All of lore.kernel.org
 help / color / mirror / Atom feed
From: bruce.ashfield@gmail.com
To: richard.purdie@linuxfoundation.org
Cc: openembedded-core@lists.openembedded.org
Subject: [meta][PATCH 03/06] linux-yocto/7.2: update to v7.2.6
Date: Thu, 17 Sep 2026 01:13:36 -0400	[thread overview]
Message-ID: <20260917051340.1472139-4-bruce.ashfield@gmail.com> (raw)
In-Reply-To: <20260917051340.1472139-1-bruce.ashfield@gmail.com>

From: Bruce Ashfield <bruce.ashfield@gmail.com>

Updating linux-yocto/7.2 to the latest korg -stable release that comprises
the following commits:

    500df175a7f9e Linux 7.2.6
    61a8d06600c8c ksmbd: prevent out-of-bounds reads in share config responses
    1f0085f15004d perf python: Add missed explicit dependencies
    8f57985e30a28 perf ui hists: Fix dso_filter reference leak and exit zoom cleanup
    078aca7b80513 perf hists browser: Increase MAX_OPTIONS to prevent stack buffer overflow
    72e9387884554 net/sched: fq: clamp quantum and initial_quantum in change path
    b04326c7927af tcp: reject non zerocopy devmem tx
    2bfcedbf68cbd Revert "esp: do not unref managed frag pages in esp_ssg_unref()"
    dd08a645195f4 dm-integrity: fix buffer overflow with keyed discard
    872317e84fd01 net/sched: sch_htb: limit htb_classify inner-class filter hops
    47eb90299e688 tcp: fix corruption of urgent data on multi-segment retransmit
    7566770311515 usb: atm: usbatm: fix invalid ci_range initialization
    5975009651c4e net: fec: only stop PTP if it was initialized
    a540a49fcca59 slip: remove slip_hangup() to fix use-after-free in slip_receive_buf()
    16d21a27df3f5 net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup
    a9d88c79746cf net: dsa: mxl862xx: enable assisted learning on CPU port
    c0d3f9560cc89 net: stmmac: restore NET_IP_ALIGN in the RX DMA offset
    b445030cca1f6 net: stmmac: drop gso_enabled_types and rely on netdev features
    482b2542eeb82 net: stmmac: selftests: Don't test flow control for small rx fifos
    5a106e59b0519 net: stmmac: selftests: Account for the UC filter list for filtering tests
    d1fad6804be2a net: stmmac: dwxgmac: Account for the primary MAC address for UC filtering
    10cf85addedeb net: stmmac: dwmac4: Account for the primary MAC address for UC filtering
    db57c2c4eaa52 net: stmmac: dwmac1000: Account for the primary MAC address for UC filtering
    756932d2c6a0b net: stmmac: selftests: Check multiple MMC counters
    2bbd61823f227 drm/xe/sysctrl: Read mailbox phase bit from hardware
    08f8c20feca96 drm/xe/xe_ras: Add support to get error counter value
    da853f3304495 drm/xe/uapi: Add additional error components to xe drm_ras
    1ffe1bd34b497 net: airoha: npu: fix missing streaming DMA mask
    fc3ee01090856 selftests/arm64: Fix MTE prctl TAP plan
    5791116f96d4f selftests/arm64: Treat KSM merge_across_nodes as optional
    a327373156bb5 selftests/arm64: Print missing MTE TAP headers
    18c08f84ca483 ALSA: control: Don't add invalid kcontrols to LED layer
    1e7fb6801d9cc netfilter: nf_tables: skip double clone set expressions on element insert
    0044a4b853728 netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited()
    6a7d3b074cfbb netfilter: nf_tables: move hardware offload step after building the chain blob
    75c271c48f483 virtio-net: Ensure that TCP packets don't overflow gso_segs
    905d648e97ef3 drm/xe: Reject page faults from non-fault-mode scratch VMs
    9cc86bf96cfc3 drm/xe/xe_gt_idle: Add CCS to the powergating info print
    2f1fac18cbe80 drm/xe: Do not apply WA 14025883347 to media 3503
    1b871710ae9f6 net: stmmac: selftests: Pass the IP proto mask in the TC selftest
    dadcbaa98de3f net: wangxun: use BIT_ULL() to prevent shift overflow on 32-bit archs
    a32c4a6dc96cc net: phy: air_en8811h: move LED GPIO configuration to config_init
    94a913cd521c0 net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure
    ff481b7ba651d net: ethernet: sun4i-emac: Fix IRQ error handling
    2e658329d7749 ASoC: amd: acp-config: change quirks to cover all ASUS FA401EA variants
    cf839636911d8 samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify
    84b5c7670a867 samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-modify
    c77633a959565 libceph: validate banner payload length
    36138bde421a3 ceph: revalidate ki_pos for O_APPEND writes after cap acquisition
    c5fd89f5e1273 ceph: Fix ERR_PTR(0) in ceph_mkdir()
    55126ef66298e ASoC: dapm: Fix off-by-one check on the second enum channel
    8968852e664f4 of/irq: Fix device node refcount leak in of_irq_get_affinity()
    dd52ab1c5436b apparmor: policy_int make sure list heads are initialized before fail path
    889fa17a0af09 crypto: acomp - allocate async request context when cloning
    f0e06321c70e9 tpm: st33zp24: Validate locality read result
