Commit Graph

75501 Commits

Author SHA1 Message Date
Archana Polampalli
0c4e028627 go: fix CVE-2025-58185
Parsing a maliciously crafted DER payload could allocate large amounts of memory,
causing memory exhaustion.

(From OE-Core rev: f27acc863ee34b56e2c49dc96ad2b58fb35e2d46)

Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Peter Marko
604b1627ed curl: ignore CVE-2025-10966
Per [1] this CVE applies only when wolfssl backed is used.
8.17.0 removed WolfSSL support completely.

[1] https://curl.se/docs/CVE-2025-10966.html

(From OE-Core rev: 3de9b86c295c88005d4df53e5137bb09ea104ed0)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Philippe-Alexandre Mathieu
255271dfff bitbake: fetch2/wget: Keep query parameters in URL during checkstatus
When recreating the uri in wget's checkstatus method, we only use the
scheme, host and path. This completely strips the query parameters from
the final URI and potentially breaks the checking functionality for
URLs that require query parameters (such as the AZ fetcher with SAS
token).

This bug was resolved on master in
`096301250455e2a83bdd818a56317c62436c9981`.
This patch is adapted to the scarthgap branch.

CC: Steve Sakoman <steve@sakoman.com>
(Bitbake rev: 8dcf084522b9c66a6639b5f117f554fde9b6b45a)

Signed-off-by: Philippe-Alexandre Mathieu <pamathieu@poum.ca>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Bin Lan
324f29337b bitbake: bb/fetch2/__init__.py: remove a DeprecationWarning in uri_replace()
There is the following warning when executing to bitbake linux-yocto:
  bitbake/lib/bb/fetch2/__init__.py:464: DeprecationWarning: 'count' is passed as positional argument

This is because the 4th parameter of re.sub(pattern, repl, string, count=0, flags=0)
is a keyword parameter. We use keyword arguments for parameters that are not positional.

(Bitbake rev: c2a54aceab4c75cea6f8be16fe6d0caed12b32c4)

Signed-off-by: Bin Lan <bin.lan.cn@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Chris Laplante <chris.laplante@agilent.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-14 06:45:29 -08:00
Yannic Moog
b33a8abe77 perf: add arm64 source files for unistd_64.h
kernel commit bfb713ea53c7 ("perf tools: Fix arm64 build by generating unistd_64.h")
introduces a new dependency on source files for arm64, specifically
include/uapi/asm-generic.

Build fails with:
[..]/perf/1.0/perf-1.0/scripts/Makefile.asm-headers:33: [...]/perf/1.0/perf-1.0/include/uapi/asm-generic/Kbuild: No such file or directory
make[4]: *** No rule to make target '[...]/perf/1.0/perf-1.0/include/uapi/asm-generic/Kbuild'.  Stop.

Add the directory to PERF_SRC.
Fix whitespace error while at it.

(From OE-Core rev: 06d4981313ce67a8d53b1c14be9845b4b5a9f4cf)

Signed-off-by: Yannic Moog <y.moog@phytec.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:41 -08:00
Bastian Krause
4f2287dcc4 util-linux: fix pointer usage in hwclock param handling
Passing params as numbers to hwclock is broken in util-linux 2.39.3 due
to wrong pointer handling. So backport the fix from upstream included
since util-linux 2.41.

(From OE-Core rev: 3d8f88906f5560286462eaf55226b872e2805df7)

Signed-off-by: Bastian Krause <bst@pengutronix.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:41 -08:00
Michael Haener
a2b737539e Remove empty file
An error occurred in backport commit
649147913e89cd8f7390cb17cd0be94c9710ffa6. The test file
is empty and has no functionality at all.

(From OE-Core rev: 0539a7869c4a3e28b3e7d0ab93fe07bfb9462d13)

Signed-off-by: Michael Haener <michael.haener@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:41 -08:00
Peter Marko
9e31b2eb18 binutils: patch CVE-2025-11413
Pick commit per NVD CVE report.

Note that there were two patches for this, first [1] and then [2].
The second patch moved the original patch to different location.
Cherry-pick of second patch is successful leaving out the code removing
the code from first location, so the patch attached here is not
identical to the upstream commit but is identical to applying both and
merging them to a single patch.

[1] https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=1108620d7a521f1c85d2f629031ce0fbae14e331
[2] https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=72efdf166aa0ed72ecc69fc2349af6591a7a19c0

(From OE-Core rev: 98df728e6136d04af0f4922b7ffbeffb704de395)

(From OE-Core rev: b220cccdab44bc707d2c934a3ea81d20b67d14b0)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:41 -08:00
Peter Marko
ca2c8b88be binutils: patch CVE-2025-11412
Pick commit per NVD CVE report.

(From OE-Core rev: 6b94ff6c584a31d2b1e06d1e1dc19392d759b4b7)

(From OE-Core rev: fdbcbb0fe92a862a993108609eb4107e34eeeed2)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:41 -08:00
Peter Marko
ef4b31498d binutils: patch CVE-2025-11414
Pick commit per NVD CVE report.

(From OE-Core rev: cd7ce80fa1a99916aa2f93c4d9591c5496c3ef71)

(From OE-Core rev: ddb6453a751efb2c07b0866a1aace9d4adb55089)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:41 -08:00
Peter Marko
97f732ce9b wpa-supplicant: patch CVE-2025-24912
Pick patches as listed in NVD CVE report.

Note that Debian lists one of the patches as introducing the
vulnerability. This is against what the original report [1] says.
Also the commit messages provide hints that the first patch fixes this
issue and second is fixing problem with the first patch.

[1] https://jvn.jp/en/jp/JVN19358384/

(From OE-Core rev: a157719ab349d9393d5a640bb2e45fc2489d5338)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-07 06:54:40 -08:00
Antonin Godard
c4a4df3e72 ref-manual/classes.rst: document the relative_symlinks class
Added by commit e478550c8cd8 ("openssl/fontconfig/bzip2: Use relative
symlinks instead of absolute ones (using a new class)") in OE-Core.

(From yocto-docs rev: a8687e4bb2e822670b6ad110613a12fa02943d3d)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c0dc554eba7d421023ecc68a70b7a19df38628b0)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
7e77ef9016 ref-manual/classes.rst: gettext: extend the documentation of the class
Mention the use of USE_NLS, INHIBIT_DEFAULT_DEPS and the cross-canadian
class.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: b16f19e8004d571e7a6eadfa34983781ba6a7634)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d877e54f1c85cefc00dd674d60f2db81446bd95a)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
448d31c10b ref-manual/variables.rst: document the USE_NLS variable
Part of bitbake.conf, this variable allowing to enable or disable
translation was undocumented. Add a entry to the glossary.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 675b776390c8079deb8f1912dac44b574688a9c7)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 92a55345a56b5038c0344669daaa7a3a99dd0fc0)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
121ce25859 ref-manual/variables.rst: document the REQUIRED_IMAGE_FEATURES variable
Added by commit 96a9702a24a7 ("distro_features_check: expand with
IMAGE_FEATURES") in OE-Core.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 7c387b11c9844809a0f8debb5b21f5c0a0220d97)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 860ddbd491ee9db291868bd939392538a2c64a4b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
2cf19dbd79 ref-manual/variables.rst: document the REQUIRED_COMBINED_FEATURES variable
Added in OE-Core commit: 5f4875b950ce ("distro_features_check: expand
with MACHINE_FEATURES and COMBINED_FEATURES, rename").

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: b6dfa4af0bd0b7c8c2a642b377f8fbf7b24cc4e8)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit bbc7f26240c2db5cd4179f297ae49c778789514e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
f1125c2cf7 ref-manual/variables.rst: document the REQUIRED_MACHINE_FEATURES variable
Added in OE-Core commit: 5f4875b950ce ("distro_features_check: expand
with MACHINE_FEATURES and COMBINED_FEATURES, rename").

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: 5270b62a0a10169710be11561f1c2623f550f567)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit c0551456cba6016d5014c2be8d6906e58a324cc4)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
ef8c458f20 ref-manual/classes,variables: document the CCACHE_DISABLE variable
Can be used in recipes that want to explicitly skip Ccache support when
the ccache class is enabled.

Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de>
(From yocto-docs rev: e4fb6cd20955046a397b63bfe57f6cb4020b9cbb)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit b1b4adc8d4d9d23ff6fd91bca632bb0f5277e72b)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Robert P. J. Day
b0e19cc72f overview-manual/yp-intro.rst: update on-target packaging info
- drop references to obsolete tar packaging format
  - add references to apt and dpkg utilities for .deb packaging
  - add reference to alternative "dnf" .rpm packaging

(From yocto-docs rev: d1331418317576b569ea2b046adf46ec7af8a15a)

Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit d4374ac86ebe7980908ed905018ccfb773ac666e)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
João Marcos Costa
ba0fd17fa6 variables.rst: fix LAYERDEPENDS description
This variable does not apply to the scope of a single recipe, but rather
to the scope of the entire layer.

(From yocto-docs rev: a86f2e5d291b86dbf56aefab08f4d3b0e5529801)

Signed-off-by: João Marcos Costa <joaomarcos.costa@bootlin.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit eec26e11adb6e3a9c4f53f825b9a1730c9ddee12)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Paul Barker
88bdd0ed92 dev-manual, test-manual: Update autobuilder output links
The current autobuilder cluster is at valkyrie.yocto.io, published files
on autobuilder.yocto.io will be missing or out-of-date.

(From yocto-docs rev: b3b95e590248025d59a7cef311bb0abf207e72fb)

Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 9ed06c070e309b52f1dbf8877867dcede79f4cb6)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
059f795ebe ref-manual/classes.rst: extend the uninative class documentation
Extend the documentation of the uninative class based on [1].

[1]: https://lore.kernel.org/r/061e6150ce177221f7b6ee8754b03a20347a92c3.camel@linuxfoundation.org

Co-developed-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(From yocto-docs rev: 0193bfa7966f301e46253e25eaa0482aeb21d9d4)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 68996f0f3bf882714e8d96a0aa7b2492fe16d0c3)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Antonin Godard
9019056557 ref-manual/variables.rst: document UNINATIVE_URL/CHECKSUM
Document the UNINATIVE_URL and UNINATIVE_CHECKSUM variables.

(From yocto-docs rev: 6b2440465ed6d48b2ec504940dda9517db863796)

Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit 974fe4e1c5db65b462a382e089e016326e7b3f26)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Praveen Kumar
aabe690b3f bind: upgrade 9.18.33 -> 9.18.41
This upgrade fixes
CVE-2025-8677,CVE-2025-40778 and CVE-2025-40780.

Changelog
==========
https://downloads.isc.org/isc/bind9/9.18.41/doc/arm/html/changelog.html

(From OE-Core rev: 4cb834388759540ea5bf7265389b9f1b2e15333a)

Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Yogita Urade
2f480a8669 tiff: ignore CVE-2025-8961
This CVE is for the tool which is removed in v4.6.0 via [1] and
re-introduced again in v4.7.0 via [2].

[1] eab89a627f
[2] 9ab54a8580

(From OE-Core rev: 1ff4b39374a5b328069a928e7234c3397769dc6f)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Hongxu Jia
a769ae7a7d u-boot: fix CVE-2024-42040
Backport a patch [1] from upstrem to fix CVE-2024-42040 [2]

[1] 81e5708cc2
[2] https://nvd.nist.gov/vuln/detail/CVE-2024-42040

(From OE-Core rev: 5c086db3f44d44f31e90f95ccb429639a1ff481d)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Yash Shinde
f2b841423f binutils: fix CVE-2025-8225
CVE: CVE-2025-8225

It is possible with fuzzed files to have num_debug_info_entries zero
after allocating space for debug_information, leading to multiple
allocations.

* dwarf.c (process_debug_info): Don't test num_debug_info_entries
to determine whether debug_information has been allocated,
test alloc_num_debug_info_entries.

Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=e51fdff7d2e538c0e5accdd65649ac68e6e0ddd4]

(From OE-Core rev: 7feed679262025b8405488d064e2c546a3ed7a0c)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Yash Shinde
3574b5a9d1 binutils: fix CVE-2025-11081
CVE: CVE-2025-11081

Trying to dump .sframe in a PE file results in a segfault accessing
elf_section_data.

	* objdump (dump_sframe_section, dump_dwarf_section): Don't access
	elf_section_type without first checking the file is ELF.

PR 33406 SEGV in dump_dwarf_section
[https://sourceware.org/bugzilla/show_bug.cgi?id=33406]

Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commit;h=f87a66db645caf8cc0e6fc87b0c28c78a38af59b]

(From OE-Core rev: 6ed800208a56d69faf4a1b3458caa8d412f01b89)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
David Nyström
b45fdb365d lz4: fix CVE-2025-62813
Prevent attackers to cause a denial of service (application crash) or
possibly have unspecified other impact when the application processes
untrusted LZ4 frames. For example, LZ4F_createCDict_advanced in
lib/lz4frame.c mishandles NULL checks.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-62813

Upstream patch:
f64efec011

(From OE-Core rev: 0a63e3e120cc6958e2963a3ad510ec7c03f1adae)

Signed-off-by: David Nyström <david.nystrom@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Matthias Schiffer
4a784d7f74 curl: only set CA bundle in target build
In native/nativesdk builds, sysconfdir refers to a recipe sysroot
directory, which will disappear once the workdir is cleaned up, breaking
libcurl's HTTPS connections.

By simply not setting --with-ca-bundle at all in non-target builds, curl
defaults to the host system's CA certificates, which is desirable anyways
to allow builds in environments that require local CA certificates.

(From OE-Core rev: 4909a46e93ba774c960c3d3c277e2a669af3fea6)

(From OE-Core rev: 0f98fecda8a0436f760e6fd9f3b7eb510e5258b8)

Signed-off-by: Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Rasmus Villemoes
bd0c87a3ac iptables: remove /etc/ethertypes
When building an image including iptable built with the libnftnl
PACKAGECONFIG, one hits

Downloading file:.../oe-rootfs-repo/armv8a/libkmod2 * check_data_file_clashes: Package iptables wants to install file .../rootfs/etc/ethertypes
        But that file is already provided by package  * netbase

This used to be handled by
0003-Makefile.am-do-not-install-etc-ethertypes.patch, but that patch
got removed with the 1.8.9->1.8.10 upgrade (commit 4616ada82e70).

I think the rationale for dropping the patch was wrong; the commit log
talks about xtables.conf, which is indeed gone from upstream, but said
patch didn't change anything about xtables.conf, it did

-dist_conf_DATA        = etc/ethertypes etc/xtables.conf
+dist_conf_DATA        = etc/xtables.conf

However, instead of patching iptables to not install ethertypes, and
having to forward-port that patch, it is much simpler to just remove
the file in this do_install:append.

