] {CVE-2024-42114}
  - binfmt_flat: Fix corruption when not offsetting data start (Kees Cook) [Orabug: 37029015] {CVE-2024-44966}
  - usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. (Chris Wulff)
  - nvme/pci: Add APST quirk for Lenovo N60z laptop (WangYuli)
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [Orabug: 36984016] {CVE-2024-43882}
  - arm64: cpufeature: Fix the visibility of compat hwcaps (Amit Daniel Kachhap)
  - arm64: dts: qcom: msm8996: correct #clock-cells for QMP PHY nodes (Dmitry Baryshkov)
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. (Mahesh Salgaonkar) [Orabug: 36897773] {CVE-2024-42126}
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [Orabug: 36953968] {CVE-2024-42259}
  - mptcp: fully established after ADD_ADDR echo on MPJ (Matthieu Baerts (NGI0))
  - wifi: mac80211: check basic rates validity (Johannes Berg)
  - PCI: dwc: Restore MSI Receiver mask during resume (Jisheng Zhang)
  - net: stmmac: Enable mac_managed_pm phylink config (Shenwei Wang)
  - netfilter: nf_tables: prefer nft_chain_validate (Florian Westphal) [Orabug: 36896845] {CVE-2024-41042}
  - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal)
  - netfilter: nf_tables: bail out if stateful expression provides no .clone (Pablo Neira Ayuso)
  - netfilter: nf_tables: set element extended ACK reporting support (Pablo Neira Ayuso)
  - tls: fix race between tx work scheduling and socket close (Jakub Kicinski) [Orabug: 36529710] {CVE-2024-26585}
  - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (Lukas Wunner) [Orabug: 36964228] {CVE-2024-42302}
  - btrfs: fix double inode unlock for direct IO sync writes (Filipe Manana) [Orabug: 37195039] {CVE-2024-43885}
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Christoph Hellwig) [Orabug: 36809257] {CVE-2024-39472}
  - btrfs: fix corruption after buffer fault in during direct IO append write (Filipe Manana)
  - selftests: mptcp: join: check backup support in signal endp (Matthieu Baerts (NGI0))
  - selftests: mptcp: join: validate backup in MPJ (Matthieu Baerts (NGI0))
  - mptcp: pm: fix backup support in signal endpoints (Matthieu Baerts (NGI0))
  - mptcp: export local_address (Geliang Tang)
  - mptcp: pm: only set request_bkup flag when sending MP_PRIO (Matthieu Baerts (NGI0))
  - mptcp: fix bad RCVPRUNED mib accounting (Paolo Abeni)
  - mptcp: mib: count MPJ with backup flag (Matthieu Baerts (NGI0))
  - mptcp: fix NL PM announced address accounting (Paolo Abeni)
  - mptcp: distinguish rcv vs sent backup flag in requests (Matthieu Baerts (NGI0))
  - mptcp: sched: check both directions for backup (Matthieu Baerts (NGI0))
  - drm/mgag200: Set DDC timeout in milliseconds (Thomas Zimmermann)
  - drm/bridge: analogix_dp: properly handle zero sized AUX transactions (Lucas Stach)
  - sched/smt: Fix unbalance sched_smt_present dec/inc (Yang Yingliang) [Orabug: 37028981] {CVE-2024-44958}
  - sched/smt: Introduce sched_smt_present_inc/dec() helper (Yang Yingliang)
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [Orabug: 37028935] {CVE-2024-44948}
  - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Waiman Long) [Orabug: 36992992] {CVE-2024-43889}
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [Orabug: 36992997] {CVE-2024-43890}
  - power: supply: axp288_charger: Round constant_charge_voltage writes down (Hans de Goede)
  - power: supply: axp288_charger: Fix constant_charge_voltage writes (Hans de Goede)
  - genirq/irqdesc: Honor caller provided affinity in alloc_desc() (Shay Drory)
  - irqchip/xilinx: Fix shift out of bounds (Radhey Shyam Pandey)
  - kcov: properly check for softirq context (Andrey Konovalov)
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [Orabug: 36993008] {CVE-2024-43893}
  - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() (Thomas Gleixner)
  - ntp: Safeguard against time_constant overflow (Justin Stitt)
  - irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' (Arseniy Krasnov)
  - irqchip/meson-gpio: support more than 8 channels gpio irq (Qianggui Song)
  - clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() (Paul E. McKenney)
  - clocksource: Scale the watchdog read retries automatically (Feng Tang)
  - torture: Enable clocksource watchdog with "tsc=watchdog" (Paul E. McKenney)
  - clocksource: Reduce the default clocksource_watchdog() retries to 2 (Waiman Long)
  - ntp: Clamp maxerror and esterror to operating range (Justin Stitt)
  - vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler (Jason Wang)
  - tick/broadcast: Move per CPU pointer access into the atomic section (Thomas Gleixner) [Orabug: 37195086] {CVE-2024-44968}
  - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic (Vamshi Gajjela)
  - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)
  - usb: gadget: u_serial: Set start_delayed during suspend (Prashanth K)
  - usb: gadget: core: Check for unset descriptor (Chris Wulff) [Orabug: 37028987] {CVE-2024-44960}
  - USB: serial: debug: do not echo input by default (Marek Marczykowski-Górecki)
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [Orabug: 36992970] {CVE-2024-43883}
  - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (Takashi Iwai)
  - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (Steven 'Steve' Kendall)