    e6d7d9b665419 tpm: st33zp24: Return zero on status read failure
    0cd7503794856 net/sched: sch_teql: restore skb->dev on the slave failure path
    da16c31517cd2 net/sched: sfq: clamp quantum to avoid signed overflow soft lockup
    2446644b0f6d0 net/sched: hhf: clamp quantum before hhf_change() to avoid overflow
    bf97fd2163ad1 net/sched: fq_pie: clamp default quantum to avoid signed overflow
    f2fe291fbf71c net/sched: sch_codel: clamp default mtu to avoid disabling CoDel
    9f499e5827fdb net/sched: fq_codel: clamp default quantum and mtu
    e35acd56f244d net/sched: fq: add overflow bounds to quantum and initial quantum
    e69bde4eb566a net: fix a resource leak in copy_net_ns() error handling path
    efb4cdd8d72bd net: core: check skb_frags_readable before uncloning in skb_copy_ubufs
    62126464f3a61 net/sched: act_skbmod: fix length calculations and avoid invalid header warnings
    0f0f3df2bde2e selftests/proc: make proc-maps-race work with READ_IMPLIES_EXEC
    7efd495853aeb maple_tree: fix argument name in header
    dfe9ee26a9ad0 maple_tree: catch race in mas_alloc_cyclic()
    21aea0891c204 mm/memcontrol: avoid false sharing between vmstats and events
    3b06d0cc81547 selftests/mm: fix read_file() return value check
    8625208f464ef selftests/mm: skip COW tmpfile cases when fallocate() is unsupported
    f6ec40d1e4f17 smb/client: preserve open info type across compound queries
    a58270c1b3445 cifs: fix clearing stats for fastest execution of each smb2 command
    a0fcbea79f034 octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init()
    7e33c6bd049b5 octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup
    281f9fda2e06d net/rds: use wq_has_sleeper() in rds_cong_map_updated()
    4f9827b314ee5 net: mana: Cap MSI-X vectors to the device MSI-X table size
    138b0054021fd net/sched: act_ife: Only operate on Ethernet frames
    a93b72eb2f5a8 net: enetc: restore RX ring congestion mode for ENETC v4
    18ca1be8426aa net: enetc: remove invalid code from enetc4_pl_mac_link_up()
    1039c56c4c99f net: enetc: improve MAFT entry management with bitmap tracking
    d25a4a481cfbe net: enetc: convert ndo_set_rx_mode() to ndo_set_rx_mode_async()
    c77effb3edb82 net: enetc: extract common helpers for MAC hash filter configuration
    ccdc23869332a net: enetc: extract common helpers for MAC promiscuous mode setting
    1a20660772b67 net: enetc: restore RX ring congestion mode after ring reconfiguration
    b3235a8790a1a octeontx2-af: Fix TL3/TL2 link config ENA clearing
    200460a0793dc net: qualcomm: rmnet: restore skb->dev on deaggregated frames
    ef42c9e922dfa octeontx2-vf: fix workqueue and netdev race in probe/remove
    2f460aa0211e9 octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity
    fdf7358e2688f octeontx2-af: fix NULL deref in NIX TM tree debugfs read path
    8d85498016a5b gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free
    bf9387488d639 xsk: honor XDP_TX_METADATA in zero-copy path
    0e00ea9e97a39 xsk: align TX metadata layout across ABIs
    2eafcf310f4e0 Bluetooth: do not leak an hci_conn when a second LE connect is rejected
    3988cbb1be501 Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop
    22d419db7f9a0 Bluetooth: btnxpuart: Validate the FW dump header length
    94a71da6d6b37 Bluetooth: hci_sync: add conditional locking annotations
    7b80d2701a684 Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path
    d84bc309288b2 Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX
    956b5a979b0df Bluetooth: btmtk: Do not discard the subsystem reset timeout
    820e64cb52dbf Bluetooth: btmtk: Do not report success when subsys reset fails
    32a7bc6e93be3 Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan
    ee2135a14fb2a Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference
    c47339e169bf4 Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN
    f49321c857851 Bluetooth: L2CAP: access chan->conn safely in get/setsockopt
    a34fb2fa48fbf f2fs: use adjusted write range after f2fs_write_checks()
    2f10bc3ff24c9 arm64: process: Fix context switching MTE store-only tag check
    ae0cfa9772982 arm64: ptdump: Make note_page_flush() range aware
    8f9a725d89711 fuse: Fix the condition to enable over-io-uring
    f940f3d3fd0bb fuse: use release/acquire for fch->initialized
    833963069adf8 fuse: invalidate the correct range after O_APPEND direct write
    faef603939f26 erofs: Fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS default logic
    31d299e7d5539 scsi: qla2xxx: Fix an loop timeout test
    4c19c302cc577 Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition
    55d87e888ca1f net/sched: sch_cake: fix autorate reconfiguration throttling
    4384d152e10df net: hibmcge: fix page_pool DMA direction mismatch
    2e5b1f6ee74aa net_sched: sch_fq: fix pacing delay underflow with pacing offload