(From OE-Core rev: a970b6c927fb4c04473484f6e4b0a9853c8a5896)

Signed-off-by: Rasmus Villemoes <rasmus.villemoes@prevas.dk>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Uwe Kleine-König <u.kleine-koenig@baylibre.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Daniel Semkowicz
5ea0467919 gstreamer1.0-plugins-bad: fix buffer allocation fail for v4l2codecs
There is a bug in GStreamer 1.22 that prevents video playback when
some of the v4l2codecs are paired with sinks that do not support
GstVideoMeta. This is the case of the Qt 6.9 sink used by some
of the Qt components.

For example, when the v4l2codecs-vp8dec decoder is paired with
QMediaPlayer, video playback fails to start with the following error:

  WARN   videodecoder gstvideodecoder.c:4409:gst_video_decoder_negotiate_pool: Subclass failed to decide allocation
  ERROR  videodecoder gstvideodecoder.c:4635:gst_video_decoder_allocate_output_buffer: Failed to allocate the buffer..
  WARN   videodecoder gstvideodecoder.c:4409:gst_video_decoder_negotiate_pool: Subclass failed to decide allocation
  WARN  matroskademux matroska-demux.c:6131:gst_matroska_demux_loop: error: Internal data stream error.
  WARN  matroskademux matroska-demux.c:6131:gst_matroska_demux_loop: error: streaming stopped, reason not-negotiated (-4)

This problem is already fixed in GStreamer 1.24, so backport the fix.
This fixes the buffer allocation failure for H.264, H.265, and VP8.

CC: Steve Sakoman <steve@sakoman.com>
CC: Anuj Mittal <anuj.mittal@intel.com>
(From OE-Core rev: 1be0de000bb852f1acc9644c1cb702336d7fdd61)

Signed-off-by: Daniel Semkowicz <dse@thaumatec.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:02 -08:00
Martin Jansa
2a7d38f814 flex: fix build with gcc-15 on host
* fixes:
  http://errors.yoctoproject.org/Errors/Details/853017/

../../flex-2.6.4/src/../lib/malloc.c:6:12: warning: conflicting types for built-in function ‘malloc’; expected ‘void *(long unsigned int)’ [-Wbuiltin-declaration-mismatch]
    6 |      void *malloc ();
      |            ^~~~~~
../../flex-2.6.4/src/../lib/malloc.c:5:1: note: ‘malloc’ is declared in header ‘<stdlib.h>’
    4 |      #include <sys/types.h>
  +++ |+#include <stdlib.h>
    5 |
../../flex-2.6.4/src/../lib/malloc.c: In function ‘rpl_malloc’:
../../flex-2.6.4/src/../lib/malloc.c:16:15: error: too many arguments to function ‘malloc’; expected 0, have 1
   16 |        return malloc (n);
      |               ^~~~~~  ~
../../flex-2.6.4/src/../lib/malloc.c:6:12: note: declared here
    6 |      void *malloc ();
      |            ^~~~~~
make[2]: *** [Makefile:1431: ../lib/stage1flex-malloc.o] Error 1

(From OE-Core rev: c13635db898146de4935c8c1c5e61cd732fa694e)

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:01 -08:00
Soumya Sambu
4c457412c8 elfutils: Fix CVE-2025-1377
A vulnerability, which was classified as problematic, has been found in GNU elfutils
0.192. This issue affects the function gelf_getsymshndx of the file strip.c of the
component eu-strip. The manipulation leads to denial of service. The attack needs to
be approached locally. The exploit has been disclosed to the public and may be used.
The identifier of the patch is fbf1df9ca286de3323ae541973b08449f8d03aba. It is
recommended to apply a patch to fix this issue.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-1377

Upstream patch:
https://sourceware.org/git/?p=elfutils.git;a=fbf1df9ca286de3323ae541973b08449f8d03aba

(From OE-Core rev: ae89d0c2ca49c40429f787577d280b5886f42cc1)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:01 -08:00
Soumya Sambu
12f14af0bb elfutils: Fix CVE-2025-1376
A vulnerability classified as problematic was found in GNU elfutils 0.192. This
vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c
of the component eu-strip. The manipulation leads to denial of service. It is
possible to launch the attack on the local host. The complexity of an attack is
rather high. The exploitation appears to be difficult. The exploit has been
disclosed to the public and may be used. The name of the patch is
b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to
fix this issue.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-1376

Upstream patch:
https://sourceware.org/git/?p=elfutils.git;a=commit;h=b16f441cca0a4841050e3215a9f120a6d8aea918

(From OE-Core rev: 06e3cd0891f553b0ed036d9247dfa7c5ed814d78)

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:01 -08:00
Peter Marko
2421e79018 expat: patch CVE-2025-59375
Pick patch from PR mentioning this CVE [1]

It's a complex patch so I have checked diff of 2.6.4 and commit before
these patches landed. There were no changes in memory allocations.
Also version in scarthgap is still not that much different from current
upstream master.
Ptests pass.

Also picked one documentation commit  (-00) to resolve patch conflict.

Following conflicts were resolved manually:
* commit "mass-cppcheck.sh: Activate in-code suppression comments" was
  skipped as it only edited github actions not yet available in 2.6.4
* commit "lib: Implement tracking of dynamic memory allocations"
  ale had conflict in github actions not yet available in 2.6.4
* commit "fuzz: Be robust towards NULL return from XML_ExternalEntityParserCreate"
  edited file "expat/fuzz/xml_lpm_fuzzer.cpp" which is not present in
  our version yet. Since we're not using fuzzying, this is not needed.
* the final changelog commit needed lot conflict resolution actions

Finally picked PR fixing regression [2] together with two minor commits
to have a clean cherry-picks.
Also here the Changes commit needed conflict resolution.

[1] https://github.com/libexpat/libexpat/pull/1034
[2] https://github.com/libexpat/libexpat/pull/1048

(From OE-Core rev: 684d3cdbc08ce41dc1f92e1f228eee34bc2bc1fe)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:01 -08:00
Anders Heimer
251d8b676e libpam: mark CVE-2025-6018 as not applicable
CVE-2025-6018 is a local privilege escalation in PAM that requires
`user_readenv=1` to be enabled in the PAM configuration. The default
configuration does not enable reading user environment files (user_readenv
is 0 by default). Hence this vulnerability cannot be exploited using the
default configuration.

(From OE-Core rev: 3f2a9ad03326dc87681cf47ed5f73712ebaa624c)

Signed-off-by: Anders Heimer <anders.heimer@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-11-03 07:17:01 -08:00
Peter Marko
ad597f4a54 vulnerabilities: update nvdcve file name
The filename is outdated as its version was already bumped and there are
also different files for different feed choices.
Use glob to match any available file.

(From yocto-docs rev: 6cd7492bf83232744390f34e496367e94b63e701)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Lee Chee Yang
c760866299 migration-guides: add release notes for 4.0.30
(From yocto-docs rev: 3f21dfda982b57a4667824f3c873fddc91ee5f5e)

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
(cherry picked from commit e89c95b167c24cfb9c1d5d548a26872393ca2fee)
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Michael Haener
06cbccf616 oeqa/runtime/ping: don't bother trying to ping localhost
If SLIRP is being used instead of TAP for networking to the guest then
the target IP will be localhost.  There's no point in pinging localhost
to see if the target is up but whilst you'd think it is harmless, in
some containers ping doesn't actually have enough rights to work:

  ping: socktype: SOCK_RAW
  ping: socket: Operation not permitted
  ping: => missing cap_net_raw+p capability or setuid?

Look at the target address and if it's localhost or 127.0.0.* return
immediately.

(Backport from OE-Core rev: a06ef43d2a50e16c32bd6edbdc7b32c3528687d5)

(From OE-Core rev: 649147913e89cd8f7390cb17cd0be94c9710ffa6)

Signed-off-by: Michael Haener <michael.haener@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Carlos Alberto Lopez Perez
208a66a96b icu: Backport patch to fix build issues with long paths (>512 chars)
There is a bug libicu that causes libicu to be installed incorrectly when
the build system uses long paths (more than 512 chars).

This condition is not very difficult to trigger on a OE build system
due to the long paths an the deep of the directories that are usually
generated by default.
Also the bug is very subtle and won't be detected by the QA post-install
processes because what this bug causes is that a different version of
libicudata.so.X.Y (one without data) is installed instead of the one
containing the data, but there won't be any file missed on the installation
(just that it installed the wrong one).

See: https://unicode-org.atlassian.net/browse/ICU-22813

This patch backports the fix from upstream/main

(From OE-Core rev: 67d1352873957decacde30ff208fb7bb635b0c5d)

(From OE-Core rev: 0860992436092f7651e22e2b894f0d0a365a9bb0)

Signed-off-by: Carlos Alberto Lopez Perez <clopez@igalia.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Benjamin Hahn <B.Hahn@phytec.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Peter Marko
2e5bb26c2c python3: upgrade 3.12.11 -> 3.12.12
Drop upstreamed patch and refresh remaining patches.

Release information:
* https://www.python.org/downloads/release/python-31212/
* The release you're looking at is Python 3.12.12, a security bugfix
  release for the legacy 3.12 series.

Handles CVE-2025-59375.

(From OE-Core rev: f1234b8451ba843b5f9ec1d2066c21f54d6bc3b8)

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
dba2d4436d linux-yocto/6.6: update to v6.6.111
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    655054d2c3c1 Linux 6.6.111
    3d3abf3f7e8b KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
    284e67a93b8c net/9p: fix double req put in p9_fd_cancelled
    ab172f4f4262 crypto: rng - Ensure set_ent is always present
    f5f235be7612 riscv: mm: Do not restrict mmap address based on hint
    1602c9b4578a riscv: mm: Use hint address in mmap if available
    e242e52fdfe4 driver core/PM: Set power.no_callbacks along with power.no_pm
    e857421992ce staging: axis-fifo: flush RX FIFO on read errors
    a3c71d6c8332 staging: axis-fifo: fix TX handling on copy_from_user() failure
    6d953e9d3981 staging: axis-fifo: fix maximum TX packet length check
    bfeea103cad9 serial: stm32: allow selecting console when the driver is module
    cb7630e714d6 hid: fix I2C read buffer overflow in raw_event() for mcp2221
    dc4874366cf6 ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
    647410a7da46 ALSA: usb-audio: Kill timer properly at removal
    97e87f367c91 platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list
    bf28f5db40d5 can: rcar_canfd: Fix controller mode setting
    e93af787187e can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
    03510f5fce33 btrfs: ref-verify: handle damaged extent root tree
    bcccd0220751 ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue
    081f14b9a3eb perf subcmd: avoid crash in exclude_cmds when excludes is empty
    6d59f7467f83 platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list
    4b91d0c5781a dm-integrity: limit MAX_TAG_SIZE to 255
    7f7187118bb5 ASoC: amd: acp: Adjust pdm gain value
    8281c2a63bbc wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188
    96dc17ae64b1 USB: serial: option: add SIMCom 8230C compositions
    228d06c4cbfc media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
    71ed8b81a490 media: tuner: xc5000: Fix use-after-free in xc5000_release
    f82dc869220d media: tunner: xc5000: Refactor firmware load
    250b6e009ff9 KVM: arm64: Fix softirq masking in FPSIMD register saving sequence

(From OE-Core rev: 2a947cb13d0d46747f14aa6a1aa39a486459ee8a)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
787bcb1b6f linux-yocto/6.6: update to v6.6.110
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    e617101e5626 Linux 6.6.110
    70e1e5fe9f7e ASoC: qcom: audioreach: fix potential null pointer dereference
    f617d515d66c media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
    71da40648741 media: rc: fix races with imon_disconnect()
    bb10a9ddc8d6 media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
    f03aa5e39da7 scsi: target: target_core_configfs: Add length check to avoid buffer overflow
    e28d05370969 gcc-plugins: Remove TODO_verify_il for GCC >= 16
    5d646a763232 crypto: sha256 - fix crash at kexec