  - ALSA: line6: Fix racy access to midibuf (Takashi Iwai) [Orabug: 37028956] {CVE-2024-44954}
  - drm/client: fix null pointer dereference in drm_client_modeset_probe (Ma Ke) [Orabug: 36993013] {CVE-2024-43894}
  - ALSA: usb-audio: Re-add ScratchAmp quirk entries (Takashi Iwai)
  - spi: spi-fsl-lpspi: Fix scldiv calculation (Stefan Wahren)
  - kprobes: Fix to check symbol prefixes correctly (Masami Hiramatsu (Google))
  - bpf: kprobe: remove unused declaring of bpf_kprobe_override (Menglong Dong)
  - i2c: smbus: Send alert notifications to all devices if source not found (Guenter Roeck)
  - spi: spidev: Add missing spi_device_id for bh2228fv (Geert Uytterhoeven)
  - ASoC: codecs: wsa881x: Correct Soundwire ports mask (Krzysztof Kozlowski)
  - ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (Krzysztof Kozlowski)
  - i2c: smbus: Improve handling of stuck alerts (Guenter Roeck)
  - arm64: cputype: Add Cortex-A725 definitions (Mark Rutland)
  - arm64: cputype: Add Cortex-X1C definitions (Mark Rutland)
  - arm64: cputype: Add Cortex-X925 definitions (Mark Rutland)
  - arm64: cputype: Add Cortex-A720 definitions (Mark Rutland)
  - arm64: cputype: Add Cortex-X3 definitions (Mark Rutland)
  - arm64: cputype: Add Neoverse-V3 definitions (Mark Rutland)
  - arm64: cputype: Add Cortex-X4 definitions (Mark Rutland)
  - arm64: barrier: Restore spec_bar() macro (Mark Rutland)
  - arm64: Add Neoverse-V2 part (Besar Wicaksono)
  - arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space (James Morse)
  - ext4: fix wrong unit use in ext4_mb_find_by_goal (Kemeng Shi)
  - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime (Zheng Zucheng)
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)
  - profiling: remove profile=sleep support (Tetsuo Handa)
  - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington)
  - s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [Orabug: 37029019] {CVE-2024-44969}
  - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (Kemeng Shi)
  - ext4: fix uninitialized variable in ext4_inlinedir_to_tree (Xiaxi Shen)
  - media: uvcvideo: Fix the bandwdith quirk on USB 3.x (Michal Pecio)
  - media: uvcvideo: Ignore empty TS packets (Ricardo Ribalda)
  - drm/amd/display: Add null checker before passing variables (Alex Hung) [Orabug: 36993047] {CVE-2024-43902}
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (Ma Jun) [Orabug: 36993077] {CVE-2024-43907}
  - drm/amdgpu: Fix the null pointer dereference to ras_manager (Ma Jun) [Orabug: 36993083] {CVE-2024-43908}
  - drm/amdgpu/pm: Fix the null pointer dereference for smu7 (Ma Jun) [Orabug: 36993089] {CVE-2024-43909}
  - btrfs: fix bitmap leak when loading free space cache on duplicate entry (Filipe Manana)
  - wifi: nl80211: don't give key data to userspace (Johannes Berg)
  - udf: prevent integer overflow in udf_bitmap_free_blocks() (Roman Smirnov)
  - PCI: Add Edimax Vendor ID to pci_ids.h (FUJITA Tomonori)
  - selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT (Yonghong Song)
  - ACPI: SBS: manage alarm sysfs attribute through psy core (Thomas Weißschuh)
  - ACPI: battery: create alarm sysfs attribute atomically (Thomas Weißschuh)
  - clocksource/drivers/sh_cmt: Address race condition for clock events (Niklas Söderlund)
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [Orabug: 36993126] {CVE-2024-43914}
  - md: do not delete safemode_timer in mddev_suspend (Li Nan)
  - rcutorture: Fix rcu_torture_fwd_cb_cr() data race (Paul E. McKenney)
  - net: fec: Stop PPS on driver remove (Csókás, Bence)
  - l2tp: fix lockdep splat (James Chapman)
  - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (Joe Hattori) [Orabug: 37029031] {CVE-2024-44971}
  - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (Dmitry Antipov)
  - net: linkwatch: use system_unbound_wq (Eric Dumazet)
  - net: bridge: mcast: wait for previous gc cycles when removing port (Nikolay Aleksandrov) [Orabug: 36993143] {CVE-2024-44934}
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [Orabug: 36983958] {CVE-2024-43861}
  - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Kuniyuki Iwashima) [Orabug: 36993146] {CVE-2024-44935}
  - sctp: move hlist_node and hashent out of sctp_ep_common (Xin Long)
  - x86/mm: Fix pti_clone_entry_text() for i386 (Peter Zijlstra)
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [Orabug: 37029011] {CVE-2024-44965}
  - irqchip/mbigen: Fix mbigen node address layout (Yipeng Zou)
  - netfilter: ipset: Add list flush to cancel_gc (Alexander Maltsev)
  - mptcp: fix duplicate data handling (Paolo Abeni)
  - r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY (Heiner Kallweit)
  - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (Ma Ke)
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling (Zack Rusin) [Orabug: 36983964] {CVE-2024-43863}
  - Revert "ALSA: firewire-lib: operate for period elapse event in process context" (Edmund Raile)
  - Revert "ALSA: firewire-lib: obsolete workqueue for period update" (Edmund Raile)
  - ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G (Mavroudis Chatzilazaridis)
  - ALSA: usb-audio: Correct surround channels in UAC1 channel map (Takashi Iwai)
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (Al Viro) [Orabug: 36963807] {CVE-2024-42265}
  - HID: wacom: Modify pen IDs (Tatsunosuke Tobita)