    72895242ee741 net: page_pool: Remove zone/policy GFP flags when allocating XArray entries
    7d63522f9e590 net: libwx: fix concurrent bitmap overwrite in PTP setup
    c6dfa6dc37d74 net: txgbe: fix MISC interrupt unmasking in non-MSI-X mode and device shutdown
    648d196ccc03a net: sparx5: fix sleep in atomic context in MAC table access
    9057547877624 net: microchip: vcap: use port number instead of netdev name for debugfs
    18c68c8f3d3ff net/sched: account classifier filter allocations to memcg
    08988d1941e18 ptp: netc: fix period truncation and potential divide-by-zero in PEROUT
    98b4998733553 bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check
    b17907ef665bc bnxt_en: Fix call to hardware monitoring event handler
    1cd4b0a184db6 ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS
    5d542be0c4921 rtc: pcf85363: Add error checking to regmap calls in probe()
    bbc975cfb07a1 NFSv4/pnfs: key the data server cache on the NFS version
    a973622da0c62 NFSv4.2: fix LAYOUTSTATS send buffer exhaustion
    f31f3c042e024 NFSv4.1: zero referring call lists before decoding
    ecc8bac11a101 vxlan: fix reading neigh ha
    291c9e137b7c7 net: bridge: arp/nd proxy: fix reading neigh ha
    5ff429dd6725f net/smc: free pending qentry in smc_llc_flow_stop() before memset
    e25a602c45c76 net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition
    b2479738ba765 powercap: intel_rapl: Sign-extend the PMU delta on counter wraparound
    d98b92f3d5797 net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue
    bc4e67c9399c7 net: tcp: block mixing readable and unreadable frags
    7109bb63667a5 inetpeer: randomize RB-tree node comparison using SipHash
    4a674afaae413 ip6mr: do not clone dst in ip6mr_cache_report()
    684773c4d26f7 net: qlcnic: validate unified ROM sections before loading
    35a6026eadcb8 net: add missing ref_tracker_dir_exit() to net_passive_dec()
    f82b5dbb2fef6 ipv6: avoid divide by zero in rt6_multipath_rebalance
    db038ac4dca0f netdevsim: update queue NAPI association on queue reset
    f5d53818ba923 net: ipa: balance runtime PM reference on remove error
    976e92931c28e forcedeth: stop the tx_timeout register dump past the requested window
    d52c695b6980b net/mlx5: E-Switch, preserve max tx speed on vport state modification
    8a9a3ccdc35e1 net/mlx5: Move vport DOWN state check out of mlx5_query_vport_max_tx_speed()
    19dd112279167 net/mlx5: E-Switch, use state lock for vport state changes
    21c0a41260e4b net: thunderbolt: Count delivered packets in rx_packets and rx_bytes
    a5ce5b5aacd01 net/sched: add get_fill_size callbacks for actions missing them
    434849b21ef56 net: bridge: Reject descending VLAN tunnel ranges
    8341bd3ff126d xsk: fix NULL pointer dereference in __xsk_rcv()
    e50df85ac835f irqchip/irq-realtek-rtl: Use readl_be()/writel_be() instead of readl()/writel()
    12f903cfacb48 irqchip/irq-realtek-rtl: Add mask for interrupt handling
    7dd58ec1bbd41 irqchip/irq-realtek-rtl: Add interrupt data structure
    1f0b4680d3b5a irqchip/irq-realtek-rtl: Split out parent setup code
    6c94e5f95258b smb: server: remove unused DES crypto header
    93fb16a86d5db smb: server: Remove obsolete "select CRYPTO_LIB_DES" from Kconfig file
    1e16e82581521 ALSA: mtpav: shut down output timer before card teardown
    24d81b7299200 drm/xe: don't WARN on kernel job timeout when device already wedged
    5969a3df8361a spi: amlogic-spisg: Make sure clk_init_data is fully initialized
    e46ef54fe4d9c RDMA/ucma: Allow path records to exactly fit the output buffer
    ea5a3c3071071 ntfs: validate usa_ofs before preserving the update sequence number
    b42644e425fed ntfs: fix off-by-one page overflow in ntfs_decompress()
    e52c8cd7e7544 sched/topology: Add a cpus_read_lock to rebuild_sched_domains()
    24b399f51812d ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup
    ae344ed82795b irqchip/gic-v5: Defer default SPI and LPI IAFFID programming
    3958493a70ced irqchip/gic-v5: Use logical cpu 0 irs_data for dynamic IST allocation
    7c10ec4987b78 irqchip/gic-v5: Release IRS iomem region on driver init failure
    7b7201493383e irqchip/gic-v5: Fix gicv5_init_common() error paths
    69f0c79f5b692 irqchip/gic-v5: Disable IRSes on probe failures
    f43bdac1ae484 irqchip/gic-v5: Check for NULL LPI domain on domain teardown
    6caeb878f809b irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing
    a7c0415209243 irqchip/gic-v5: Synchronize CPU interface disable
    54937af6f4a0d irqchip/gic-v5: Clear per-CPU IRS data on teardown
    69212cccf4f90 irqchip/ast2700-intc: Disable all interrupt merge banks on probe
    5ecfa72e74c6e clk: visconti: Make sure clk_init_data is fully initialized
    c1c6d311fa830 clk: ti: Make sure clk_init_data is fully initialized