(From OE-Core rev: 42854520a9476ce5ac210097a5f6ce18ecc66c80)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
c4fd9fd38f linux-yocto/6.6: update to v6.6.109
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    f34f16e5c6323 Linux 6.6.109
    eb53056323f13 drm/i915/backlight: Return immediately when scale() finds invalid parameters
    4529bb0b6be3d minmax.h: remove some #defines that are only expanded once
    1a899044a0f5a minmax.h: simplify the variants of clamp()
    9955044f552b5 minmax.h: move all the clamp() definitions after the min/max() ones
    26c3d697becf3 minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()
    511e7d2e4d51f minmax.h: reduce the #define expansion of min(), max() and clamp()
    85d619594313e minmax.h: update some comments
    6012f69bf7495 minmax.h: add whitespace around operators and after commas
    46648b94e6ebb minmax: fix up min3() and max3() too
    f0be4c5dc213d minmax: improve macro expansion and type checking
    7194a302345da minmax: don't use max() in situations that want a C constant expression
    bb63c996c2db0 minmax: simplify min()/max()/clamp() implementation
    6183c6579356a minmax: make generic MIN() and MAX() macros available everywhere
    c0c83f4cd074b i40e: add validation for ring_len param
    6e4251690710d i40e: increase max descriptors for XL710
    7ea47a560a7a3 drm/ast: Use msleep instead of mdelay for edid read
    ed6fa21f68973 gpiolib: Extend software-node support to support secondary software-nodes
    457d2c5e112fd loop: Avoid updating block size under exclusive owner
    78f579cb7d825 mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
    e7a85efb873fa mm: migrate_device: use more folio in migrate_device_finalize()
    684a9a995748c ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB
    53888cd32a3f6 s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b
    09e3bda3a7ba2 fbcon: Fix OOB access in font allocation
    adac90bb1aaf4 fbcon: fix integer overflow in fbcon_do_set_font
    c9c2a51f91aea mm/hugetlb: fix folio is still mapped when deleted
    df1fa034c0fc2 kmsan: fix out-of-bounds access to shadow memory
    cab278cead49a afs: Fix potential null pointer dereference in afs_put_server
    58d304a89178d ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address
    3887f3814c0e7 tracing: dynevent: Add a missing lockdown check on dynevent
    8703940bd30b5 crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
    b769490521cf9 i40e: improve VF MAC filters accounting
    b247cdd04750e i40e: add mask to apply valid bits for itr_idx
    edecce7abd715 i40e: add max boundary check for VF filters
    e748f1ee493f8 i40e: fix validation of VF state in get resources
    3883e9702b6a4 i40e: fix input validation logic for action_meta
    2cc26dac0518d i40e: fix idx validation in config queues msg
    50a1e2f50f6c2 i40e: fix idx validation in i40e_validate_queue_map
    3cefd898b7aa1 HID: asus: add support for missing PX series fn keys
    ba7bcfd52c66d smb: client: fix wrong index reference in smb2_compound_op()
    348736955ed6c futex: Prevent use-after-free during requeue-PI
    6ffa6b5bc861a drm/gma500: Fix null dereference in hdmi teardown
    df2c071061ed5 octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
    7b209698e648b net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port
    816d30afbad52 net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup()
    a7a2b29c1ee44 net: dsa: lantiq_gswip: do also enable or disable cpu port
    be0bd592298f8 selftests: fib_nexthops: Fix creation of non-FDB nexthops
    24046d31f6f92 nexthop: Forbid FDB status change while nexthop is in a group
    31ae2fbc9fcb9 net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS
    98a76bd96f382 bnxt_en: correct offset handling for IPv6 destination address
    82a1463c968b1 vhost: Take a reference on the task in struct vhost_task.
    bcce99f613163 Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
    6a0070c5c3ad3 Bluetooth: hci_sync: Fix hci_resume_advertising_sync
    c957284701353 ethernet: rvu-af: Remove slash from the driver name
    17edec1830e48 can: peak_usb: fix shift-out-of-bounds issue
    3664ae91b26d1 can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
    2e423e1990f39 can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
    be1b25005fd0f can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
    cbc1de71766f3 can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
    0baf92d0b1590 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
    f64abeebf763c bpf: Reject bpf_timer for PREEMPT_RT
    865eec09b6e44 can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
    210b91bfe355b wifi: virt_wifi: Fix page fault on connect
    c5be7edd42602 smb: server: don't use delayed_work for post_recv_credits_work
    6017196aabf1d cpufreq: Initialize cpufreq-based invariance before subsys
    35bb271de241d ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients
    ebe7a2e46d189 arm64: dts: imx8mp: Correct thermal sensor index
    1744aff07b833 mm: folio_may_be_lru_cached() unless folio_test_large()
    d37ec803b2813 mm/gup: local lru_add_drain() to avoid lru_add_drain_all()
    768c44cc8b638 mm/gup: check ref_count instead of lru before migration
    dc58ab1eb90c9 mm: add folio_expected_ref_count() for reference count calculation
    4ed203f79821c mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked"
    df2580fbcedea IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
    943754ad81131 ALSA: usb-audio: Add mute TLV for playback volumes on more devices
    0aac2fa4d0c75 ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
    ea6016c9ec61d ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
    b61b90b07416f i2c: designware: Add quirk for Intel Xe
    41ea28a2de255 mmc: sdhci-cadence: add Mobileye eyeQ support
    306697a775fbc usb: core: Add 0x prefix to quirks debug output
    dc77154e83048 ALSA: usb-audio: Fix build with CONFIG_INPUT=n
    a3961b1f7f79e ALSA: usb-audio: Convert comma to semicolon
    d04d301614630 ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
    8fa69bd18148e ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
    9db2614986bd0 ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
    e8c605fece5b9 ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
    bafc648b82c3b ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
    08a96e22bd37f ALSA: usb-audio: Fix block comments in mixer_quirks
    18f9e77de5272 firewire: core: fix overlooked update of subsystem ABI version
    ca3e48e96816c scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE

(From OE-Core rev: 5234d795417f97cfce7bcd891e7bdeabc6f36e9e)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
623cf58e62 linux-yocto/6.6: update to v6.6.108
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

    147338df3487 Linux 6.6.108
    42a6aeb4b238 Revert "loop: Avoid updating block size under exclusive owner"
    06146c26f5cf minmax: add a few more MIN_T/MAX_T users
    af8b531ecfd4 minmax: simplify and clarify min_t()/max_t() implementation
    2d396aa8264d minmax: avoid overly complicated constant expressions in VM code
    532733ff82b9 mptcp: propagate shutdown to subflows when possible
    3ef938f6f0b3 rtc: pcf2127: fix SPI command byte for PCF2131 backport
    075abf0b1a95 iommu/amd/pgtbl: Fix possible race while increase page table level
    564f2312e2ff xhci: dbc: Fix full DbC transfer ring after several reconnects
    3c6dd29a460f xhci: dbc: decouple endpoint allocation from initialization
    27b04564f7a3 phy: ti: omap-usb2: fix device leak at unbind
    34a8d5a198bb phy: Use device_get_match_data()
    0ee0ef483aae selftests: mptcp: userspace pm: validate deny-join-id0 flag
    650150cc9a3e mptcp: pm: nl: announce deny-join-id0 flag
    a6157484bee3 vmxnet3: unregister xdp rxq info in the reset path
    e7b7a9387955 smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
    2374c11189ef crypto: af_alg - Set merge to zero early in af_alg_sendmsg
    6a075f80f303 drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
    15a77e1ab0a9 drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
    e6b0616a360f ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
    7740da20a3a0 ASoC: wm8974: Correct PLL rate rounding
    b4e8741955dc ASoC: wm8940: Correct typo in control name
    b7e4884dd853 ASoC: wm8940: Correct PLL rate rounding
    abc9f859a9ea io_uring: include dying ring in task_work "should cancel" state
    c8e69b783bc4 io_uring: backport io_should_terminate_tw()
    115e7d4d5ee8 ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
    0a3d5a4d4adc selftests: mptcp: avoid spurious errors on TCP disconnect
    9ef1af5d4040 selftests: mptcp: connect: catch IO errors on listen side
    666b49c848f1 rds: ib: Increment i_fastreg_wrs before bailing out
    689aee35ce67 net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
    7e4c3cd7f0a1 KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
    6584e7ecfa7d mmc: mvsdio: Fix dma_unmap_sg() nents value
    ac4e940dc7da ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
    411f7d4f7038 ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
    468bb23472b7 ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface
    fc7bd02dadb8 btrfs: tree-checker: fix the incorrect inode ref size check
    090b61b87420 iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
    561eef41aaa3 LoongArch: Check the return value when creating kobj
    2ff7ef2f71b4 LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
    fb6ee62d3082 LoongArch: Update help info of ARCH_STRICT_ALIGN
    90c0ffa1e0d9 power: supply: bq27xxx: restrict no-battery detection to bq27000
    84ac57c4bbfd power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
    7c4491b5644e crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
    ee74d69af170 nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
    d3cb3f209d35 ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
    eb0378dde086 ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
    d2cfefa14ce8 octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
    8eeb2091e72d cnic: Fix use-after-free bugs in cnic_delete_task
    cd093e8bdcfe net: liquidio: fix overflow in octeon_init_instr_queue()
    13f57d484676 Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
    4cefe5be7388 tls: make sure to abort the stream if headers are bogus
    dfd06131107e tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
    97d797c5fc6f bonding: don't set oif to bond dev when getting NS target destination
    2cb17c88edd3 net/mlx5e: Harden uplink netdev access against device unbind
    fd74bd40f1a4 net/mlx5e: Consider aggregated port speed during rate configuration
    a7f10a466d36 i40e: remove redundant memory barrier when cleaning Tx descs
    0255c5100470 net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
    af114ef225e5 selftests: mptcp: sockopt: fix error messages
    dedaa9bcf79c mptcp: tfo: record 'deny join id0' info
    36d9f72e5d66 mptcp: set remote_deny_join_id0 on SYN recv
    29a5fd482cd5 bonding: set random address only when slaves already exist
    ea53e6a47e14 qed: Don't collect too many protection override GRC elements
    2f4b68e7905e dpaa2-switch: fix buffer pool seeding for control traffic
    4f364023ddcf um: virtio_uml: Fix use-after-free after put_device in probe
    5d2c34ff78b8 btrfs: fix invalid extref key setup when replaying dentry
    4a1e3ec28e80 cgroup: split cgroup_destroy_wq into 3 workqueues
    9ba2b399dee2 pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
    eae22a2573a0 wifi: mac80211: fix incorrect type for ret
    93e063f15e17 wifi: mac80211: increase scan_ies_len for S1G
    0ffb49ba247c ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
    6085291a1a58 wifi: wilc1000: avoid buffer overflow in WID string configuration

(From OE-Core rev: 0b5c6e21160e54b3b571343d932614b23231e273)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
0eb11e9267 linux-yocto/6.6: update to v6.6.107
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    af1544b5d072 Linux 6.6.107
    f075a33ef204 x86: disable image size check for test builds
    23f24d0a538e drm/i915/power: fix size for for_each_set_bit() in abox iteration
    0a87bf8bd5d7 drm/amdgpu: fix a memory leak in fence cleanup when unloading
    d70b5910ca31 net: mdiobus: release reset_gpio in mdiobus_unregister_device()
    cce57cd8c5de ksmbd: fix null pointer dereference in alloc_preauth_hash()
    ce807c4c88d2 phy: ti-pipe3: fix device leak at unbind
    7c89ea3ab302 phy: tegra: xusb: fix device and OF node leak at probe
    221f6739369b dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate
    ebf6c7c908e5 dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
    e0727853992a usb: gadget: midi2: Fix MIDI2 IN EP max packet size
    a04b32b0ec1b usb: gadget: midi2: Fix missing UMP group attributes initialization
    bea1946b6919 USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
    26f296e4c497 xhci: fix memory leak regression when freeing xhci vdev devices depth first
    0d861bc0b5c4 RISC-V: Remove unnecessary include from compat.h
    156677ea10ba hrtimers: Unconditionally update target CPU base after offline timer migration
    b1fa39fb3026 hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
    6276a6b2c84e hrtimer: Remove unused function
    c504b5aaaaa5 regulator: sy7636a: fix lifecycle of power good gpio
    1baed10553fc dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
    df82c7901513 dmaengine: idxd: Fix double free in idxd_setup_wqs()
    f0e460925679 dmaengine: idxd: Fix refcount underflow on module unload
    0e95ee7f532b dmaengine: idxd: Remove improper idxd_free
    608c14c671a8 hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
    b072e32e0874 hsr: use rtnl lock when iterating over ports
    72dbae1f2f21 net: hsr: Add VLAN CTAG filter support
    64a58ae64da5 net: hsr: Add support for MC filtering at the slave device
    94b050726288 can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
    deedea599e87 can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails
    1e1adfffd3fe can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed
    23431998a377 i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
    ff00b2ed7c64 igb: fix link test skipping when interface is admin down
    e450b4966f72 docs: networking: can: change bcm_msg_head frames member to support flexible array
    e6867c0ae100 tunnels: reset the GSO metadata before reusing the skb
    5e84e18f6727 net: bridge: Bounce invalid boolopts
    fe78891f296a net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
    092e5703d400 Disable SLUB_TINY for build testing
    8a8f093e621c USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
    e88b7810b43e USB: serial: option: add Telit Cinterion FN990A w/audio compositions
    bb3498089f86 dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
    a0da801d3ea0 serial: sc16is7xx: fix bug in flow control levels init
    1e92afef6061 tty: hvc_console: Call hvc_kick in hvc_write unconditionally
    af253b1a5daa Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups"
    7bd41f9c96dd Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table
    27e126072ee0 Input: iqs7222 - avoid enabling unused interrupts
    854baafc00c4 kernfs: Fix UAF in polling when open file is released
    5de7b4141af1 cifs: fix pagecache leak when do writepages
    9f4b38ad41d6 mm/khugepaged: fix the address passed to notifier on testing young
    c95c22402b00 mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios
    394547b9113f btrfs: fix corruption reading compressed range when block size is smaller than page size
    a29f891d4f37 btrfs: use readahead_expand() on compressed extents
    7bb675c9f025 mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
    9fe0415156fb mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
    60d7a3d2b985 mm/damon/sysfs: fix use-after-free in state_show()
    23538cfbeed8 libceph: fix invalid accesses to ceph_connection_v1_info
    b97edd195442 mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
    252bc25d7aac mtd: nand: raw: atmel: Fix comment in timings preparation
    cfdde9197ecd drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages
    9adb902be26b drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time
    b2fbe0f9f80b drm/mediatek: fix potential OF node use-after-free
    6632845292a4 mm/damon/core: set quota->charged_from to jiffies at first charge window
    3d278e89c2ea mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
    8577ded2ee3d fuse: prevent overflow in copy_file_range return value
    01e1eba64860 fuse: check if copy_file_range() returns larger than requested size
    c50336dfcb24 mtd: rawnand: stm32_fmc2: fix ECC overwrite
    06d8ef8f8537 mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
    31dc1603aa43 net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups
    9d55370cc4e2 i2c: i801: Hide Intel Birch Stream SoC TCO WDT
    0709bc11b942 ocfs2: fix recursive semaphore deadlock in fiemap call
    8345a93b9bda mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN
    e69f61b8c08e compiler-clang.h: define __SANITIZE_*__ macros only when undefined
    deedce87471e Revert "SUNRPC: Don't allow waiting for exiting tasks"
    6f628d7dd8ac EDAC/altera: Delete an inappropriate dma_free_coherent() call
    2089d8a316f4 KVM: SVM: Set synthesized TSA CPUID flags
    2b8a1969cae5 rcu-tasks: Maintain real-time response in rcu_tasks_postscan()
    d89abc4fbee8 rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks
    4e86206b6967 rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks
    8be3d52101b0 proc: fix type confusion in pde_set_flags()
    66bcb04a441f tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
    449682e76f32 bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
    d660c8d8142e s390/cpum_cf: Deny all sampling events by counter PMU
    1262bda871da tracing: Silence warning when chunk allocation fails in trace_pid_write
    69d99a936f00 NFSv4/flexfiles: Fix layout merge mirror check.
    c288e4c39d21 NFSv4.2: Serialise O_DIRECT i/o and copy range
    9f2fdb18d0bf NFSv4.2: Serialise O_DIRECT i/o and clone range
    4089fd70a508 NFSv4.2: Serialise O_DIRECT i/o and fallocate()
    320a0954e2c8 NFS: Serialise O_DIRECT i/o and truncate()
    275d9fd06d96 fs/nfs/io: make nfs_start_io_*() killable
    06c26a679029 ftrace/samples: Fix function size computation
    f7ec68cc74d8 tracing: Fix tracing_marker may trigger page fault during preempt_disable
    781ec30354e6 NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
    b39234ede545 NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
    a022c9a46455 NFSv4: Don't clear capabilities that won't be reset
    9339b4e75a81 SUNRPC: call xs_sock_process_cmsg for all cmsg
    fd00ae04c5aa flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
    0214b96a6a63 ima: limit the number of ToMToU integrity violations
    905d43b8ad24 net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
    9da2a9d3ccd8 media: i2c: imx214: Fix link frequency validation
    817a962db3f3 NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs()
    913ff520714f nfsd: Fix a regression in nfsd_setattr()
    392260eb8e67 kasan: fix GCC mem-intrinsic prefix with sw tags
    d699575d00ff mm: introduce and use {pgd,p4d}_populate_kernel()
    3f8810b2d22d kunit: kasan_test: disable fortify string checker on kasan_strings() test