  - platform/chrome: cros_ec_proto: Lock device when updating MKBP version (Patryk Duda)
  - power: supply: bq24190_charger: replace deprecated strncpy with strscpy (Justin Stitt)
  - riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() (Zhe Qiao) [Orabug: 36963814] {CVE-2024-42267}
  - ipv6: fix ndisc_is_useropt() handling for PIO (Maciej Żenczykowski)
  - net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (Shahar Shitrit)
  - net: mvpp2: Don't re-use loop iterator (Dan Carpenter)
  - net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [Orabug: 36964005] {CVE-2024-42271}
  - rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). (Kuniyuki Iwashima)
  - rtnetlink: enable alt_ifname for setlink/newlink (Florent Fourcot)
  - ALSA: hda: conexant: Fix headset auto detect fail in the polling mode (songxiebing)
  - drm/vmwgfx: Fix overlay when using Screen Targets (Ian Forbes)
  - drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [Orabug: 36983978] {CVE-2024-43867}
  - MIPS: dts: loongson: Fix ls2k1000-rtc interrupt (Jiaxun Yang)
  - MIPS: dts: loongson: Fix liointc IRQ polarity (Jiaxun Yang)
  - MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a (Jiaxun Yang)
  - MIPS: Loongson64: DTS: Add RTC support to Loongson-2K1000 (Binbin Zhou)
  - remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init (Aleksandr Mishin)
  - drm/dp_mst: Fix all mstb marked as not probed after suspend/resume (Wayne Lin)
  - irqchip/imx-irqsteer: Handle runtime power management correctly (Shenwei Wang) [Orabug: 36964084] {CVE-2024-42290}
  - irqchip/imx-irqsteer: Add runtime PM support (Lucas Stach)
  - irqchip/imx-irqsteer: Constify irq_chip struct (Lucas Stach)
  - irqdomain: Fixed unbalanced fwnode get and put (Herve Codina)
  - leds: triggers: Flush pending brightness before activating trigger (Thomas Weißschuh)
  - leds: trigger: Call synchronize_rcu() before calling trig->activate() (Hans de Goede)
  - leds: trigger: Store brightness set by led_trigger_event() (Heiner Kallweit)
  - leds: trigger: Remove unused function led_trigger_rename_static() (Heiner Kallweit)
  - leds: trigger: use RCU to protect the led_cdevs list (Johannes Berg)
  - drivers: soc: xilinx: check return status of get_api_version() (Jay Buddhabhatti)
  - soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver (Michael Tretter)
  - ext4: check the extent status again before inserting delalloc block (Zhang Yi)
  - ext4: factor out a common helper to query extent map (Zhang Yi)
  - ext4: convert to exclusive lock while inserting delalloc extents (Zhang Yi)
  - ext4: refactor ext4_da_map_blocks() (Zhang Yi)
  - ext4: make ext4_es_insert_extent() return void (Baokun Li)
  - sysctl: always initialize i_uid/i_gid (Thomas Weißschuh) [Orabug: 36964269] {CVE-2024-42312}
  - arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB (Krishna Kurapati)
  - arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB (Krishna Kurapati)
  - arm64: dts: qcom: msm8998: switch USB QMP PHY to new style of bindings (Dmitry Baryshkov)
  - arm64: dts: qcom: msm8998: drop USB PHY clock index (Johan Hovold)
  - arm64: dts: qcom: msm8996: Move '#clock-cells' to QMP PHY child node (Shawn Guo)
  - powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC (Esben Haabendal)
  - fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT (Seth Forshee (DigitalOcean))
  - nvme-pci: add missing condition check for existence of mapped data (Leon Romanovsky) [Orabug: 36964021] {CVE-2024-42276}
  - nvme: separate command prep and issue (Jens Axboe)
  - nvme: split command copy into a helper (Jens Axboe)
  - iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en (Artem Chernyshev) [Orabug: 36964025] {CVE-2024-42277}
  - ceph: fix incorrect kmalloc size of pagevec mempool (ethanwu)
  - ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable (Pierre-Louis Bossart)
  - spi: spidev: add correct compatible for Rohm BH2228FV (Conor Dooley)
  - spi: spidev: order compatibles alphabetically (Krzysztof Kozlowski)
  - spidev: Add Silicon Labs EM3581 device compatible (Vincent Tremblay)
  - spi: spidev: Replace OF specific code by device property API (Andy Shevchenko)
  - spi: spidev: Replace ACPI specific code by device_get_match_data() (Andy Shevchenko)
  - spi: spidev: Make probe to fail early if a spidev compatible is used (Javier Martinez Canillas)
  - lirc: rc_dev_get_from_fd(): fix file leak (Al Viro)
  - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (Al Viro)
  - apparmor: Fix null pointer deref when receiving skb during sock creation (Xiao Liang)
  - mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [Orabug: 36964031] {CVE-2024-42280}
  - bpf: Fix a segment issue when downgrading gso_size (Fred Li) [Orabug: 36964037] {CVE-2024-42281}
  - net: nexthop: Initialize all fields in dumped nexthops (Petr Machata) [Orabug: 36964043] {CVE-2024-42283}
  - net: stmmac: Correct byte order of perfect_match (Simon Horman)
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [Orabug: 36964046] {CVE-2024-42284}
  - netfilter: nft_set_pipapo_avx2: disable softinterrupts (Florian Westphal)
  - net: bonding: correctly annotate RCU in bond_should_notify_peers() (Johannes Berg)
  - ipv4: Fix incorrect source address in Record Route option (Ido Schimmel)
  - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later (Gregory CLEMENT)
  - bpf, events: Use prog to emit ksymbol event for main program (Hou Tao)
  - dma: fix call order in dmam_free_coherent (Lance Richardson) [Orabug: 36964522] {CVE-2024-43856}
  - libbpf: Fix no-args func prototype BTF dumping syntax (Andrii Nakryiko)
  - um: time-travel: fix signal blocking race/hang (Johannes Berg)
  - um: time-travel: fix time-travel-start option (Johannes Berg)
  - phy: cadence-torrent: Check return value on register read (Ma Ke)
  - dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels (Vignesh Raghavendra)
  - jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park) [Orabug: 36964529] {CVE-2024-43858}
  - kdb: address -Wformat-security warnings (Arnd Bergmann)
  - kernel: rerun task_work while freezing in get_signal() (Pavel Begunkov)
  - io_uring/io-wq: limit retrying worker initialisation (Pavel Begunkov)
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [Orabug: 36964202] {CVE-2024-42295}
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 (WangYuli)
  - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables (Hilda Wu)
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov)
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov)
  - drm/panfrost: Mark simple_ondemand governor as softdep (Dragan Simic)
  - MIPS: Loongson64: Test register availability before use (Jiaxun Yang)
  - MIPS: Loongson64: reset: Prioritise firmware service (Jiaxun Yang)
  - MIPS: Loongson64: Remove memory node for builtin-dtb (Jiaxun Yang)
  - MIPS: Loongson64: env: Hook up Loongsson-2K (Jiaxun Yang)
  - MIPS: dts: loongson: Fix GMAC phy node (Jiaxun Yang)
  - MIPS: ip30: ip30-console: Add missing include (Jiaxun Yang)
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [Orabug: 36964536] {CVE-2024-43860}
  - remoteproc: stm32_rproc: Fix mailbox interrupts queuing (Gwenael Treuveur)
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov)
  - selftests/sigaltstack: Fix ppc64 GCC build (Michael Ellerman)
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [Orabug: 36964053] {CVE-2024-42285}
  - platform: mips: cpu_hwmon: Disable driver on unsupported hardware (Jiaxun Yang)
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (Thomas Gleixner)
  - rtc: isl1208: Fix return value of nvmem callbacks (Joy Chakraborty)
  - drm/i915/dp: Reset intel_dp->link_trained before retraining the link (Imre Deak)
  - drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell (Alex Deucher)
  - drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 (Nitin Gote)
  - perf/x86/intel/pt: Fix a topa_entry base address calculation (Adrian Hunter)
  - perf/x86/intel/pt: Fix topa_entry base length (Marco Cavenati)
  - perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR (Kan Liang)
  - perf: Fix event leak upon exit (Frederic Weisbecker) [Orabug: 36983986] {CVE-2024-43870}
  - rtc: cmos: Fix return value of nvmem callbacks (Joy Chakraborty)
  - mm/numa_balancing: teach mpol_to_str about the balancing mode (Tvrtko Ursulin)
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [Orabug: 36983990] {CVE-2024-43871}
  - devres: Fix devm_krealloc() wasting memory (Zijun Hu)
  - gve: Fix an edge case for TSO skb validity check (Bailey Forrest)
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [Orabug: 37203371] {CVE-2024-42292}
  - kbuild: Fix '-S -c' in x86 stack protector scripts (Nathan Chancellor)
  - decompress_bunzip2: fix rare decompression failure (Ross Lagerwall)
  - ubi: eba: properly rollback inside self_check_eba (Fedor Pchelkin)
  - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use (Bastien Curutchet)
  - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed (Huacai Chen) [Orabug: 36964218] {CVE-2024-42299}
  - dev/parport: fix the array out-of-bounds risk (tuhaowen) [Orabug: 36964222] {CVE-2024-42301}
  - binder: fix hang of unregistered readers (Carlos Llamas)
  - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (Manivannan Sadhasivam)
  - PCI: dw-rockchip: Fix initial PERST# GPIO value (Niklas Cassel)
  - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (Wei Liu)
  - hwrng: amd - Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)
  - tools/memory-model: Fix bug in lock.cat (Alan Stern)
  - ALSA: usb-audio: Add a quirk for Sonix HD USB Camera (wangdicheng)
  - ALSA: usb-audio: Move HD Webcam quirk to the right place (Takashi Iwai)
  - ALSA: usb-audio: Fix microphone sound on HD webcam. (wangdicheng)
  - KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() (Sean Christopherson)
  - media: uvcvideo: Fix integer overflow calculating timestamp (Ricardo Ribalda)
  - jbd2: make jbd2_journal_get_max_txn_bufs() internal (Jan Kara)
  - leds: ss4200: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)
  - wifi: mwifiex: Fix interface type change (Rafael Beims)
  - selftests/landlock: Add cred_transfer test (Mickaël Salaün)
  - io_uring: tighten task exit cancellations (Pavel Begunkov)
  - ext4: make sure the first directory block is not a hole (Baokun Li) [Orabug: 36964231] {CVE-2024-42304}
  - ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [Orabug: 36964236] {CVE-2024-42305}
  - m68k: amiga: Turn off Warp1260 interrupts during boot (Paolo Pisati)