    6234b08fbc4b6 prctl: fix PR_SET_MM_AUXV losing the forced AT_NULL terminator
    56ae1f0b08400 lib/interval_tree: fix allocation warning messages
    63337be8f5c43 rtc: gamecube: check return value of devm_rtc_register_device()
    c80e3c69cf197 i2c: ocores: Disable clock on failed resume
    f2f0da1164861 irqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callback
    dbecbe23dc606 irqchip/renesas-rzg2l: Fix loss of interrupt
    3f00d8a5e16c0 rtc: zynqmp: Return optional clock lookup errors
    a24926c513037 cifs: remove dead size-update blocks in cifs_setattr_unix/nounix
    7ec4098359b9a smb: client: set replay flag on the read send-error retry path
    73f6bdb038048 smb: client: fix request buffer leak in smb2_new_read_req()
    12f124ec61c74 smb/client: return EOPNOTSUPP for unsupported O_TMPFILE
    9a4d2ef7e72b9 rtc: spacemit: handle regmap_test_bits() error return
    6218c0533a722 rtc: pcf8563: fix clock provider leak on unbind
    afbf69d1d691c virtio: rtc: time out alarm requests
    c678d04ac9e5a vdpa/mlx5: fix wrong list iterated in add_direct_chain error path
    89b4d033a4b53 virtio_pci: fix wrong queue index for admin vq in intx path
    43a8e02dc826d vhost/net: fix clear_user start address in VHOST_GET_FEATURES_ARRAY
    bdef50a8226fc virtio_balloon: quiesce balloon work before device shutdown
    1ac4c32198b83 virtio_balloon: factor out virtballoon_quiesce()
    fcbba617b38cb virtio: add virtio_device_shutdown() helper
    ca6f3fa599cb7 vdpa_sim: fix cleanup after worker creation failure
    2ee4d24c88c48 virtio_balloon: disable indirect descriptors
    14dca701e72a1 ntfs: do not update ctime when setxattr fails
    0400e0d50eb3b ntfs: serialize resident iomap reads with mrec_lock
    9d1b68f3dd11a ntfs: convert iomap ops to ->iomap_next()
    95dc8483f2d70 iomap: add ->iomap_next()
    8a255824aa000 iomap: split iomap_iter() logic into iomap_iter_next()
    95d7098561e51 ntfs: allow index root relocation
    86f46508016bc ntfs: reject unprivileged writes to reserved $LX* xattrs
    25a70f2ea77ef ntfs: respect per-file chmod mode over mount masks
    6028b94f28d9a ntfs: apply Windows name checks only with windows_names
    825dec5120933 ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib()
    950e2ecc7aec2 ntfs: fix kmap_local_page() usage in compress
    825f4476ea60b ntfs: Remove references to page->__folio_index
    20224191755b0 ntfs: Use zero_user_segment() in handle_bounds_compressed_page()
    cfa877fdae270 ntfs: Remove use of __folio_index in handle_bounds_compressed_page()
    c13cd1124ec8b ntfs: Inline zero_partial_compressed_page()
    e366735ed2a8a ntfs: rewrite EA stream before updating metadata
    62f39201c0ccd ntfs: remove empty EA attribute pair
    98af5b4ae1385 ntfs: validate final EA attribute size
    9fb0fed1b918d perf vendor events arm64: Fix Tegra410 Olympus event 0x0197
    b3ba86c6c5996 perf vendor events arm64: fix swapped MetricGroup for Tegra410 L1 prefetcher metrics
    4af8e0f7838d4 i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode
    63ab05e8f9654 net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()
    ba5429c8c43e5 bonding: initialize err for empty target lists
    1058c4379959c mlxbf-bootctl: fix the build error with FIELD_PREP()
    1b0a3d915320f platform/x86/amd/hsmp: Reject negative power cap writes in hwmon
    8a7499b8fd344 platform/x86: hp-bioscfg: fix password encoding bounds check
    0cc59397bbf94 vsock: use sock_error() to consume sk_err after a failed connect
    491b368a0c6e5 vsock: don't check the listener's sk_err in vsock_accept()
    cfcc833cb43b4 platform/x86: dell-wmi-sysman: Fix instance ID bounds
    eddb191cc8d68 net/smc: hash socket only after full initialisation in smc_sk_init()
    b4ce1c461a49a 8139cp: fix Rx and Tx not being disabled in cp_suspend
    f26400b325bdc vxlan: mdb: Fix use-after-free in vxlan_mdb_flush()
    44764dc4b9f9b ALSA: hda: Fix connection list comparison in proc output
    509f4a09bae7f fuse: check for NULL root inode in fuse_fill_super_submount
    710bbbbb66c7b soc: qcom: ubwc: Fix missing include
    236d65ecf3777 fuse: reject a duplicate fd= mount option
    c8a109c9e23a2 fs/ntfs3: validate ef->size covers the record's name and value
    53e56f7aa1d0f fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()
    c40f3f24839f8 cuse: wait for pending RCU callbacks on module exit
    0dffaa477c2d5 net: bridge: vlan: fix inverted default vlan notification
    adb27c5665bd2 tls: fix RX desync on overlapping skbs
    38ce7de7215ad net: dsa: mv88e6xxx: Fix PCS link check on CMODE read error
    ad32e564c62eb vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes
    b1908bff0faaa ipvs: fix integer overflow in ftp helper port/address parsing
    454c59ef2dd0b netfilter: ctnetlink: do not expose expectation DEAD flag