(From OE-Core rev: 4964bdf8bf8b4c889928478db3e0d901e748fe55)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
d78bf37c9c linux-yocto/6.6: update to v6.6.106
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    60a9e718726f Linux 6.6.106
    3b9e7e5c5298 x86/vmscape: Add old Intel CPUs to affected list
    1e1dc1f9edb9 x86/vmscape: Warn when STIBP is disabled with SMT
    a5d029f1152a x86/bugs: Move cpu_bugs_smt_update() down
    34e566704105 x86/vmscape: Enable the mitigation
    f866eef8d1c6 x86/vmscape: Add conditional IBPB mitigation
    813cb831439c x86/vmscape: Enumerate VMSCAPE bug
    9d1677060428 Documentation/hw-vuln: Add VMSCAPE documentation
    fe9731e10004 Linux 6.6.105
    be4e6a221467 spi: fsl-qspi: Fix double cleanup in probe error path
    054a444b4c17 dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
    b718de5904a6 cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo()
    d0b26a9f5742 cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE()
    a44d0904d673 cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo()
    524ee2606a30 riscv: use lw when reading int cpu in asm_per_cpu
    522ffe298627 mm: slub: avoid wake up kswapd in set_track_prepare
    ad2df864033e slub: Reflow ___slab_alloc()
    c866c40d07c4 tools: gpio: remove the include directory on make clean
    3c331f7fc5b6 tools: gpio: rm .*.cmd on make clean
    7e4f8e09d577 drm/amd/amdgpu: Fix missing error return on kzalloc failure
    718c248902dd drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c
    c9c4635a6d55 perf bpf-event: Fix use-after-free in synthesis
    85da7f36d9a0 drm/bridge: ti-sn65dsi86: fix REFCLK setting
    1a7d3947a5dd spi: spi-fsl-lpspi: Clear status register after disabling the module
    cd53048e7460 spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
    a339956545a5 spi: spi-fsl-lpspi: Set correct chip-select polarity bit
    a786ef5f693b spi: spi-fsl-lpspi: Fix transmissions when using CONT
    2313baff36d0 hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM
    8699358b6ac9 pcmcia: Add error handling for add_interval() in do_validate_mem()
    3ee8f5c8938f pcmcia: omap: Add missing check for platform_get_resource
    8d7ee56bf530 Revert "drm/amdgpu: Avoid extra evict-restore process."
    b9cf42a8f034 ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY
    5f46882be912 ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
    7d98166183d6 drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv
    2c6c9d319017 drm/mediatek: Fix using wrong drm private data to bind mediatek-drm
    13d0854e3538 drm/mediatek: Add crtc path enum for all_drm_priv array
    d5875a478b1b vmxnet3: update MTU after device quiesce
    5174ea81d6ca net: dsa: microchip: linearize skb for tail-tagging switches
    3b6a5df36604 net: dsa: microchip: update tag_ksz masks for KSZ9477 family
    16fea5067092 dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
    dd2b7abd0da3 ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
    7df63b5ddd07 ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
    47aba94a924c iio: pressure: mprls0025pa: use aligned_s64 for timestamp
    e791bf216c9e iio: light: opt3001: fix deadlock due to concurrent flag access
    91da53307391 iio: chemical: pms7003: use aligned_s64 for timestamp
    fb6a7c1da207 iio: imu: inv_mpu6050: align buffer for timestamp
    977849e8acd2 btrfs: adjust subpage bit start based on sectorsize
    b088ae4e4184 PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
    30d201ee3a37 thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold
    50ae352c1848 spi: fsl-qspi: use devm function instead of driver remove
    0ef7058b4dc6 mm/slub: avoid accessing metadata when pointer is invalid in object_err()
    ba0ccc1be52c nouveau: fix disabling the nonstall irq due to storm code
    033f09b647db cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
    83440514ef2a cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization
    86cade7791a2 cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller
    e7f4f16ff167 cpufreq: intel_pstate: Revise global turbo disable check
    de6b545bcdba Revert "spi: spi-cadence-quadspi: Fix pm runtime unbalance"
    94f7d9070382 Revert "spi: cadence-quadspi: fix cleanup of rx_chan on failure paths"
    f4f7cde70f59 net: pcs: rzn1-miic: Correct MODCTRL register offset
    50a84d5c8140 e1000e: fix heap overflow in e1000_set_eeprom
    1cfa5dd05847 cifs: prevent NULL pointer dereference in UTF16 conversion
    bb37252c9af1 batman-adv: fix OOB read/write in network-coding decode
    d96cc9a1b577 scsi: lpfc: Fix buffer free/clear order in deferred receive path
    abab31c377cb platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list
    350bfdd2841f drm/amdgpu: drop hw access in non-DC audio fini
    9e4293766e4f wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data()
    9df29aa5637d wifi: mwifiex: Initialize the chan_stats array to zero
    bc983b834354 soc: qcom: mdt_loader: Deal with zero e_shentsize
    698abcf08818 proc: fix missing pde_set_flags() for net proc files
    e9188f66e949 ocfs2: prevent release journal inode after journal shutdown
    f9b8d4dba8e7 sched: Fix sched_numa_find_nth_cpu() if mask offline
    6797a8b3f71b mm: move page table sync declarations to linux/pgtable.h
    26ff568f390a x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
    2ee32c4c4f63 pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
    50f2f392eb6e arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE
    90e9372ec0b0 ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()
    ad17940a6618 ALSA: usb-audio: Add mute TLV for playback volumes on some devices
    a4e366fbec8a phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
    9b035445b7c9 selftest: net: Fix weird setsockopt() in bind_bhash.c.
    85c1c86a67e0 ppp: fix memory leak in pad_compress_skb
    01d2690c09e6 net: atm: fix memory leak in atm_register_sysfs when device_register fail
    7d449b7a6c8e ax25: properly unshare skbs in ax25_kiss_rcv()
    5852cee1d8f6 mctp: return -ENOPROTOOPT for unknown getsockopt options
    7f8869586dd6 net/smc: Remove validation of reserved bits in CLC Decline message
    90ab05ed47c1 ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
    bee1e19cf1fa net: thunder_bgx: decrement cleanup index before use
    4535729550cf net: thunder_bgx: add a missing of_node_put
    e472f59d02c8 wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
    609f6debdff3 wifi: libertas: cap SSID len in lbs_associate()
    ccb839602a82 wifi: cw1200: cap SSID length in cw1200_do_join()
    61b80fbdc072 net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
    5d7b2d45770e wifi: ath11k: fix group data packet drops during rekey
    6bf934426760 wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay()
    38b86b0a37df wifi: ath11k: rename ath11k_start_vdev_delay()
    14ed9f84c7c0 wifi: ath11k: Introduce and use ath11k_sta_to_arsta()
    fb216d980fae i40e: Fix potential invalid access when MAC list is empty
    f18d9b3abf9c net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()
    668f4f6382c3 macsec: read MACSEC_SA_ATTR_PN with nla_get_uint
    1cf0b558cbb7 netlink: add variable-length / auto integers
    5430388a8111 net: macb: Fix tx_ptr_lock locking
    8d09b13789ba icmp: fix icmp_ndo_send address translation for reply direction
    1dda64fb3f5e mISDN: Fix memory leak in dsp_hwec_enable()
    9a4abe262df9 xirc2ps_cs: fix register access when enabling FullDuplex
    6077d16b5c0f Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
    bd75eba88e88 Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
    2acc8d3f0a3c netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
    50db11e2bbb6 netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
    f1150153c4e5 wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
    b7d08929178c wifi: cfg80211: fix use-after-free in cmp_bss()
    4a05520d12a7 arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC
    f7a48ef44576 arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM
    5b94a825945a tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"
    0383e172435f arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
    add1ecc8f3ad tee: fix NULL pointer dereference in tee_shm_put
    bf89b1f87c72 fs: writeback: fix use-after-free in __mark_inode_dirty()
    41e168db5942 Bluetooth: hci_sync: Avoid adding default advertising on startup
    703ea9e34f96 cpupower: Fix a bug where the -t option of the set subcommand was not working.
    2b21fd1cf77e drm/amd/display: Don't warn when missing DCE encoder caps
    235a4c0a8aaa cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN
    ee58a0a35378 LoongArch: Save LBT before FPU in setup_sigcontext()
    dc4a024b1990 btrfs: avoid load/store tearing races when checking if an inode was logged
    48545620ca8f btrfs: fix race between setting last_dir_index_offset and inode logging
    9f76a2e19baf btrfs: fix race between logging inode and checking if it was logged before
    7acfa07c585e bpf: Fix oob access in cgroup local storage
    dbd8ec2261b8 bpf: Move bpf map owner out of common struct
    8e573ac21fcd bpf: Move cgroup iterator helpers to bpf.h
    3eeefeb9d62d bpf: Add cookie object to bpf maps
    355bd0b51d2f Linux 6.6.104
    d3cc7476b89f xfs: do not propagate ENODATA disk errors into xattr code
    0699faf70413 Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS"
    6c9552de7f7e HID: mcp2221: Handle reads greater than 60 bytes
    5a809b34250c HID: mcp2221: Don't set bus speed on every transfer
    1b3ccc394807 net/mlx5: SF, Fix add port error handling
    ea687c003663 net: rose: fix a typo in rose_clear_routes()
    4e86e5ba325e drm/nouveau/disp: Always accept linear modifier
    1424f6132fc8 smb3 client: fix return code mapping of remap_file_range
    3c3321091733 net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
    4191ea1f0bb3 fs/smb: Fix inconsistent refcnt update
    4f43a6d376da dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted
    8911ec881cd7 Revert "drm/amdgpu: fix incorrect vm flags to map bo"
    e422370e6ab2 HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
    b9166ea27d0a HID: wacom: Add a new Art Pen 2
    88d3c2790c33 HID: logitech: Add ids for G PRO 2 LIGHTSPEED
    8783b2a0b740 HID: quirks: add support for Legion Go dual dinput modes
    d4e6e2680807 HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
    5f3c0839b173 HID: asus: fix UAF via HID_CLAIMED_INPUT validation
    c84ba4cdf4c6 x86/microcode/AMD: Handle the case of no BIOS microcode
    f49161646e03 KVM: x86: use array_index_nospec with indices that come from guest
    925599eba460 efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
    463aa96fca62 sctp: initialize more fields in sctp_v6_from_sk()
    9c547c8eee9d net: rose: include node references in rose_neigh refcount
    f8c29fc437d0 net: rose: convert 'use' field to refcount_t
    4998ab3eb2b8 net: rose: split remove and free operations in rose_remove_neigh()
    b0f8725196ae net: stmmac: Set CIC bit only for TX queues with COE
    dc38d0111c16 net: stmmac: xgmac: Correct supported speed modes
    d02d635fc03d net: stmmac: Rename phylink_get_caps() callback to update_caps()
    ce006b60fc49 net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
    9b0acd3bb291 net/mlx5e: Set local Xoff after FW update
    dec9d873bdf7 net/mlx5e: Update and set Xon/Xoff upon port speed set
    cdd96ed12524 net/mlx5e: Update and set Xon/Xoff upon MTU set
    3e07c623fbc5 net/mlx5: Nack sync reset when SFs are present
    a623e80aaa85 net/mlx5: Convert SF port_indices xarray to function_ids xarray
    a7e9da4d3afb net/mlx5: Use devlink port pointer to get the pointer of container SF struct
    25659835c7af net/mlx5: Call mlx5_sf_id_erase() once in mlx5_sf_dealloc()
    ddac9d0fe249 net/mlx5: Fix lockdep assertion on sync reset unload event
    8da591ae2614 net/mlx5: Add support for sync reset using hot reset
    6292688e07d0 net/mlx5: Add device cap for supporting hot reset in sync reset flow
    09fd27c8621e net/mlx5: Reload auxiliary drivers on fw_activate
    7acefa4c66aa phy: mscc: Fix when PTP clock is register and unregister
    b3c70f6fc258 net: dlink: fix multicast stats being counted incorrectly
    589edd3dc8fb dt-bindings: display/msm: qcom,mdp5: drop lut clock
    dc70ea942fcd ice: fix incorrect counter for buffer allocation failures
    05fc7307e352 ice: stop storing XDP verdict within ice_rx_buf
    29bcd31ace16 ice: gather page_count()'s of each frag right before XDP prog call
    40a9f217cde1 ice: Introduce ice_xdp_buff
    4de399767ddc drm/nouveau: remove unused memory target test
    32a498445641 drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
    3c80c230d6e3 atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
    4bd2866db002 Bluetooth: hci_sync: fix set_local_name race condition
    961abec8184a Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
    f356ed87c78c Bluetooth: hci_event: Mark connection as closed during suspend disconnect
    4c549d87f016 Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success
    430786612abe HID: input: report battery status changes immediately
    61d733a568d8 HID: input: rename hidinput_set_battery_charge_status()
    e7d0bd359f4c powerpc/kvm: Fix ifdef to remove build warning
    6de90c2a3b6c drm/msm: Defer fd_install in SUBMIT ioctl
    a208d67cb44b net: ipv4: fix regression in local-broadcast routes
    9b2700151660 vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
    181feb41f0b2 NFS: Fix a race when updating an existing write
    9a1963404cc2 nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
    b15342e09644 ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list
    612527136e0c erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC
    8f8e6a781783 ASoC: codecs: tx-macro: correct tx_macro_component_drv name
    24b9ed739c8c smb: client: fix race with concurrent opens in rename(2)
    bc1427a48371 smb: client: fix race with concurrent opens in unlink(2)
    43662b846c7a scsi: core: sysfs: Correct sysfs attributes access rights
    28c8fb7ae2ad ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
    9e0743eb6dcf of: dynamic: Fix use after free in of_changeset_add_prop_helper()
    749137b41e70 of: Add a helper to free property struct
    d3be2b8cff6f mips: lantiq: xway: sysctrl: rename the etop node
    e877b861dab9 mips: dts: lantiq: danube: add missing burst length property
    6e59b8483e6e pinctrl: STMFX: add missing HAS_IOMEM dependency
    43e3118c677a of: dynamic: Fix memleak when of_pci_add_properties() failed