  - udf: Avoid using corrupted block bitmap buffer (Jan Kara) [Orabug: 36964241] {CVE-2024-42306}
  - task_work: Introduce task_work_cancel() again (Frederic Weisbecker)
  - task_work: s/task_work_cancel()/task_work_cancel_func()/ (Frederic Weisbecker)
  - apparmor: use kvfree_sensitive to free data->data (Fedor Pchelkin)
  - sched/fair: Use all little CPUs for CPU-bound workloads (Pierre Gondois)
  - drm/amd/display: Check for NULL pointer (Sung Joon Kim) [Orabug: 36964246] {CVE-2024-42308}
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [Orabug: 36964252] {CVE-2024-42309}
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [Orabug: 36964258] {CVE-2024-42310}
  - ext2: Verify bitmap and itable block numbers before using them (Jan Kara)
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [Orabug: 36964264] {CVE-2024-42311}
  - ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error (Igor Pylypiv)
  - media: venus: fix use after free in vdec_close (Dikshita Agarwal) [Orabug: 36964274] {CVE-2024-42313}
  - char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (Joe Hattori)
  - fuse: verify {g,u}id mount options correctly (Eric Sandeen)
  - sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks (Tejun Heo)
  - ipv6: take care of scope when choosing the src addr (Nicolas Dichtel)
  - af_packet: Handle outgoing VLAN packets without hardware offloading (Chengen Du)
  - net: netconsole: Disable target before netpoll cleanup (Breno Leitao)
  - tick/broadcast: Make takeover of broadcast hrtimer reliable (Yu Liao)
  - dt-bindings: thermal: correct thermal zone node name limit (Krzysztof Kozlowski)
  - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer (Tetsuo Handa)
  - mm/hugetlb: fix possible recursive locking detected warning (Miaohe Lin)
  - landlock: Don't lose track of restrictions on cred_transfer (Jann Horn) [Orabug: 36964283] {CVE-2024-42318}
  - fs/ntfs3: Missed error return (Konstantin Komarov)
  - rtc: interface: Add RTC offset to alarm after fix-up (Csókás, Bence)
  - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (Ryusuke Konishi)
  - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP (David Hildenbrand)
  - fs/ntfs3: Fix field-spanning write in INDEX_HDR (Konstantin Komarov)
  - fs/ntfs3: Replace inode_trylock with inode_lock (Konstantin Komarov)
  - pinctrl: freescale: mxs: Fix refcount of child (Peng Fan)
  - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)
  - pinctrl: ti: ti-iodelay: Drop if block with always false condition (Uwe Kleine-König)
  - pinctrl: single: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)
  - pinctrl: core: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)
  - pinctrl: rockchip: update rk3308 iomux routes (Dmitry Yashin)
  - fs/ntfs3: Fix getting file type (Konstantin Komarov)
  - fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting (Konstantin Komarov)
  - fs/ntfs3: Fix transform resident to nonresident for compressed files (Konstantin Komarov)
  - fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT (Konstantin Komarov)
  - fs/ntfs3: Use ALIGN kernel macro (Konstantin Komarov)
  - net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports (Martin Willi)
  - net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports (Martin Willi)
  - netfilter: nf_set_pipapo: fix initial map fill (Florian Westphal)
  - netfilter: nft_set_pipapo: constify lookup fn args where possible (Florian Westphal)
  - netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [Orabug: 37013754] {CVE-2024-44944}
  - bnxt_re: Fix imm_data endianness (Jack Wang)
  - RDMA/hns: Fix insufficient extend DB for VFs. (Chengchang Tang)
  - RDMA/hns: Fix undifined behavior caused by invalid max_sge (Chengchang Tang)
  - RDMA/hns: Fix missing pagesize and alignment check in FRMR (Chengchang Tang)
  - macintosh/therm_windtunnel: fix module unload. (Nick Bowler)
  - powerpc/xmon: Fix disassembly CPU feature checks (Michael Ellerman)
  - net: missing check virtio (Denis Arefev) [Orabug: 36964424] {CVE-2024-43817}
  - vhost/vsock: always initialize seqpacket_allow (Michael S. Tsirkin) [Orabug: 36983999] {CVE-2024-43873}
  - PCI: endpoint: Clean up error handling in vpci_scan_bus() (Dan Carpenter) [Orabug: 36984004] {CVE-2024-43875}
  - Input: elan_i2c - do not leave interrupt disabled on suspend failure (Dmitry Torokhov)
  - RDMA/device: Return error earlier if port in not valid (Leon Romanovsky)
  - mtd: make mtd_test.c a separate module (Arnd Bergmann)
  - ASoC: max98088: Check for clk_prepare_enable() error (Chen Ni)
  - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs (Honggang LI)
  - RDMA/mlx4: Fix truncated output warning in alias_GUID.c (Leon Romanovsky)
  - RDMA/mlx4: Fix truncated output warning in mad.c (Leon Romanovsky)
  - Input: qt1050 - handle CHIP_ID reading error (Andrei Lalaev)
  - RDMA/cache: Release GID table even if leak is detected (Leon Romanovsky)
  - RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE (Chiara Meiohas)
  - coresight: Fix ref leak when of_coresight_parse_endpoint() fails (James Clark)
  - clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock (Taniya Das)
  - clk: qcom: branch: Add helper functions for setting retain bits (Konrad Dybcio)
  - PCI: Fix resource double counting on remove & rescan (Ilpo Järvinen)