    6a31c661ba1e1 netfilter: ipset: remove need to allocate memory on delete operations
    44ff26872e241 f2fs: fix to avoid pinfile fragment on fragment:{block, segment} mode
    87abc928271cb f2fs: cleanup w/ f2fs_need_rand_{blk, seg, seg_blk}
    8344c9233c8f7 virtio_net: Fix resize of the RX ring
    49b01f2939abc net: hsr: free learned nodes on device setup failure
    23fc79697224c pppox: drain queued packets on channel handoff
    93462180871bb net: dsa: b53: fix error propagation from b53_fdb_dump()
    f392affef3c9c net: kcm: Hold RCU read lock while running BPF parser
    fdbf04e3e01a8 dpll: fix NULL deref in dpll_device_ops() during teardown race
    122d0db84b11c ionic: fix completion descriptor access with 2x desc size
    242d2d8bfc09f ionic: add missing dma_rmb() after the completion publish check
    8ed5e2a3c306d ptp: netc: skip PEROUT disable if channel is not enabled
    851f2f82483dd drm/xe: tests: fix error message in xe_migrate_sanity_test()
    96c3959770386 hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed
    bcd89fdf033ba octeontx2-af: initialize lmac_bmap in rvu_mcs_set_lmac_bmap()
    677b4c6e8c27c can: m_can: Use of_property_present() for wakeup-source
    03022dd874070 bpf, xdp: move offload check into dev_xdp_install()
    33bcf2dd2fd61 regulator: tps65185: wait for the IC to wake before the first I2C access
    df9c1cd0c6e8a clk: ti: mux: resolve parent clocks by DT index, not by name
    647157fecb42b clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()
    7582a485870a9 nfs: fix ENXIO on O_CREAT open of existing symlink over NFSv3
    d179ff22cd851 NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()
    436a214514e24 NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers
    c9c67f7107f74 NFS: Fix delayed delegation return list handling
    23e4162405c45 pnfs/blocklayout: Fix device leaks on parse failure
    5891c03e15092 NFSv4: remove callback IDR entry on client allocation failure
    a30e2a3353094 nfs: refactor pNFS functions using clear_and_wake_up_bit
    2e8a725cdb645 nfs: replace atomic bitops sequence with clear_and_wake_up_bit helper
    8e29e6c43f9de selftests/bpf: Retry stat generation in cgroup_iter_memcg
    f075148f3eebb smb/server: fix session counter on session removal
    f31178bb91cdb smb/server: update session counter under sessions table lock
    46bb82a539020 smb/server: warn if ksmbd_proc_create() fails
    c949ea4edccfc ksmbd: add procfs monitoring for active shares
    55c677619084f smb/server: fix session leak in ksmbd_session_register()
    8e4f75e979c1d ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size
    ce92f3cc7ee48 ksmbd: handle encrypted compressed requests
    6f04e11d500b8 ksmbd: decrypt requests from expired encrypted sessions
    9d3ebd8216226 ksmbd: disconnect on SMB3 decryption failure
    0875872718b98 ksmbd: scope session state changes to bound connections
    b9f1aee32d385 ksmbd: fix encrypted request lookup on bound channels
    3fc762f881c98 ksmbd: expire SMB sessions when Kerberos tickets expire
    599dd43e4ba8b ksmbd: validate SMB2 write offsets
    514a0b2bc9499 ksmbd: detach blocked lock requests before freeing
    d09af9a35ff7b ksmbd: safely discard unregistered deferred locks
    31a89af4f513d bpf: Reject negative optlen in cgroup getsockopt hook
    d73441232f1f0 m68k: nfcon: Do not call console_is_registered() in nfcon_device()
    daeb74f5f398e bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks
    7b6b6bbbfd13e erofs: fix unused pcluster_pools for higher page sizes
    179a5b2171573 lwt_bpf: Restore reserved headroom after xmit program
    1bbdbf56d3586 objtool/klp: Fix vmlinux klp relocations for EXPORT_SYMBOL_FOR_MODULES()
    0f8a4184c00ce erofs: guard on-disk algorithm IDs against Z_EROFS_COMPRESSION_MAX
    451027c642e75 erofs: fix interlaced ztailpacking pclusters
    a1d26dfb32919 ksmbd: defer publishing granted locks to prevent UAF/double-free race
    a54df0ce7a985 ksmbd: recognize replayed SMB2 lock sequences
    9e8faf91bb11e smb/server: preserve error status in smb2_handle_negotiate()
    7d2cd9269b570 smb/server: call ksmbd_proc_cleanup() on module init failure
    fb4ba2bdfc1de smb/server: abort initialization when proc setup fails
    a2eb72b4d53bb smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()
    7065d3648b1a4 smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()
    5f97bac88bfb3 ksmbd: serialize oplock close with pending break ownership
    c2b867861a48f ksmbd: add SMB3 request replay support
    50be5e96c381a ksmbd: retain connection for pending notify work
    a34f809167a46 ksmbd: defer CHANGE_NOTIFY completion instead of STATUS_NOT_IMPLEMENTED
    bbeefd3e96645 ksmbd: add AAPL kAAPL_SERVER_QUERY create context support
    8a765fb56ca76 ksmbd: fix durable handle v2 default timeout units (60 -> 60000)