(From OE-Core rev: 212df1778245f7b299b549285ea0994234e163fa)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
7b08b57feb linux-yocto/6.6: update to v6.6.103
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    cc1a1c5b404a Linux 6.6.103
    40b36d9a612b alloc_fdtable(): change calling conventions.
    a0a3ace2a578 netfilter: nf_reject: don't leak dst refcount for loopback packets
    c1aa819059b8 s390/hypfs: Enable limited access during lockdown
    972d84075e3b s390/hypfs: Avoid unnecessary ioctl registration in debugfs
    81a0f002e4fd ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
    7d67d591ecb0 net/mlx5e: Preserve shared buffer capacity during headroom updates
    dacf1ca11735 net/mlx5: Base ECVF devlink port attrs from 0
    c71a3e2b02e7 Octeontx2-af: Skip overlap check for SPI field
    2919ca876e15 bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
    45b70352d186 bonding: Add independent control state machine
    f0c7885ef8d3 bonding: update LACP activity flag after setting lacp_active
    ca88ac44368c net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
    aa12ee1c1bd2 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
    ee7134481ff7 igc: fix disabling L1.2 PCI-E link substate on I226 on init
    d10f670b6f86 ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
    5189c0b7c251 LoongArch: Optimize module load time by optimizing PLT/GOT counting
    070b4af44c4b net/smc: fix UAF on smcsk after smc_listen_out()
    ba51d73408ed gve: prevent ethtool ops after shutdown
    748da8083122 net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
    3a4eeea79a46 phy: mscc: Fix timestamping for vsc8584
    ca18d751bcc9 ppp: fix race conditions in ppp_fill_forward_path
    06a7acd45a8f net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
    87f78799e358 ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
    2156d9e9f2e4 net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
    857b8387a977 drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
    b79027f7ebb7 ALSA: usb-audio: Fix size validation in convert_chmap_v3()
    f93032e5d68f drm/hisilicon/hibmc: fix the hibmc loaded failed bug
    e50599adc966 mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
    469c45c8a16a Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
    ae1d9779f089 Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
    8f80c633cba1 iommu/amd: Avoid stack buffer overflow from kernel cmdline
    f5ad0819f902 scsi: qla4xxx: Prevent a potential error pointer dereference
    96476b043efb net: bridge: fix soft lockup in br_multicast_query_expired()
    7aee3d519d63 RDMA/bnxt_re: Fix to initialize the PBL array
    5d3f018fc09a RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
    7b044e925aba RDMA/bnxt_re: Fix to do SRQ armena by default
    acf0dea8dc90 RDMA/erdma: Fix ignored return value of init_kernel_qp
    76588276fcf8 iosys-map: Fix undefined behavior in iosys_map_clear()
    34c3bc762bc4 cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
    72553fe19317 drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
    ad994eda5d95 spi: spi-fsl-lpspi: Clamp too high speed_hz
    7207923d8453 x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
    4986548825fe usb: typec: maxim_contaminant: disable low power mode when reading comparator values
    f56e75b85b54 usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean
    e600de541c37 usb: xhci: Fix slot_id resource race conflict
    8d2b63fbfd4d iio: imu: inv_icm42600: change invalid data error to -EBUSY
    0af5812acfac iio: imu: inv_icm42600: Convert to uXX and sXX integer types
    ec3310a5168b iio: imu: inv_icm42600: use = { } instead of memset()
    f52d8ba43259 iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64
    f13768b9b829 iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
    99b508340d0d iio: light: as73211: Ensure buffer holes are zeroed
    58ff8064cb4c tracing: Limit access to parser->buffer when trace_get_user failed
    648e01a023cb tracing: Remove unneeded goto out logic
    c09dd3773b59 tls: fix handling of zero-length records on the rx_list
    93879b3ba967 powerpc/boot: Fix build with gcc 15
    5c67f7e4330e mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
    03695cdfcb5e compiler: remove __ADDRESSABLE_ASM{_STR,}() again
    fa833df2ba9e drm/amd/display: Don't overclock DCE 6 by 15%
    7660124e6506 usb: dwc3: pci: add support for the Intel Wildcat Lake
    84c95dbf5bec usb: dwc3: Remove WARN_ON for device endpoint command timeouts
    319aba29a486 usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
    dbfaa79103b4 USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
    bf29c9618160 usb: storage: realtek_cr: Use correct byte order for bcs->Residue
    adfdc6ed189b USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
    cd3bace9c9a3 usb: renesas-xhci: Fix External ROM access timeouts
    3b4a57b5cc3b usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
    d84f6e77ebe3 comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
    0eb4ed2aa261 comedi: pcl726: Prevent invalid irq number
    842f307a1d11 comedi: Make insn_rw_emulate_bits() do insn->n samples
    decaa5401cb4 usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
    20729b825914 cdx: Fix off-by-one error in cdx_rpmsg_probe()
    4de009fc0a3a most: core: Drop device reference after usage in get_channel()
    bc4e3186a2e2 iio: proximity: isl29501: fix buffered read on big-endian systems
    6a605d307b02 iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
    3b114a3282ab ftrace: Also allocate and copy hash for reading of filter files
    bb912a20fab0 fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
    65e46aeaf84a drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
    d404824f3d25 cpuidle: governors: menu: Avoid selecting states with too much latency
    3a92598c3e55 cpuidle: menu: Remove iowait influence
    f0aa8591ba0c mmc: sdhci-pci-gli: Add a new function to simplify the code
    1eae029f79b6 mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values
    fd269466abe6 selftests: mptcp: pm: check flush doesn't reset limits
    a9cf4362d4d0 mptcp: disable add_addr retransmission when timeout is 0
    ebe3d8cf1ee6 mptcp: remove duplicate sk_reset_timer call
    1982e18bbcc1 use uniform permission checks for all mount propagation changes
    c5aa6ba11273 fs/buffer: fix use-after-free when call bh_read() helper
    212eb86f75b4 smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
    740ccba37a12 arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
    342f7a1dda77 ext4: preserve SB_I_VERSION on remount
    047b4cb30e42 scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
    c065c8d20dd0 scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
    6d53b2a134da scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
    0c3333f7bfee PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features
    d0252e69b932 PCI: imx6: Delay link start until configfs 'start' written
    cee067ef2055 PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
    7b688b365ace PCI: rockchip: Use standard PCIe definitions
    72ff3acf0044 soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
    ef2f64dff281 drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
    a98aa702c74f drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
    e95f4fd56f6c drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
    5b011264c5da drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
    36a6b43573d1 drm/amd/display: Avoid a NULL pointer dereference
    86c2825791c3 s390/sclp: Fix SCCB present check
    50db1ab0f3ec ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
    0a1385336970 mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
    63962ff932ef mm/debug_vm_pgtable: clear page table entries at destroy_args()
    8d03bce0dcb2 squashfs: fix memory leak in squashfs_fill_super
    92c9689646c8 mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
    0207d8faa1fb memstick: Fix deadlock by moving removing flag earlier
    28b82be094e2 KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
    d1446050a29a sched/fair: Fix frequency selection for non-invariant case
    858e035ea448 topology: Set capacity_freq_ref in all cases
    68df021d3cfa arm64/amu: Use capacity_ref_freq() to set AMU ratio
    cf4faefd3a7b cpufreq/cppc: Set the frequency used for computing the capacity
    11da2b1ae4c9 energy_model: Use a fixed reference frequency
    6688eb926932 cpufreq/schedutil: Use a fixed reference frequency
    9771732ab39c cpufreq: Use the fixed and coherent frequency for scaling capacity
    46db6d4797f1 sched/topology: Add a new arch_scale_freq_ref() method
    0ed2068de1f9 kbuild: userprogs: use correct linker when mixing clang and GNU ld
    5b7912d83962 ata: libata-scsi: Return aborted command when missing sense and result TF
    9e9b1fa7ecaa PM: runtime: Take active children into account in pm_runtime_get_if_in_use()
    ac2e62cab097 PM: runtime: Simplify pm_runtime_get_if_active() usage
    c0f179c1547f ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
    dc35f594b0d2 usb: dwc3: imx8mp: fix device leak at unbind
    1636b5e9c354 mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
    365771ee3dc8 wifi: mac80211: check basic rates validity in sta_link_apply_parameters
    b59bea60396c KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
    65b6b10fc005 s390/mm: Remove possible false-positive warning in pte_free_defer()
    0852c97fec9c btrfs: send: make fs_path_len() inline and constify its argument
    8f3aae5fd76d btrfs: send: use fallocate for hole punching with send stream v2
    f942e47453a8 btrfs: send: avoid path allocation for the current inode when issuing commands
    dbda681a0a93 btrfs: send: keep the current inode's path cached
    ffc19fe2a7ad btrfs: send: add and use helper to rename current inode when processing refs
    bfed58ed10f1 btrfs: send: only use boolean variables at process_recorded_refs()
    253557254f8d btrfs: send: factor out common logic when sending xattrs
    b1947464c041 btrfs: populate otime when logging an inode item
    d7badc2ba4da btrfs: constify more pointer parameters
    9dfdea89ceb3 btrfs: fix ssd_spread overallocation
    9c64d6b07cbb btrfs: open code timespec64 in struct btrfs_inode
    8f85af32692d xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
    4734255ef39b btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
    467dcf7e4a61 btrfs: always abort transaction on failure to add block group to free space tree
    8c5bf13905f3 btrfs: move transaction aborts to the error site in add_block_group_free_space()
    b172535ccba1 btrfs: qgroup: fix race between quota disable and quota rescan ioctl
    d6f1a6c2f567 btrfs: don't ignore inode missing when replaying log tree
    a779d1dd7f2d usb: typec: fusb302: cache PD RX state
    827f7b4fe051 PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
    80617b3926b6 block: Make REQ_OP_ZONE_FINISH a write operation
    6c77d4e0f6ad block: reject invalid operation in submit_bio_noacct
    3bbd52a413fc fscrypt: Don't use problematic non-inline crypto engines
    c8a1e1f02921 leds: flash: leds-qcom-flash: Fix registry access after re-bind
    71230248a711 leds: flash: leds-qcom-flash: Limit LED current based on thermal condition
    84a24fb446ee net/sched: ets: use old 'nbands' while purging unused classes
    81505f137b3a net_sched: sch_ets: implement lockless ets_dump()
    00dc616e6cb5 smb: client: fix netns refcount leak after net_passive changes
    2668e038800b net: better track kernel sockets lifetime
    ac90037bf398 net: Add net_passive_inc() and net_passive_dec().
    5dd481868eb1 selftests/memfd: add test for mapping write-sealed memfd read-only
    2e4179698f84 mm: reinstate ability to map write-sealed memfd mappings read-only
    87a75f68eaba mm: update memfd seal write check to include F_SEAL_WRITE
    17c5d49beb6c mm: drop the assumption that VM_SHARED always implies writable
    440d36847a12 mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
    253b7d8bafe6 mptcp: drop skb if MPTCP skb extension allocation fails
    cf0a88124e35 ACPI: pfr_update: Fix the driver update version check
    3ddd55cf19ed ipv6: sr: Fix MAC comparison to be constant-time
    b117c41b0090 net, hsr: reject HSR frame if skb can't hold tag
    3afdeb96dc5f drm/amd/display: Don't overwrite dce60_clk_mgr
    39f187cbf7ed drm/amd/display: Add primary plane to commits for correct VRR handling
    74ee7445c3b6 drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
    627f30a328f2 drm/amdgpu: update mmhub 3.0.1 client id mappings
    a3201e3b7cf1 drm/amdgpu: Avoid extra evict-restore process.
    0e7f5f9aa498 drm/amd: Restore cached power limit during resume
    002860142ceb media: venus: venc: Clamp param smaller than 1fps and bigger than 240
    f866778583b6 media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
    f54be97bc69b media: venus: protect against spurious interrupts during probe
    041015a46597 media: venus: hfi: explicitly release IRQ during teardown
    ba567c2e52fb media: venus: Add a check for packet size after reading from shared memory
    03c0e00ccf59 media: qcom: camss: cleanup media device allocated resource on error path
    3c0e4cc4f55f media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
    61f267b77dbc media: ov2659: Fix memory leaks in ov2659_probe()
    1c2769dc8025 media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
    3d83d0b5ae50 media: usbtv: Lock resolution while streaming
    ecb7382089bc media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
    b3433cffee8d media: verisilicon: Fix AV1 decoder clock frequency
    6a41dc143e3c media: vivid: fix wrong pixel_array control size
    8ad57bd4a952 media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
    c231d1964878 media: hi556: correct the test pattern configuration
    0148fcdd9140 media: gspca: Add bounds checking to firmware parser
    85bfcb0e40fe parisc: Update comments in make_insert_tlb
    9827b2b0c64e parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
    8bccf47adbf6 parisc: Revise gateway LWS calls to probe user read access
    4c981077255a parisc: Revise __get_user() to probe user read access