  - SUNRPC: Fixup gss_status tracepoint error output (Benjamin Coddington)
  - sparc64: Fix incorrect function signature and add prototype for prom_cif_init (Andreas Larsson)
  - ext4: avoid writing unitialized memory to disk in EA inodes (Jan Kara)
  - ext4: don't track ranges in fast_commit if inode has inlined data (Luis Henriques (SUSE))
  - ext4: return early for non-eligible fast_commit track events (Ritesh Harjani)
  - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Olga Kornievskaia)
  - SUNRPC: avoid soft lockup when transmitting UDP to reachable server. (NeilBrown)
  - xprtrdma: Fix rpcrdma_reqs_reset() (Chuck Lever)
  - mfd: omap-usb-tll: Use struct_size to allocate tll (Javier Carrasco)
  - mfd: rsmu: Split core code into separate module (Arnd Bergmann)
  - perf intel-pt: Fix exclude_guest setting (Adrian Hunter)
  - perf intel-pt: Fix aux_watermark calculation for 64-bit size (Adrian Hunter)
  - media: venus: flush all buffers in output plane streamoff (Dikshita Agarwal)
  - ext4: fix infinite loop when replaying fast_commit (Luis Henriques (SUSE))
  - Revert "leds: led-core: Fix refcount leak in of_led_get()" (Luca Ceresoli)
  - drm/qxl: Add check for drm_cvt_mode (Chen Ni) [Orabug: 36964455] {CVE-2024-43829}
  - drm/etnaviv: fix DMA direction handling for cached RW buffers (Lucas Stach)
  - perf report: Fix condition in sort__sym_cmp() (Namhyung Kim)
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [Orabug: 36964458] {CVE-2024-43830}
  - drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property (Hsiao Chien Sung)
  - drm/mediatek: Add missing plane settings when async update (Hsiao Chien Sung)
  - media: renesas: vsp1: Store RPF partition configuration per RPF instance (Laurent Pinchart)
  - media: renesas: vsp1: Fix _irqsave and _irq mix (Laurent Pinchart)
  - media: uvcvideo: Override default flags (Daniel Schaefer)
  - saa7134: Unchecked i2c_transfer function result fixed (Aleksandr Burakov)
  - media: i2c: Fix imx412 exposure control (Bryan O'Donoghue)
  - media: imon: Fix race getting ictx->lock (Ricardo Ribalda)
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (Zheng Yejian)
  - drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() (Douglas Anderson)
  - drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators (Douglas Anderson)
  - drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit (Friedrich Vock)
  - drm/amd/pm: Fix aldebaran pcie speed reporting (Lijo Lazar)
  - xdp: fix invalid wait context of page_pool_destroy() (Taehee Yoo) [Orabug: 36964469] {CVE-2024-43834}
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Amit Cohen)
  - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o (Alan Maguire)
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [Orabug: 36964479] {CVE-2024-43839}
  - bpf: annotate BTF show functions with __printf (Alan Maguire)
  - selftests/bpf: Close fd in error path in drop_on_reuseport (Geliang Tang)
  - locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers (John Stultz)
  - wifi: virt_wifi: don't use strlen() in const context (Johannes Berg)
  - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (Gaosheng Cui)
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID (En-Wei Wu) [Orabug: 36964486] {CVE-2024-43841}
  - perf: Fix default aux_watermark calculation (Adrian Hunter)
  - perf: Prevent passing zero nr_pages to rb_alloc_aux() (Adrian Hunter)
  - perf: Fix perf_aux_size() for greater-than 32-bit size (Adrian Hunter)
  - perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation (Adrian Hunter)
  - netfilter: nf_tables: rise cap on SELinux secmark context (Pablo Neira Ayuso)
  - libbpf: Checking the btf_type kind when fixing variable offsets (Donglin Peng)
  - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down (Csókás, Bence)
  - net: fec: Refactor: #define magic constants (Csókás Bence)
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [Orabug: 36984009] {CVE-2024-43879}
  - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (Baochen Qiang)
  - wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers (Baochen Qiang)
  - mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors (Ido Schimmel)
  - mlxsw: spectrum_acl_erp: Fix object nesting warning (Ido Schimmel) [Orabug: 36984012] {CVE-2024-43880}
  - lib: objagg: Fix general protection fault (Ido Schimmel) [Orabug: 36964494] {CVE-2024-43846}
  - selftests/bpf: Check length of recv in test_sockmap (Geliang Tang)
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Guangguan Wang)
  - tcp: fix races in tcp_v[46]_err() (Eric Dumazet)
  - tcp: fix race in tcp_write_err() (Eric Dumazet)
  - tcp: add tcp_done_with_error() helper (Eric Dumazet)
  - tcp: annotate lockless access to sk->sk_err (Eric Dumazet)
  - tcp: annotate lockless accesses to sk->sk_err_soft (Eric Dumazet)
  - net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP (Hagar Hemdan)
  - selftests/bpf: Fix prog numbers in test_sockmap (Geliang Tang)
  - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (Samasth Norway Ananda)
  - firmware: turris-mox-rwtm: Initialize completion before mailbox (Marek Behún)
  - firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (Marek Behún)
  - firmware: turris-mox-rwtm: Do not complete if there are no waiters (Marek Behún)