    ac5104f4bd9a9 ksmbd: support access-based directory enumeration
    8e2ebc7767883 ksmbd: free preauth sessions on connection teardown
    8084b5c719670 ksmbd: do not advertise unimplemented CA support
    c494fcf8e89e3 ksmbd: validate ipc response length before dereferencing its fields
    8ea83ef0c40ec smb: smbdirect: release pending child sockets outside the handler lock
    c4de57fd85459 smb: smbdirect: avoid recursive listen.lock during cleanup
    959813a3752b4 smb: smbdirect: destroy QP before mem pools on accept failure
    8a953b1a47fff smb: smbdirect: free completion queues with ib_free_cq()
    497c221bf6b2f ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()
    abb5146b2d819 smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer
    07a9e289ff7ed ksmbd: Do not skip lock checks for single-byte ranges
    eb287c6e81ded bpf: Check pointer type for all atomic RMW paths
    9cd837ed9efd8 hwmon: (emc1403) Drop hysteresis for low limit temperature
    9b23a010a1e82 hwmon: (coretemp) Fix core_data leak on CPUs without PTS
    072fb5aeec2ea apparmor: fix deadlock in complain-mode change_hat
    c5a6c30e6ee7a selftests/mm: thuge-gen: fix test_shmget() for PAGE_SIZE check
    b389dc35a5571 block: mtip32xx: synchronize ioctls with device removal
    b9cc6cc74daf6 ublk: avoid teardown retry loop on xarray allocation failure
    6220421b97296 ublk: reject non-power-of-2 zone sizes in SET_PARAMS
    b9c16db833e3f blk-iocost: clear delay state when freeing policy data
    02f1b90ab33ef blk-iolatency: clear delay state when freeing policy data
    d3d35dd045a35 null_blk: serialize configfs attribute updates with device setup
    c70994c2862b0 null_blk: serialize configfs attribute stores with the lock
    baff300541a00 null_blk: reject per-device queue resize for shared tag set
    0a3afab871241 null_blk: free zones array on device power-off
    081cf37e8a0e0 null_blk: free global tag_set on init error path
    cab9bf5f68f76 null_blk: register configfs subsystem after creating default devices
    234117949da3b null_blk: use DEFINE_MUTEX for the file-scope mutex
    c7bc5e7677bcd mailbox: riscv-sbi-mpxy: validate RPMI notification lengths
    c362e993e3a55 mailbox: pcc: Fix command timeout due to missed interrupt
    53281c3a89cf9 mailbox: rockchip: disable pclk on probe failure and unbind
    b3d73e7440e0c mailbox: qcom-cpucp: handle NULL data in send_data callback
    e40b3edeaf25c mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler
    f445e7be37ce1 perf dso: Replace assert with runtime check in dso__read_symbol()
    94d82e7a95b51 perf dso: Guard against cache underflow on short reads in dso_cache__memcpy()
    b3339e4bd7a13 perf dso: Use stored fd error instead of stale errno in file_read() and file_size()
    2482a7b86a2bd perf dso: Guard close() against invalid fd in dso__decompress_kmodule_path()
    bd98711ed867e perf dso: Guard against errno==0 when dso__get_filename() returns NULL
    a0161780a0b89 sched_ext: Make SCHED_CLASS_EXT select GENERIC_ALLOCATOR
    ed30a1892c630 sched_ext/scx_flatcg: Fix cvtime true-up on slice expiry
    97bdcf58c0d6d sched_ext: Drop unlocked scx_rq_clock_invalidate() from scx_root_disable()
    9e099588ee6aa crypto: lskcipher - propagate errors from unaligned crypt
    ed9ab15652c24 crypto: hisilicon/sec2 - fix CCM algorithm long packet failure
    9eb64cfc95542 selftests/sched_ext: Fix flaky ddsp failure tests on busy systems
    69f5815a0910b bpf: Fix pending_pos walk on 32-bit ring position wrap
    10158c8aa7bb9 selftests/bpf: Fix selftest build after filter.h update
    c98a1abbda871 ACPI: scan: Use acpi_bus_get_primary_device()
    c9d202d3b6c28 ACPI: platform: Use acpi_bus_get_primary_device()
    5657859851abb ACPI: bus: Introduce acpi_bus_get_primary_device()
    0b9053cd0955c ACPI: scan: fix bus ID cleanup on device_add() failures
    6f21453927d0a ring-buffer: Remove trace_buffer::cpus
    71dbd143be598 riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args
    e62b867143ef8 bpf: Fix arm64 KASAN false positive after bpf_throw
    a3e6a9bd5ee8a selftests/bpf: Use ping_command() for IPv6 pings in lwt_ip_encap
    aa7200c77b8b6 HID: tmff: Use 64-bit arithmetic for force feedback scaling
    351cdfcd097d0 HID: multitouch: reclassify HTIX5288 to WIN_8_FORCE_MULTI_INPUT_NSMU
    72d0b77412aef ASoC: SOF: validate topology volume range before allocation
    3c44b8673baba tracing: Have trace_event_update_all() only handle module that is loading
    2d92c250815cb HID: haptic: don't write an uninitialized value to unhandled usages
    7d9b5e86775fa ALSA: core: Fix use-after-free in snd_card_do_free()
    2b9a0e57bfd36 fs/ntfs3: reject out-of-range evcn in mi_enum_attr()
    169383d8914b8 fs/ntfs3: fix integer overflow in MFT cluster validation