    d6ac1e11c4a0 parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
    033605fb20a3 parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
    69cf90e5aa50 parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
    0199adb6d1f2 parisc: Define and use set_pte_at()
    b334724f6b31 parisc: Check region is readable by user in raw_copy_from_user()
    fe0886c98b63 soc/tegra: pmc: Ensure power-domains are in a known state
    41f40038de62 jbd2: prevent softlockup in jbd2_log_do_checkpoint()
    92ef491b506a f2fs: fix to avoid out-of-boundary access in dnode page
    5d109edb38c9 phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence
    adb482170045 vhost/vsock: Avoid allocating arbitrarily-sized SKBs
    ee438c492b2e vsock/virtio: Validate length in packet header before skb_put()
    6ee4578274d1 PCI: endpoint: Fix configfs group removal on driver teardown
    0758862386f1 PCI: endpoint: Fix configfs group list head handling
    d1f59c792c6f mtd: rawnand: renesas: Add missing check after DMA map
    fcb12d1e4163 mtd: rawnand: fsmc: Add missing check after DMA map
    9de4819feef9 mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
    b9e9afc35a89 mtd: spi-nor: Fix spi_nor_try_unlock_all()
    749ccc175ca5 hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
    747977aeefd4 pwm: mediatek: Fix duty and period setting
    070236488cc9 pwm: mediatek: Handle hardware enable and clock enable separately
    cbf3815d8c11 pwm: imx-tpm: Reset counter if CMOD is 0
    aa48271f7bef wifi: ath11k: fix dest ring-buffer corruption when ring is full
    ee3c10c9738b wifi: ath11k: fix source ring-buffer corruption
    069819aa84d2 wifi: ath11k: fix dest ring-buffer corruption
    daa2b66fa569 wifi: ath12k: fix dest ring-buffer corruption when ring is full
    bfd4918b2b9b wifi: ath12k: fix source ring-buffer corruption
    b5b6201a2b75 wifi: ath12k: fix dest ring-buffer corruption
    97e07460ba85 wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
    296bcff76d41 iio: adc: ad_sigma_delta: change to buffer predisable
    50e823a23816 iio: imu: bno055: fix OOB access of hw_xlate array
    e22e5ac22736 zynq_fpga: use sgtable-based scatterlist wrappers
    981c845f2983 soc: qcom: mdt_loader: Ensure we don't read past the ELF header
    bfa87a2cafb5 ata: libata-scsi: Fix CDL control
    6f5d34088250 scsi: ufs: ufs-pci: Fix default runtime and system PM levels
    03d559670ccd scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
    8247c4269acb ata: libata-scsi: Fix ata_to_sense_error() status handling
    728abc895294 scsi: mpi3mr: Fix race between config read submit and interrupt completion
    78f1d313442c dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
    c4adc491a326 dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
    745c9b114eaf arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
    d1aca165c1f1 arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
    06c3fda2bda8 arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
    2fdddc181262 btrfs: zoned: fix write time activation failure for metadata block group
    5fc0345e1af3 ext4: fix hole length calculation overflow in non-extent inodes
    e0bb195aea7a ext4: use kmalloc_array() for array space allocation
    173270d9fe86 ext4: don't try to clear the orphan_present feature block device is r/o
    d387cee49cfe ext4: fix reserved gdt blocks handling in fsmap
    052cd20d8d75 ext4: fix fsmap end of range reporting with bigalloc
    ab1cc862e55e ext4: check fast symlink for ea_inode correctly
    d0570a5b9ccc tracing: fprobe-event: Sanitize wildcard for fprobe event name
    d9e157fcfebc ksmbd: extend the connection limiting mechanism to support IPv6
    a1d2bab4d533 ksmbd: fix refcount leak causing resource not released
    820949bbf33f Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
    5858448a6c65 crypto: qat - flush misc workqueue during device shutdown
    fd2844179567 crypto: qat - lower priority for skcipher and aead algorithms
    ea95d4e8a263 lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
    c82ad93be639 vt: defkeymap: Map keycodes above 127 to K_HOLE
    c0942ce38843 vt: keyboard: Don't process Unicode characters in K_OFF mode
    5e17429679a8 bus: mhi: host: Detect events pointing to unexpected TREs
    38de63c2876e bus: mhi: host: Fix endianness of BHI vector table
    e192ebb7521c usb: dwc3: meson-g12a: fix device leaks at unbind
    d52ad077933f usb: musb: omap2430: fix device leak at unbind
    21c400de1079 usb: gadget: udc: renesas_usb3: fix device leak at unbind
    295425f52052 usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
    e06e9ef1912c m68k: Fix lost column on framebuffer debug console
    b4b21367cb9c platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
    1bf5cc1edb37 cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
    cb7b3633ed74 serial: 8250: fix panic due to PSLVERR
    2328010117d0 rcu: Fix racy re-initialization of irq_work causing hangs
    049874a185aa HID: apple: avoid setting up battery timer for devices without battery
    05a40e70ff5a HID: magicmouse: avoid setting up battery timer when not needed
    5661fdd218c2 RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
    b9669bedc63d tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
    fdd1c9f78c24 media: uvcvideo: Do not mark valid metadata as invalid
    8f274e2b05fd media: venus: Fix OOB read due to missing payload bound check
    a97e062e4ff3 media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
    1da95d3d4b7b mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
    e21a3ddd5873 mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
    74fb3b1b335b parisc: Makefile: fix a typo in palo.conf
    2a70cbd1aef8 hv_netvsc: Fix panic during namespace deletion with VF
    27b118aebdd8 fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
    f83d4c81bda3 btrfs: do not allow relocation of partially dropped subvolumes
    77e07f7226f4 btrfs: zoned: do not select metadata BG as finish target
    6b801da8e146 btrfs: fix log tree replay failure due to file with 0 links and extents
    a002525b2fd7 btrfs: clear dirty status from extent buffer on error at insert_new_root()
    99e36ff41a74 btrfs: zoned: do not remove unwritten non-data block group
    e02bdb223399 btrfs: abort transaction during log replay if walk_log_tree() failed
    ec5bfcfb6e0d btrfs: zoned: use filesystem size not disk size for reclaim decision
    9dfe40cb6c2c cdc-acm: fix race between initial clearing halt and open
    729ac69a3e81 thunderbolt: Fix copy+paste error in match_service_id()
    5c4a2ffcbd05 comedi: fix race between polling and detaching
    e613904fa419 usb: typec: ucsi: Update power_supply on power role change
    ca9fb654f89b misc: rtsx: usb: Ensure mmc child device is active when card is present
    5badd56c711e usb: core: config: Prevent OOB read in SS endpoint companion parsing
    492207cf8372 ext4: fix largest free orders lists corruption on mb_optimize_scan switch
    88d02c333989 ext4: fix zombie groups in average fragment size lists
    d19b817540c0 iommufd: Prevent ALIGN() overflow
    2ccccb0e4178 iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range
    a11b6ee7cab8 iommu/arm-smmu-qcom: Add SM6115 MDSS compatible
    7e0c0664e9aa cifs: reset iface weights when we cannot find a candidate
    1b6310d14b13 drm/amdgpu: fix incorrect vm flags to map bo
    3fbc2e43ab12 ASoC: fsl_sai: replace regmap_write with regmap_update_bits
    8270fbcc1ec4 scsi: lpfc: Remove redundant assignment to avoid memory leak
    063fe9b16be1 rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
    24334f3cf8a2 pNFS: Fix uninited ptr deref in block/scsi layout
    198f26c55779 pNFS: Handle RPC size limit for layoutcommits
    2c5b079bcb31 pNFS: Fix disk addr range check in block/scsi layout
    cf949a960653 pNFS: Fix stripe mapping in block/scsi layout
    3b9d69f0e68a block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
    1df5970cd93d ASoC: Intel: avs: Fix uninitialized pointer error in probe()
    f2e480950d1c net: phy: smsc: add proper reset flags for LAN8710A
    6b93ab1ad84a ipmi: Fix strcpy source and destination the same
    9da4d5c3ea6b kconfig: lxdialog: fix 'space' to (de)select options
    44337363300f kconfig: gconf: fix potential memory leak in renderer_edited()
    e55c6f052032 kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
    933992c60c07 ipmi: Use dev_warn_ratelimited() for incorrect message warnings
    2e07a9fe5117 vfio/mlx5: fix possible overflow in tracking max message size
    48d7bdd8759c scsi: aacraid: Stop using PCI_IRQ_AFFINITY
    0787a522cc9c scsi: target: core: Generate correct identifiers for PR OUT transport IDs
    a40c4af8083d scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
    28d64271510e kconfig: nconf: Ensure null termination where strncpy is used
    106ab3cd026f vfio/type1: conditional rescheduling while pinning
    98b7b47cebe3 kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
    b45134f72642 f2fs: check the generic conditions first
    868f23286c1a exfat: add cluster chain loop check for dir
    6af18148675f i2c: Force DLL0945 touchpad i2c freq to 100khz
    f8c001884bb4 apparmor: use the condition in AA_BUG_FMT even with debug disabled
    dd45d42ab290 dm-table: fix checking for rq stackable devices
    f4133dc2b93d dm-mpath: don't print the "loaded" message if registering fails
    cf4a40ad2116 i3c: master: Initialize ret in i3c_i2c_notifier_call()
    4e24a6a42d91 i3c: don't fail if GETHDRCAP is unsupported
    2e487c0fdeb9 apparmor: shift ouid when mediating hard links in userns
    ef8814a9d64a rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
    6e3733fe88a0 i3c: add missing include to internal header
    6dd90afb3945 module: Prevent silent truncation of module name in delete_module(2)
    d386c8e4e587 md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
    b0cab3d9c70d soundwire: Move handle_nested_irq outside of sdw_dev_lock
    1e3697578567 soundwire: amd: serialize amd manager resume sequence during pm_prepare
    d2974cfd4fa6 crypto: octeontx2 - add timeout for load_fvc completion poll
    ae5a0993f1e4 media: uvcvideo: Fix bandwidth issue for Alcor camera
    6bbaec6a0369 media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
    09906650484a media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
    77ac2addb1dc media: usb: hdpvr: disable zero-length read messages
    1512ced62c87 media: tc358743: Increase FIFO trigger level to 374
    9b023149b97a media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
    5c809ef89e1b media: tc358743: Check I2C succeeded during probe
    815cb5818eef pinctrl: stm32: Manage irq affinity settings
    67bca5b04313 scsi: mpi3mr: Correctly handle ATA device errors
    80726da54c29 scsi: mpt3sas: Correctly handle ATA device errors
    924226822419 power: supply: qcom_battmgr: Add lithium-polymer entry
    7925dd68807c scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
    8c449e588d81 RDMA/core: reduce stack using in nldev_stat_get_doit()
    89fdac333a17 RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
    773612b1edf3 dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs
    01c412e31d98 leds: leds-lp50xx: Handle reg to get correct multi_index
    07cba8891f2c media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
    f54eacb5b7f8 MIPS: lantiq: falcon: sysctrl: fix request memory check logic
    f22de2027b20 MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
    9021924d8893 crypto: jitter - fix intermediary handling
    173cfd741ad7 jfs: upper bound check of tree index in dbAllocAG
    78989af5bbf5 jfs: Regular file corruption check
    34d8e982bac4 jfs: truncate good inode pages when hard link is 0
    39cfe2c83146 scsi: bfa: Double-free fix
    2b98d2c23317 watchdog: iTCO_wdt: Report error if timeout configuration fails
    7fe9533fb069 MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
    6caa737a77a5 clk: qcom: ipq5018: keep XO clock always on
    16e245176777 hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state
    d202efb10a4b watchdog: dw_wdt: Fix default timeout
    478bd3bc4e7f fs/orangefs: use snprintf() instead of sprintf()
    66a373f50b42 scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
    4db46a83d817 phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal
    41368857a354 mfd: axp20x: Set explicit ID for AXP313 regulator
    6c9e12fef997 clk: tegra: periph: Fix error handling and resolve unsigned compare warning
    d960f4b79391 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
    de6af003239a crypto: hisilicon/hpre - fix dma unmap sequence
    cbe740de32bb fbdev: fix potential buffer overflow in do_register_framebuffer()
    6daa13c20190 cifs: Fix calling CIFSFindFirst() for root path without msearch
    74e7af8334c9 watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
    3a5236c610e2 drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported
    8708914f05ec drm/amd/display: Only finalize atomic_obj if it was initialized
    110822d339a0 vhost: fail early when __vhost_add_used() fails
    c2bdb45f366a vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
    bc9ef9783c6b net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
    e7a375453cca rcu: Fix rcu_read_unlock() deadloop due to IRQ work
    58ed3ac8538c drm/ttm: Respect the shrinker core free target
    39de3ce65635 drm/amd/display: Avoid trying AUX transactions on disconnected ports
    d02ee5eebbcf selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
    c03a532fe1d3 bpf: Make reg_not_null() true for CONST_PTR_TO_MAP
    86f3cff54956 uapi: in6: restore visibility of most IPv6 socket options
    3c9ca275100e drm/ttm: Should to return the evict error
    e4b67ceb8634 drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range
    1df5e6eb71e4 net: ncsi: Fix buffer overflow in fetching version id
    859c54bb0120 ionic: clean dbpage in de-init
    ec33caca7662 wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
    c2e719bcaa26 ptp: Use ratelimite for freerun error message
    868b52651f69 bpftool: Fix JSON writer resource leak in version command
    d930e738c0a8 net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