  - vmlinux.lds.h: catch .bss..L* sections into BSS") (Christophe Leroy)
  - ARM: spitz: fix GPIO assignment for backlight (Dmitry Torokhov)
  - ARM: pxa: spitz: use gpio descriptors for audio (Arnd Bergmann)
  - m68k: cmpxchg: Fix return value for default case in __arch_xchg() (Thorsten Blum)
  - x86/xen: Convert comma to semicolon (Chen Ni)
  - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages (Eero Tamminen)
  - arm64: dts: amlogic: gx: correct hdmi clocks (Jerome Brunet)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625 (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux (Rafał Miłecki)
  - arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property (Chen-Yu Tsai)
  - ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity (Michael Walle)
  - ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects (Michael Walle)
  - ARM: dts: imx6qdl-kontron-samx6i: fix board reset (Michael Walle)
  - ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset (Michael Walle)
  - ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node (Marco Felsch)
  - arm64: dts: rockchip: Increase VOP clk rate on RK3328 (Jonas Karlman)
  - soc: qcom: pdr: fix parsing of domains lists (Dmitry Baryshkov)
  - soc: qcom: pdr: protect locator_addr with the main mutex (Dmitry Baryshkov) [Orabug: 36964502] {CVE-2024-43849}
  - memory: fsl_ifc: Make FSL_IFC config visible and selectable (Esben Haabendal)
  - arm64: dts: qcom: msm8996: specify UFS core_clk frequencies (Dmitry Baryshkov)
  - soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers (Stephen Boyd)
  - arm64: dts: qcom: sm8250: add power-domain to UFS PHY (Dmitry Baryshkov)
  - arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings (Dmitry Baryshkov)
  - arm64: dts: qcom: sdm845: add power-domain to UFS PHY (Dmitry Baryshkov)
  - hwmon: (max6697) Fix swapped temp{1,8} critical alarms (Guenter Roeck)
  - hwmon: (max6697) Fix underflow when writing limit attributes (Guenter Roeck)
  - drm/meson: fix canvas release in bind function (Yao Zi)
  - pwm: stm32: Always do lazy disabling (Uwe Kleine-König)
  - hwmon: (adt7475) Fix default duty on fan is disabled (Wayne Tung)
  - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)
  - x86/pci/xen: Fix PCIBIOS_* return code handling (Ilpo Järvinen)
  - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling (Ilpo Järvinen)
  - x86/of: Return consistent error type from x86_of_pci_irq_enable() (Ilpo Järvinen)
  - hfsplus: fix to avoid false alarm of circular locking (Chao Yu)
  - block: initialize integrity buffer to zero before writing it to media (Christoph Hellwig) [Orabug: 36964514] {CVE-2024-43854}
  - block: cleanup bio_integrity_prep (Jinyoung Choi)
  - block: refactor to use helper (Nitesh Shetty)
  - platform/chrome: cros_ec_debugfs: fix wrong EC message version (Tzung-Bi Shih)
  - f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [Orabug: 36964212] {CVE-2024-42297}
  - f2fs: fix return value of f2fs_convert_inline_inode() (Chao Yu) [Orabug: 36964207] {CVE-2024-42296}
  - LTS version: v5.15.164 (Vijayendra Suman)
  - tap: add missing verification for short frame (Si-Wei Liu)   [Orabug: 36879156] {CVE-2024-41090}
  - tun: add missing verification for short frame (Dongli Zhang)   [Orabug: 36879156] {CVE-2024-41091}
  - wifi: rt2x00: use explicitly signed or unsigned types (Jason A. Donenfeld)
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn) [Orabug: 36874755] {CVE-2024-41012} {CVE-2024-41020}
  - ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused (Shengjiu Wang)
  - arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB (Krishna Kurapati)
  - arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB (Krishna Kurapati)
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (Seunghun Han)
  - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (Edson Juliano Drosdeck)
  - fs/ntfs3: Validate ff offset (lei lu) [Orabug: 36891672] {CVE-2024-41019}
  - jfs: don't walk off the end of ealist (lei lu) [Orabug: 36891666] {CVE-2024-41017}
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [Orabug: 36891654] {CVE-2024-41015}
  - Add gitignore file for samples/fanotify/ subdirectory (Linus Torvalds)
  - docs: Fix formatting of literal sections in fanotify docs (Gabriel Krisman Bertazi)
  - samples: Make fs-monitor depend on libc and headers (Gabriel Krisman Bertazi)
  - samples: Add fs error monitoring example (Gabriel Krisman Bertazi)
  - wifi: mac80211: disable softirqs for queued frame handling (Johannes Berg)
  - mm/damon/core: merge regions aggressively when max_nr_regions is unmet (SeongJae Park)
  - minmax: relax check to allow comparison between unsigned arguments and signed constants (David Laight)
  - minmax: allow comparisons of 'int' against 'unsigned char/short' (David Laight)
  - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (David Laight)
  - minmax: fix header inclusions (Andy Shevchenko)
  - minmax: clamp more efficiently by avoiding extra comparison (Jason A. Donenfeld)
  - minmax: sanity check constant bounds when clamping (Jason A. Donenfeld)
  - tracing: Define the is_signed_type() macro once (Bart Van Assche)
  - spi: mux: set ctlr->bits_per_word_mask (David Lechner)
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [Orabug: 36896968] {CVE-2024-41059}