    fa4168538494c bpf, arm64: Fix stack-passed arguments for indirect trampolines
    9b65b0253ad5a net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race
    c52f3c102687b scsi: ufs: core: Set task state before io_schedule_timeout()
    e2cd23443d361 scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers
    319324b5fbb29 selftests/bpf: Fix for veristat file/prog filters processing
    e4afd90bc7bf3 Squashfs: check block offset is not negative
    1222f7a3183b3 ocfs2: fix circular locking dependency in ocfs2_init_acl()
    418e0ae42fa76 ocfs2: validate DIO orphan slot during inode read
    3d7c4b7ce7b4b ocfs2: validate orphan slot during inode read
    b262056695e89 bpftool: Fix double close in map dump
    97bc6e3f5f9ac x86/pkeys: Fix pkey_alloc() return value when pkeys are not supported
    404b2a460566b selftests/cgroup: Preserve CPU hotplug write errors
    2c23fc91789df nvmet: fix max_qid race between configfs and controller allocation
    282a3ef9e4b63 ALSA: seq: midi: Serialize input teardown with event_input
    67461b9113e74 ALSA: seq: midi: Optimize event_input locking with RCU
    63730818d3618 clocksource/drivers/armada: Unwind timer clock on init failure
    7eb5764d25c4a clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type
    e4764fa09a2e3 clocksource/drivers/clps711x: Do not unmap clocksource MMIO
    54e1259b75d64 s390/debug: Fix deadlock during unregister
    e9ba3132a9edc xenbus: Unregister reboot notifier on init failure
    811fdac2d1bdf sched/isolation: Defer freeing of cpumask memblock memory to initcall
    b33197aef2349 selftests/namespaces: Fix racy pipe handshake in timens and pidns_separate
    65c3939656fd7 bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure
    7edb0248f4ff5 selftests: drv-net: so_txtime: fix qdisc replace with handle
    6dd217e218d47 power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address
    17d2a9ef48d09 power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address
    fd7aa80ecf69a power: supply: bq27xxx: bq27520g4: fix REG_TTES address
    4492288889b97 power: supply: bd99954: Drop bad register fields
    c18d09a1012bb power: supply: bd71828: Do not hide errors
    513cdd61debdd power: supply: bd71828: Drop duplicate power-supply property
    80091fbba3e92 power: supply: bd71828: Fix current direction
    367b8a8860e75 power: supply: bd71815: Fix temperature reading
    101cd6f729229 objtool/klp: Fix .kcfi_traps special section extraction
    4e8a940c31539 objtool/klp: Fix vmlinux .klp.symid link error for .exitcall.exit symbols
    01923107661a4 PCI/ASPM: Disable/restore ASPM on every function for multi-function devices
    bcbcbd0370e67 spi: img-spfi: don't disable runtime PM on DMA deferred probe
    6b6007e96d62a ASoC: spacemit: advertise only DMA-backed DAI streams
    0a2129953aea8 selftests/bpf: vmtest.sh: Preserve command quoting when running in the VM
    817ad6d29cbc8 selftests: harness: Mark test fixture objects __maybe_unused
    44b702fceb4cf bpf, s390: Clear fetch destination on faulting arena atomic
    84fac27c0ca3e bpf, arm64: Clear fetch destination on faulting arena atomic
    5eb3ff6a3bf27 bpf, x86: Clear fetch destination on faulting arena atomic
    6465c2c0f1e34 bpf: Derive the atomic load register in one place
    840f727508152 bpf, riscv: Clear fetch destination on faulting arena atomic
    82b97be6a478e kunit: tool: fix _list_tests filtering wrong variable when list has TAP prefix
    7e2ee531560e0 drm/amd/pm: silence uninitialized variable warnings
    e87e015f44f15 perf build: Remove leftover feature tests for removed cxx and clang support
    20ed93f1fd576 backlight: ktd2801: Fix unmet dependency on GPIOLIB
    d32a47e7cda71 backlight: aw99706: Validate all DT property values consistently
    43ba7cdff6dd4 mfd: cs42l43: Fix regmap defaults ordering
    829539c4a6505 arm64/efi: Avoid voluntary preemption with efi_mm installed
    fdbdc5c016a81 iomap: iomap_bio_read_folio_range_sync is missing a call to bio_uninit
    778f6a8070511 super: fix dying superblock warning messages
    ef34de895dfd7 PCI/ASPM: Use pcie_capability_clear_and_set_word() for ASPM disable/restore
    f024208da64d3 objtool/klp: Fix relocations for EXPORT_SYMBOL_FOR_MODULES() symbols
    d4ae0baea6d68 objtool/klp: Don't match local symbols against exports
    a8efbd6bd582a objtool/klp: Fix cross-module klp relocation section naming
    6a990e74d4e84 firewire: core: fix memory leak in error path of build_tree()
    727013e31478e firewire: core: validate parent port count before allocating nodes in build_tree()
    3f3980920f021 firewire: core: consolidate port counting in build_tree()
    75c00ce4049c9 firewire: core: add KUnit tests for failure of tree building
    a41a7dd31c4ab firewire: core: add KUnit tests for successful tree building
    0e86ed95eda9c firewire: core: add KUnit test skeleton for node tree