    8609f3c44e27 net: dsa: b53: prevent DIS_LEARNING access on BCM5325
    bc0e01d663f4 net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
    668280aa65fc net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
    7f36d13d5243 gve: Return error for unknown admin queue command
    a1172cbfe51c net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
    8d1f4798c876 net: vlan: Make is_vlan_dev() a stub when VLAN is not configured
    63acb8e26620 drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
    50dbeff47178 dpaa_eth: don't use fixed_phy_change_carrier
    7c299d0bc983 neighbour: add support for NUD_PERMANENT proxy entries
    a70c31416ddd wifi: iwlegacy: Check rate_idx range after addition
    ad8742e2d1da netmem: fix skb_frag_address_safe with unreadable skbs
    88517afa7401 powerpc: floppy: Add missing checks after DMA map
    eb1e1526b82b wifi: ath12k: Decrement TID on RX peer frag setup error handling
    9874a00ba22b wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0
    afb39537d894 wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
    c387d8fcd330 wifi: mac80211: update radar_required in channel context after channel switch
    cf48c230a17a drm/amd/display: Fix 'failed to blank crtc!'
    c43b6b0a8342 wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
    83aba958e33f wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
    5c942d80f3e8 wifi: ath12k: Add memset and update default rate value in wmi tx completion
    9febff30eb52 drm/amd/display: Separate set_gsl from set_gsl_source_select
    f2a4ca5397f5 net: fec: allow disable coalescing
    b3472b9d9d42 net: atlantic: add set_power to fw_ops for atl2 to fix wol
    3d8090bb5342 xfrm: Duplicate SPI Handling
    81667abecebc net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
    99f142ec75dd net: thunderbolt: Enable end-to-end flow control also in transmit
    bdd66b918215 kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
    b6c39aaa85c4 wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch
    51eb6a5f209b wifi: rtw89: Disable deep power saving for USB/SDIO
    ecf449ef73a5 wifi: rtw89: Fix rtw89_mac_power_switch() for USB
    f3d4fa12d6b0 drm/msm: use trylock for debugfs
    e457e0560b55 wifi: mac80211: fix rx link assignment for non-MLO stations
    f7bc50927b4e ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
    5a9b21808323 (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
    ffa3a8007d2f wifi: mac80211: don't complete management TX on SAE commit
    c73e54dba107 sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
    3f8bcc32050e s390/stp: Remove udelay from stp_sync_clock()
    11238e68cb68 wifi: iwlwifi: mvm: fix scan request validation
    6cd174be9239 um: Re-evaluate thread flags repeatedly
    dae6099edf91 wifi: iwlwifi: mvm: set gtk id also in older FWs
    8baba93e2e95 perf/cxlpmu: Remove unintended newline from IRQ name format string
    05ee035af6d8 net: phy: micrel: Add ksz9131_resume()
    fd6a21638a1e net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
    c133a9327d2d net: ipv4: fix incorrect MTU in broadcast routes
    606908835bc4 wifi: cfg80211: Fix interface type validation
    a4d2cdb31cf4 net: mctp: Prevent duplicate binds
    b55947b725f1 rcu: Protect ->defer_qs_iw_pending from data race
    e424653498e4 arm64: Mark kernel as tainted on SAE and SError panic
    ac361868f134 net/mlx5e: Properly access RCU protected qdisc_sleeping variable
    d1c8d2426a63 net: ag71xx: Add missing check after DMA map
    b0862e88b887 et131x: Add missing check after DMA map
    72cdcaeaa95b wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
    b16dfa7b4c94 be2net: Use correct byte order and format string for TCP seq and ack_seq
    d46484e9dbb2 s390/time: Use monotonic clock in get_cycles()
    65b7c838736d wifi: cfg80211: reject HTC bit for management frames
    7eb1e485bc84 ktest.pl: Prevent recursion of default variable options
    30cad8797805 wifi: ath12k: Correct tid cleanup when tid setup fails
    5d3559880e9c net: usb: cdc-ncm: check for filtering capability
    8f5015143227 xen/netfront: Fix TX response spurious interrupts
    5ac23fc080be Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie()
    b84f88749ecf powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64
    245d23754f5b ASoC: qcom: use drvdata instead of component to keep id
    c3d3492b12dd ASoC: codecs: rt5640: Retry DEVICE_ID verification
    70b3c831cfea iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
    2925edfa98f7 ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
    2f81d6e98f32 ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
    0de69bc9b366 ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
    7731b7d596c5 platform/chrome: cros_ec_typec: Defer probe on missing EC parent
    8c046583a234 platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
    c2c252d2c180 soc: qcom: mdt_loader: Actually use the e_phoff
    7589729947aa imx8m-blk-ctrl: set ISI panic write hurry level
    ac62b8f82b24 pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
    454a27cbab9b usb: core: usb_submit_urb: downgrade type check
    0455858931ff usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
    41f53afe53a5 ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
    789aa0b98854 ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
    2828f2c4f2e9 ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
    b80d6972859b x86/bugs: Avoid warning when overriding return thunk
    16cdf4f5b959 ALSA: hda: Disable jack polling at shutdown
    240e611b784d ALSA: hda: Handle the jack polling always via a work
    d54d1405f2c6 mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
    24f4ceeaeee7 mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
    a29868db6dcf char: misc: Fix improper and inaccurate error code returned by misc_init()
    f8818e29d268 reset: brcmstb: Enable reset drivers for ARCH_BCM2835
    ff28f5dc3872 pps: clients: gpio: fix interrupt handling order in remove path
    d9d611639bea ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
    d3dd520206bd mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
    f95174d4d5c4 ACPI: processor: fix acpi_object initialization
    e656c2db4922 PM: sleep: console: Fix the black screen issue
    753cd9f3d396 thermal: sysfs: Return ENODATA instead of EAGAIN for reads
    64d78290599a PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
    5aa770f45da7 firmware: tegra: Fix IVC dependency problems
    ab3bf61d9351 ACPI: PRM: Reduce unnecessary printing to avoid user confusion
    783a726d509e selftests: tracing: Use mutex_unlock for testing glob filter
    6ec6282acd89 tools/build: Fix s390(x) cross-compilation with clang
    46b3a7a3a36d ARM: tegra: Use I/O memcpy to write to IRAM
    149b733d5f80 gpio: tps65912: check the return value of regmap_update_bits()
    3c3454b02c62 iio: adc: ad_sigma_delta: don't overallocate scan buffer
    0a4757bf988e tools/nolibc: define time_t in terms of __kernel_old_time_t
    58a39eda7f95 thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
    cfa9b873a29c ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
    7423fc4da94d EDAC/synopsys: Clear the ECC counters on init
    f53e16dde8ad PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
    d7d6d076ee95 ARM: rockchip: fix kernel hang during smp initialization
    6a8b0c7e93df cpufreq: Exit governor when failed to start old governor
    20bbe54f454f gpio: wcd934x: check the return value of regmap_update_bits()
    6b8a8eac58a9 remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU
    082735fbcdb6 ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered
    84518ec7f928 soc: qcom: rpmh-rsc: Add RSC version 4 support
    16a5088670e6 usb: xhci: Avoid showing errors during surprise removal
    dabf502ee893 usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
    4a62f49f3d04 usb: xhci: Avoid showing warnings for dying controller
    6cd81d4ffbaa usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
    b2ba2ad06d8a selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
    146262a48be2 cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
    f5611a58f7af platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list
    2d32f522c33a usb: xhci: print xhci->xhc_state when queue_command failed
    839312bff2c9 tracefs: Add d_delete to remove negative dentries
    d7e28036b0e9 securityfs: don't pin dentries twice, once is enough...
    270ea0b61725 fix locking in efi_secret_unlink()
    327276cb8a7e ext2: Handle fiemap on empty files to prevent EINVAL
    6c7fadac6cbc fs/ntfs3: correctly create symlink for relative path
    3572737a768d fs/ntfs3: Add sanity check for file name
    934065fd3024 ata: libata-sata: Disallow changing LPM state if not supported
    847a204d3067 better lockdep annotations for simple_recursive_removal()
    cb7b59560400 hfs: fix not erasing deleted b-tree node issue
    9f53b2433ad2 drbd: add missing kref_get in handle_write_conflicts
    5a1e1ab83796 udf: Verify partition map count
    ce8da5d13d8c loop: Avoid updating block size under exclusive owner
    3d2c05cbc6a3 gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
    524ce0f943d7 nvme-pci: try function level reset on init failure
    1e858a7a51c7 smb/server: avoid deadlock when linking with ReplaceIfExists
    61ad294996c0 arm64: Handle KCOV __init vs inline mismatches
    b3359392b753 hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
    291bb5d931c6 hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
    8583d067ae22 hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
    384a66b89f95 hfs: fix slab-out-of-bounds in hfs_bnode_read()
    4f032979b63a hfs: fix general protection fault in hfs_find_init()
    f1fe99919f62 tls: handle data disappearing from under the TLS ULP
    acfb4da42fc4 ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
    7337a6356dff cpuidle: governors: menu: Avoid using invalid recent intervals data
    c11f3802d349 intel_idle: Allow loading ACPI tables for any family
    ea094f38d387 sctp: linearize cloned gso packets in sctp_rcv
    7f94af487c7f net: ti: icss-iep: Fix incorrect type for return value in extts_enable()
    30cf81105855 netfilter: ctnetlink: fix refcount leak on table dump
    19e01bc8c1ac udp: also consider secpath when evaluating ipsec use for checksumming
    e65ad9a14256 KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest
    91fa23d5b9e5 KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs
    8867d91ef824 KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter
    d1e28ef79b43 KVM: VMX: Extract checking of guest's DEBUGCTL into helper
    48ebed8bd66b KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported
    ec70c3f25777 KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag
    0d87da9d6065 KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap
    d5aa9bb5e348 KVM: x86: Fully defer to vendor code to decide how to force immediate exit
    62f586df29ca KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2
    ca3cc405a3bc KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers
    1c1158aceaf2 KVM: VMX: Handle forced exit due to preemption timer in fastpath
    1fc288e74cf3 KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer exits
    baf9c96e4e9d KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
    a1d4091f94c6 KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
    76025761e8f3 KVM: x86: Snapshot the host's DEBUGCTL in common x86
    cf04778ae1b5 KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
    ebc281bf14aa KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
    abe3d6a559f9 KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
    d5784ea45663 KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
    edc450030b20 smb: client: don't wait for info->send_pending == 0 on error
    429112e9709b smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection()
    19849010c9e1 ACPI: processor: perflib: Move problematic pr->performance check
    cb2e6e275d19 ACPI: processor: perflib: Fix initial _PPC limit application
    8c09ad855fbf Documentation: ACPI: Fix parent device references
    2a0c0c974bea eventpoll: Fix semi-unbounded recursion
    237e416eb621 fs: Prevent file descriptor table allocations exceeding INT_MAX
    a5ff67c66208 sunvdc: Balance device refcount in vdc_port_mpgroup_check
    17c010fe45de LoongArch: BPF: Fix jump offset calculation in tailcall
    d89d47abbad2 PCI: Extend isolated function probing to LoongArch
    987c20428f06 NFS: Fix the setting of capabilities when automounting a new filesystem
    f0b89916d2fe NFSD: detect mismatch of file handle and delegation stateid in OPEN op
    d71abd1ae4e0 nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
    3b53dc1c641f io_uring/net: commit partial buffers on retry
    ccef5ee4adf5 net: usb: asix_devices: add phy_mask for ax88772 mdio bus
    eb2d79333f79 net: dpaa: fix device leak when querying time stamp info
    fd5c51a187ba net: ti: icss-iep: fix device and OF node leaks at probe
    5daff127b292 net: mtk_eth_soc: fix device leak at probe
    9adaf9a04f9a net: enetc: fix device and OF node leak at probe
    dc395c838610 net: gianfar: fix device leak when querying time stamp info
    8dae82f81e34 net: phy: micrel: fix KSZ8081/KSZ8091 cable test
    346c820ef513 netlink: avoid infinite retry looping in netlink_unicast()
    c66caf21b1d0 Revert "leds: trigger: netdev: Configure LED blink interval for HW offload"
    16a46f2e84d7 gpio: mlxbf3: use platform_get_irq_optional()
    c1aa0743e54b Revert "gpio: mlxbf3: only get IRQ for device instance 0"
    a157478521b3 gpio: mlxbf2: use platform_get_irq_optional()
    50ae9f2d90b2 gpio: virtio: Fix config space reading.
    217e18011663 smb: client: remove redundant lstrp update in negotiate protocol
    a0620e152566 smb3: fix for slab out of bounds on mount to ksmbd
    d63e929bac53 ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks
    fb5000cfd7bc ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
    1034719fdefd ALSA: usb-audio: Validate UAC3 cluster segment descriptors
    07c8d78dbb5e ALSA: usb-audio: Validate UAC3 power domain descriptors, too
    17a66aef7ddc io_uring: don't use int for ABI