  - selftests/vDSO: fix clang build errors and warnings (John Hubbard)
  - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices (Uwe Kleine-König)
  - riscv: stacktrace: fix usage of ftrace_graph_ret_addr() (Puranjay Mohan)
  - fs: better handle deep ancestor chains in is_subdir() (Christian Brauner)
  - drm/radeon: check bo_va->bo is non-NULL before using it (Pierre-Eric Pelloux-Prayer) [Orabug: 36896974] {CVE-2024-41060}
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [Orabug: 36896993] {CVE-2024-41063}
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (Xingui Yang)
  - powerpc/eeh: avoid possible crash when edev->pdev changes (Ganesh Goudar) [Orabug: 36897001] {CVE-2024-41064}
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Anjali K) [Orabug: 36897008] {CVE-2024-41065}
  - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (Yunshui Jiang)
  - net: usb: qmi_wwan: add Telit FN912 compositions (Daniele Palmas)
  - ALSA: dmaengine_pcm: terminate dmaengine before synchronize (Shengjiu Wang)
  - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx (Aivaz Latypov)
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana) [Orabug: 36897343] {CVE-2024-41078}
  - platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB (Armin Wolf)
  - platform/x86: lg-laptop: Change ACPI device id (Armin Wolf)
  - platform/x86: lg-laptop: Remove LGEX0815 hotkey handling (Armin Wolf)
  - platform/x86: wireless-hotkey: Add support for LG Airplane Button (Armin Wolf)
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [Orabug: 36897031] {CVE-2024-41068}
  - can: kvaser_usb: fix return value for hif_usb_send_regout (Chen Ni)
  - ASoC: ti: omap-hdmi: Fix too long driver name (Primoz Fiser)
  - ASoC: ti: davinci-mcasp: Set min period size using FIFO config (Jai Luthra)
  - ALSA: dmaengine: Synchronize dma channel after drop() (Jai Luthra)
  - bytcr_rt5640 : inverse jack detect for Archos 101 cesium (Thomas GENTY)
  - Input: i8042 - add Ayaneo Kun to i8042 quirk table (Tobias Jakobi)
  - Input: elantech - fix touchpad state on resume for Lenovo N24 (Jonathan Denose)
  - mips: fix compat_sys_lseek syscall (Arnd Bergmann)
  - ALSA: hda/realtek: Add more codec ID to no shutup pins list (Kailang Yang)
  - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency (Alexey Makhalov)
  - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (Michael Ellerman) [Orabug: 36897047] {CVE-2024-41070}
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [Orabug: 36897311] {CVE-2024-41072}
  - nvme: avoid double free special payload (Chunguang Xu) [Orabug: 36897316] {CVE-2024-41073}
  - mei: demote client disconnect warning on suspend to debug (Alexander Usyskin)
  - fs/file: fix the check in find_next_fd() (Yuntao Wang)
  - kconfig: remove wrong expr_trans_bool() (Masahiro Yamada)
  - kconfig: gconf: give a proper initial state to the Save button (Masahiro Yamada)
  - null_blk: fix validation of block size (Andreas Hindborg) [Orabug: 36897338] {CVE-2024-41077}
  - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (Wei Li)
  - ila: block BH in ila_output() (Eric Dumazet) [Orabug: 36897359] {CVE-2024-41081}
  - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() (Eric Dumazet)
  - Input: silead - Always support 10 fingers (Hans de Goede)
  - selftests/openat2: Fix build warnings on ppc64 (Michael Ellerman)
  - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (Dmitry Antipov)
  - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option (Ayala Beker)
  - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd (Yedidya Benshimol)
  - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup (Yedidya Benshimol)
  - wifi: mac80211: handle tasklet frames before stopping (Johannes Berg)
  - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (Nicolas Escande)
  - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs (Dhananjay Ugwekar)
  - ACPI: EC: Avoid returning AE_OK on errors in address space handler (Armin Wolf)
  - ACPI: EC: Abort address space access upon error (Armin Wolf)
  - scsi: qedf: Set qed_slowpath_params to zero before use (Saurav Kashyap)
  - scsi: qedf: Wait for stag work during unload (Saurav Kashyap)
  - scsi: qedf: Don't process stag work during unload and recovery (Saurav Kashyap)
  - scsi: core: alua: I/O errors for ALUA state transitions (Martin Wilck)
  - scsi: core: Fix a use-after-free (Bart Van Assche)
  - bpf: Fix overrunning reservations in ringbuf (Daniel Borkmann) [Orabug: 36850238] {CVE-2024-41009}
  - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (Kuan-Wei Chiu)
  - ARM: 9324/1: fix get_user() broken with veneer (Masahiro Yamada)
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [Orabug: 36874755] {CVE-2024-41012} {CVE-2024-41020}
  - gcc-plugins: Rename last_stmt() for GCC 14+ (Kees Cook)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-303.171.5.2.el9uek]
changelog:
  - build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock)  [Orabug: 37393454]  
  - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna)  [Orabug: 37384237]  
  - x86/pkeys: Change caller of update_pkru_in_sigframe() (Aruna Ramakrishna)  [Orabug: 37384237]  
  - Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" (Sherry Yang)  [Orabug: 37383283]