(From OE-Core rev: f9c140c4856790ae7b752849f4df6533ca5d0027)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00
Bruce Ashfield
a9224824c3 linux-yocto/6.6: update to v6.6.102
Updating linux-yocto/6.6 to the latest korg -stable release that comprises
the following commits:

no ids found, dumping:
    bb9c90ab9c5a Linux 6.6.102
    aada327a9f80 usb: gadget : fix use-after-free in composite_dev_cleanup()
    e1ee74b9eeb2 mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
    d98b34c40dc7 MIPS: mm: tlb-r4k: Uniquify TLB entries on init
    ab85071a0354 x86/fpu: Delay instruction pointer fixup until after warning
    575b71627529 ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
    48a8a2dfc3f5 ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
    1fb873971e23 x86/sev: Evict cache lines during SNP memory validation
    fdf6959b700b net: usbnet: Fix the wrong netif_carrier_on() call
    3c6236588dc8 net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
    2b98a1539736 Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano
    ae591cf2348a sched,freezer: Remove unnecessary warning in __thaw_task
    036bdae8c985 freezer,sched: Clean saved_state when restoring it during thaw
    2e62985121b7 freezer,sched: Do not restore saved_state of a thawed task
    e241ca2f0ec3 freezer,sched: Use saved_state to reduce some spurious wakeups
    8afa818c7733 sched/core: Remove ifdeffery for saved_state
    2c9a096e202c i2c: stm32f7: unmap DMA mapped buffer
    bab0986dc045 i2c: stm32f7: simplify status messages in case of errors
    d786b6592030 i2c: stm32f7: perform most of irq job in threaded handler
    9bfaaa964014 i2c: stm32f7: use dev_err_probe upon calls of devm_request_irq
    de7c7caea59b i2c: stm32f7: Use devm_clk_get_enabled()
    66bf243531ee USB: serial: option: add Foxconn T99W709
    2f4d88f5e5ee smb: server: Fix extension string in ksmbd_extract_shortname()
    fa1c47af4ff6 ksmbd: limit repeated connections from clients with the same IP
    62d136d30621 ksmbd: fix corrupted mtime and ctime in smb2_open
    b69fd87076da ksmbd: fix Preauh_HashValue race condition
    d79c8bebaa62 ksmbd: fix null pointer dereference error in generate_encryptionkey
    44bd006d5c93 vsock: Do not allow binding to VMADDR_PORT_ANY
    88caf46db823 net/packet: fix a race in packet_set_ring() and packet_notifier()
    29d417b1a0d5 selftests/perf_events: Add a mmap() correctness test
    6757a31a8e29 perf/core: Prevent VMA split of buffer mappings
    f41e9eba77bf perf/core: Exit early on perf_mmap() fail
    f07ab7a4b572 perf/core: Don't leak AUX buffer refcount on allocation failure
    b1df39462171 sunrpc: fix handling of server side tls alerts
    d2622f38652c smb: client: return an error if rdma_connect does not return within 5 seconds
    bd7f84df5436 pptp: fix pptp_xmit() error path
    4e5cf39e4064 smb: client: let recv_done() cleanup before notifying the callers.
    83d2a4185f5a smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
    f069f7c14204 smb: client: make use of common smbdirect_socket
    947569b95987 smb: smbdirect: add smbdirect_socket.h
    61f0a6849005 smb: client: Correct typos in multiple comments across various files
    91d7e6cbb3f8 smb: client: Use min() macro
    c29dbc44fbf7 smb: server: let recv_done() avoid touching data_transfer after cleanup/move
    66110b35bebc smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection
    e67aff50476f smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
    28db0cb8a0da smb: server: remove separate empty_recvmsg_queue
    2e4463f44e9b ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
    cd2a7f950038 irqchip: Build IMX_MU_MSI only on ARM
    39491e859fd4 net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
    c377ba2be943 benet: fix BUG when creating VFs
    a55b3d153318 sunrpc: fix client side handling of tls alerts
    a7176675c39a net/sched: taprio: enforce minimum value for picos_per_byte
    0d45954034f8 net: drop UFO packets in udp_rcv_segment()
    ef05007b403d ipv6: reject malicious packets in ipv6_gso_segment()
    194cd28c889a net/mlx5: Correctly set gso_segs when LRO is used
    97ed92a23f0b netlink: specs: ethtool: fix module EEPROM input/output arguments
    5005d2437737 pptp: ensure minimal skb length in pptp_xmit()
    5fde6e016004 net: ipa: add IPA v5.1 and v5.5 to ipa_version_string()
    b80353a72958 phy: mscc: Fix parsing of unicast frames
    b0cf318f5cc6 netpoll: prevent hanging NAPI when netcons gets enabled
    227154eb7567 md/md-cluster: handle REMOVE message earlier
    75ed1f6ed8ee NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
    1116e66111f8 NFSv4.2: another fix for listxattr
    12ad3def2e5e NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
    30a739931ed8 NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate()
    147216030e46 sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up()
    3bdb29df2f0d pNFS/flexfiles: don't attempt pnfs on fatal DS errors
    6e7b24c71e53 PCI: pnv_php: Fix surprise plug detection and recovery
    a426e8a6ae16 powerpc/eeh: Make EEH driver device hotplug safe
    3f49abdf88b6 powerpc/eeh: Export eeh_unfreeze_pe()
    17dabd7efb28 PCI: pnv_php: Work around switches with broken presence detection
    32173edf3fe2 PCI: pnv_php: Clean up allocated IRQs on unplug
    9184a2bb522c sched/psi: Fix psi_seq initialization
    9ea1cc8b0e95 kconfig: qconf: fix ConfigList::updateListAllforAll()
    05b450da93c6 scsi: sd: Make sd shutdown issue START STOP UNIT appropriately
    450b2a5cf6e4 scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
    4933567ef9e6 scsi: Revert "scsi: iscsi: Fix HW conn removal use after free"
    087a8a7ca354 scsi: mpt3sas: Fix a fw_event memory leak
    349436bf11b8 vfio/pci: Separate SR-IOV VF dev_set
    7dbfae90c5a3 vfio/pds: Fix missing detach_ioas op
    9546b26d391f vfio: Prevent open_count decrement to negative
    a6c5e25861e3 vfio: Fix unbalanced vfio_df_close call in no-iommu mode
    f289690f50a0 f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
    704613681c1c f2fs: fix to calculate dirty data during has_not_enough_free_secs()
    e33c22f2eeba f2fs: fix to update upper_p in __get_secs_required() correctly
    1023836d1b94 f2fs: vm_unmap_ram() may be called from an invalid context
    345fc8d1838f f2fs: fix to avoid out-of-boundary access in devs.path
    880ef748e78a f2fs: fix to avoid panic in f2fs_evict_inode
    3d37cadaac1a f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
    a96f2bf49fbd f2fs: doc: fix wrong quota mount option description
    dabfa3952c8e f2fs: fix KMSAN uninit-value in extent_info usage
    c1c818b636d4 rtc: rv3028: fix incorrect maximum clock rate handling
    f5790cc2ee6f rtc: pcf8563: fix incorrect maximum clock rate handling
    e337c72b17c6 rtc: pcf85063: fix incorrect maximum clock rate handling
    8456b3e28acf rtc: nct3018y: fix incorrect maximum clock rate handling
    17827903802b rtc: hym8563: fix incorrect maximum clock rate handling
    bb94a96374db rtc: ds1307: fix incorrect maximum clock rate handling
    15da236904ec ucount: fix atomic_long_inc_below() argument type
    f9bd692540d8 module: Restore the moduleparam prefix length check
    7500ba6533ab apparmor: fix loop detection used in conflicting attachment resolution
    fad01f7e0d3e apparmor: ensure WB_HISTORY_SIZE value is a power of 2
    4795bcafe9a8 bpf: Check netfilter ctx accesses are aligned
    f56f6054791e bpf: Check flow_dissector ctx accesses are aligned
    d3bf3088f7e9 vhost-scsi: Fix log flooding with target does not exist errors
    ebc6e1d0e97a mtd: rawnand: atmel: set pmecc data setup time
    a01bc4245e43 mtd: rawnand: rockchip: Add missing check after DMA map
    7d0b53a6d199 mtd: rawnand: atmel: Fix dma_mapping_error() address
    505f4111dd98 jfs: fix metapage reference count leak in dbAllocCtl
    4b5d36cc3014 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
    0aa273dbcf53 crypto: qat - fix seq_file position update in adf_ring_next()
    1c178ccb6caf crypto: qat - fix DMA direction for compression on GEN2 devices
    9ff4de5bd11a perf tools: Remove libtraceevent in .gitignore
    106891c7bdbc sh: Do not use hyphen in exported variable name
    f658f3676538 ASoC: fsl_xcvr: get channel status data when PHY is not exists
    3187ffe08ff0 dmaengine: nbpfaxi: Add missing check after DMA map
    06ddbb28b72b dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
    25d15b0d2b42 fs/orangefs: Allow 2 more characters in do_c_string()
    b93d06499b6f PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute
    bdbaa1041816 soundwire: stream: restore params when prepare ports fail
    ac961f6c6dc5 crypto: img-hash - Fix dma_unmap_sg() nents value
    06bc14f9d047 crypto: keembay - Fix dma_unmap_sg() nents value
    5d481d4bea06 hwrng: mtk - handle devm_pm_runtime_enable errors
    9c590ae73c3e watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
    a23fa17e6bec scsi: isci: Fix dma_unmap_sg() nents value
    401fcb7e557d scsi: mvsas: Fix dma_unmap_sg() nents value
    cf9c5b15c4ab scsi: elx: efct: Fix dma_unmap_sg() nents value
    214f94ee5d77 scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
    5b63d6dec556 clk: sunxi-ng: v3s: Fix de clock definition
    c07e017a56d6 perf tests bp_account: Fix leaked file descriptor
    9b2a3e718902 pinmux: fix race causing mux_owner NULL with active mux_usecount
    33c778ea0bd0 proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al
    adf2da0bf119 kernel: trace: preemptirq_delay_test: use offstack cpu mask
    5449e60e1cbb RDMA/hns: Fix -Wframe-larger-than issue
    db1114685317 crypto: ccp - Fix crash when rebind ccp device for ccp.ko
    a762bbe11269 crypto: inside-secure - Fix `dma_unmap_sg()` nents value
    b86fd2e61a2c perf sched: Fix memory leaks in 'perf sched latency'
    282d4b34694f perf sched: Fix memory leaks for evsel->priv in timehist
    16ce5ce11145 perf sched: Free thread->priv using priv_destructor
    e5de9ea7796e perf dso: Add missed dso__put to dso__load_kcore
    9fe9f9459951 perf tools: Fix use-after-free in help_unknown_cmd()
    a99cae46ab16 Fix dma_unmap_sg() nents value
    8724a228be43 clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
    45338af03ff3 fanotify: sanitize handle_type values when reporting fid
    e8b4c9e60a7a pinctrl: sunxi: Fix memory leak on krealloc failure
    85a7746a05ea PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails
    3f5186fd43be crypto: arm/aes-neonbs - work around gcc-15 warning
    f693be157c59 power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
    8e9bdb563916 power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
    51990eecf22f clk: xilinx: vcu: unregister pll_post only if registered correctly
    a2b437a88370 media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
    1d92608a2925 clk: davinci: Add NULL check in davinci_lpsc_clk_register()
    530d4db6fb89 mtd: fix possible integer overflow in erase_xfer()
    aff3e6eacef2 crypto: marvell/cesa - Fix engine load inaccuracy
    be1e15938a16 crypto: qat - use unmanaged allocation for dc_data
    25c161a8bed1 crypto: sun8i-ce - fix nents passed to dma_unmap_sg()
    0c93cd98d0c8 PCI: rockchip-host: Fix "Unexpected Completion" log message
    e1c3d14c8252 bpf/preload: Don't select USERMODE_DRIVER
    3bb72c2e9622 ipv6: annotate data-races around rt->fib6_nsiblings
    9cb6de8ee144 ipv6: fix possible infinite loop in fib6_info_uses_dev()
    e1b7932af47f ipv6: prevent infinite loop in rt6_nlmsg_size()
    f237664113fe vrf: Drop existing dst reference in vrf_ip6_input_dst
    dddfc5a996af selftests: rtnetlink.sh: remove esp4_offload after test
    314f568b84b0 net/mlx5e: Remove skb secpath if xfrm state is not found
    4d81205d27c3 net/mlx5e: Clear Read-Only port buffer size in PBMC before update
    58004aa21e79 netfilter: xt_nfacct: don't assume acct name is null-terminated
    9705b8b92d6a can: kvaser_usb: Assign netdev.dev_port based on device channel index
    56a17d28c3dd can: kvaser_pciefd: Store device channel index
    2ac7efc5deef can: peak_usb: fix USB FD devices potential malfunction
    c9be5abdaf2e tools/rv: Do not skip idle in trace
    ee2502485702 bpf: Disable migration in nf_hook_run_bpf().
    9d5aecb57e93 Bluetooth: hci_event: Mask data status from LE ext adv reports
    cdb509f59aaf kcsan: test: Initialize dummy variable
    bf88b7c114d4 wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon()
    50e98be435df wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
    21e317484d3b wifi: ath12k: fix endianness handling while accessing wmi service bit
    dde152043f6d Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
    9c8e9da118a8 wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
    f74d4525ebad wifi: mac80211: Don't call fq_flow_idx() for management frames
    bc6f35967d9a wifi: mac80211: Do not schedule stopped TXQs
    2874717012d1 wifi: plfxlc: Fix error handling in usb driver probe
    378ae9ccaea3 wifi: mac80211: reject TDLS operations when station is not associated
    df51cc1e965a iommu/amd: Fix geometry.aperture_end for V2 tables
    03df73480547 mwl8k: Add missing check after DMA map
    5cb4349d0c35 wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
    20a1e6536424 tcp: call tcp_measure_rcv_mss() for ooo packets
    9a20c9da5ff1 xen/gntdev: remove struct gntdev_copy_batch from stack
    c9eeae9639ea net_sched: act_ctinfo: use atomic64_t for three counters
    103c4e27ec9f net/sched: Restrict conditions for adding duplicating netems to qdisc tree
    0967ee88ec1e um: rtc: Avoid shadowing err in uml_rtc_start()
    98f1a97d8627 arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
    9ac58afb0cca netfilter: nf_tables: adjust lockdep assertions handling
    b488bee5e92f netfilter: nf_tables: Drop dead code from fill_*_info routines
    f56a863397f5 fbcon: Fix outdated registered_fb reference in comment
    b1c6b13f48a8 sched/psi: Optimize psi_group_change() cpu_clock() usage
    dabe5fc2ee7a drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
    6e2f7903241c m68k: Don't unregister boot console needlessly
    7f0377ca6993 drm/msm/dpu: Fill in min_prefill_lines for SC8180X
    6d029d85aa2b kselftest/arm64: Fix check for setting new VLs in sve-ptrace
    f73c0bc2d1d3 net: dst: annotate data-races around dst->output
    e0b8b6687b7d net: dst: annotate data-races around dst->input
    62d7cf455c88 net/mlx5: Check device memory pointer before usage
    c45a33903e24 tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
    5bf201c55fdf wifi: ath11k: clear initialized flag for deinit-ed srng lists
    ca980f1911a7 iwlwifi: Add missing check for alloc_ordered_workqueue
    d5491ff785f4 wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
    14ca6952691f wifi: rtl818x: Kill URBs before clearing tx status queue
    892b29eab44b wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band
    655e3f51de5a caif: reduce stack size, again
    0abd1f48cd25 bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
    0f18414f1d6b drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel
    cc7af1b89c55 net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain
    3ca8e73c58bb selftests/bpf: fix signedness bug in redir_partial()
    0e853c1464bc bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
    c69d06498ea2 bpf, sockmap: Fix psock incorrectly pointing to sk
    c4a298ae0d36 drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
    8b0285fbbd81 selftests/tracing: Fix false failure of subsystem event test
    faa45887a63c staging: nvec: Fix incorrect null termination of battery manufacturer
    cc03984d7035 interconnect: qcom: sc8180x: specify num_nodes
    37dfd6d6c9e4 interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg
    2fffa72282ed soc: qcom: pmic_glink: fix OF node leak
    272cd1f24741 samples: mei: Fix building on musl libc
    f7e5ae0ddd12 cpufreq: Init policy->rwsem before it may be possibly used
    39a0d418b321 cpufreq: Initialize cpufreq-based frequency-invariance later
    1bc35f9a50e1 cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
    81f506193700 PM / devfreq: Check governor before using governor->name
    759b918c8f2e arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
    1661ee5c2a41 arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
    d7b49f4f0da7 ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
    4f886798e1a4 soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS
    632c151355ba arm: dts: ti: omap: Fixup pinheader typo
    40ff7460a9a6 usb: early: xhci-dbc: Fix early_ioremap leak
    c6ec27091cf5 powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
    91a177aafc53 Revert "vmci: Prevent the dispatching of uninitialized payloads"
    7ed42b79118d pps: fix poll support
    6696a46f4ebd vmci: Prevent the dispatching of uninitialized payloads
    b31cf6f7716a staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
    6031a54f4eac spi: stm32: Check for cfg availability in stm32_spi_probe
    490877203b40 usb: misc: apple-mfi-fastcharge: Make power supply names unique
    f24e5b445ab9 usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe()
    448800900925 ARM: dts: vfxxx: Correctly use two tuples for timer address
    964db8725937 arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely
    e1b4ca59f633 arm64: dts: qcom: sc7180: Expand IMEM region
    2f4bad6b27c3 arm64: dts: qcom: sdm845: Expand IMEM region
    603df70062fb soc: qcom: QMI encoding/decoding for big endian
    41917d9ce43a selftests: Fix errno checking in syscall_user_dispatch test
    aa771d2928fe ASoC: mediatek: use reserved memory or enable buffer pre-allocation
    4c39fc79ae25 ASoC: ops: dynamically allocate struct snd_ctl_elem_value
    ee1c30d7c6fc ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
    1a91ba12abef gfs2: No more self recovery
    a936be9b5f51 Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
    084933961ecd hfsplus: remove mutex_lock check in hfsplus_free_extents
    0926e13a47fc hfs: make splice write available again
    1de5895fe68d hfsplus: make splice write available again
    d89f71aece34 ublk: use vmalloc for ublk_device's __queues
    b35a50d639ca fs/ntfs3: cancle set bad inode after removing name fails
    8d1bfdd30d17 fs_context: fix parameter name in infofc() macro
    15da73210929 audit,module: restore audit logging in load failure case
    5974c913d6d9 ASoC: amd: yc: add DMI quirk for ASUS M6501RM
    61e5aeff2424 ASoC: Intel: fix SND_SOC_SOF dependencies
    7e98b00615c6 ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx
    18196a40af52 ethernet: intel: fix building with large NR_CPUS
    5f577d47bba6 ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx

(From OE-Core rev: 9c0af64f5b688d89349a80cb27bbbc451abfab38)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2025-10-24 06:23:40 -07:00