    6d9c3ae59c7f7 UBI: fix two issues in the ubi.mtd MODULE_PARM_DESC
    4e0ce77df7d98 ASoC: xilinx: formatter_pcm: fix stream_data leak on open error
    851c5e9a829d5 mtd: ubi: Release device reference on busy detach
    ec3fffb06a3f5 objtool/klp: Ignore replacement offset of empty x86 alternatives
    ab0648f06367f objtool/klp: Fix size of empty special section entries
    ba20c5bb872cd objtool/klp: Fix vmlinux .klp.symid link error for .no_trim_symbol symbols
    87b3da4acb860 ubi: Fix rollback for explicit UBI device numbers
    6424b9cde9edc bpf: Compare iterator types during state pruning
    07697272bfacd UBI: fastmap: Pass to_be_tortured when reusing old fastmap PEBs
    41033f8d870bf UBI: Preserve torture flag when rescheduling failed erasures
    4302bc71ace16 ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready
    c1829705803a5 ASoC: pxa: Use devm_clk_get_optional() for extclk clock
    5eab61a483f4b idpf: add missing cpu_to_le32 in idpf_tx_splitq_build_flow_desc
    57715e257c8a5 ice: acquire NVM lock around each flash read
    dfa94b403e69a ice: clear the default forwarding VSI rule when releasing a VSI
    dc0234c8c5730 ice: fall back to SBQ when LL PHY timer interface times out
    64a2bd4cfc16c RDMA/cma: Fix WARNING in res_to_rt
    ea41b5630fa3d RDMA/cxgb4: Free debugfs on registration failure
    068122750ee8a dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal
    99c91dca54a6c phy: rockchip: samsung-hdptx: Handle uncommitted PHY config changes
    c4506784a95ce phy: rockchip: samsung-hdptx: Fix rate recalculation for 3.2GHz FRL
    0a111684ed663 phy: rockchip: samsung-hdptx: Guard against clk rate integer underflow
    877657310a66b phy: rockchip: samsung-hdptx: Prevent divide-by-zero when computing clk rate
    b6823d7f95abc phy: rockchip: samsung-hdptx: Fix rate recalculation for high bpc
    6e6e471eef1d5 ALSA: seq: Don't leak the extension cell pointer in the bounce payload
    7d44b897bff84 nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing
    3ea115646abfd nfc: digital: Do not dump a NULL response in command completion
    3e7a093c177f9 nfc: pn533: hold a reference to the request skb during send_frame
    eeb16fb24cfe6 nfc: llcp: bound SNL TLV parsing to the skb and add length checks
    ee08414d78b85 nfc: nci: fix double completion race in nci_data_exchange_complete
    d1b73962675cd nfc: llcp: read llcp_sock->local under the socket lock in getsockopt
    bd6f1277b62bc nfc: llcp: avoid userspace overflow on invalid optlen
    6d8926debeb9d hrtimer: Account nr_retries on recovered interrupt retries
    ece3da898ef56 nvme: reject passthrough of driver-managed Set Features
    b116e9dae433f nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()
    0b4cf43f9ca71 nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()
    ad75556bde3ce nvme-apple: Drop the PRP null check chicken bit
    e019219309813 nvme-apple: Require page aligned buffers on the admin queue
    9650fd559f97f nvme: Add a quirk for page aligned admin queue buffers
    03fd8591e90a5 nvme-apple: Never set the opcode in the NVMMU TCB
    3bda132d063e6 nvme-apple: Don't set a DMA direction for commands without a data transfer
    c11685ee4eedc nvme-apple: Destroy the admin queue on removal
    7b81e4d2230e3 nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()
    f6374ec9a3443 s390/irqflags: Add out-of-line definitions of arch_local_irq_*() for KMSAN
    7954540e49ffb arm64: bti: Disable in-kernel BTI with recent versions of Clang
    78ac8fc22b12f ASoC: qcom: q6apm: keep the graph start count in sync with the DSP
    b5fb0376c773d spi: sprd-adi: Fix probe succeeding without registering the controller
    49a61174186be arm64: entry: Avoid unnecessary local_irq_disable() on kernel exit
    fdda85094b2f6 phy: qcom: qmp-combo: Drop qmp_v4_calibrate_dp_phy
    8dda7211be1ea phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs
    8ecad7d61482f phy: renesas: rcar-gen3-usb2: Ignore missing VBUS regulator
    2041b75c123fe rust: uapi: replace direct asm-generic/ioctl.h include with linux/ioctl.h
    ddddf034ac0e7 iommu/amd: Fix incorrect device ID in invalid PASID error message
    7da0bdf0610f6 apparmor: fix unconfined user namespace restriction forced stack
    4b835e45a4bb3 powerpc/configs: enable CONFIG_RAS to fix EDAC support
    db7c3ced1fe8f selftests: drv-net: so_txtime: only send test traffic to sch_etf
    ab7891cab3f11 selftests: drv-net: Test queue stall upon reconfig
    8dd136173106c PCI: ultrarisc: Get and enable DP1000 PCIe controller clocks
    e1dc0af719a25 amt: Don't support cross-netns setup.
    98518a8312dc1 pinctrl: rockchip: Decode drive strength in the get function
    608816b886a22 selftests/sched_ext: Check skeleton open failure in exit test
    972d037f00464 selftests/cgroup: Avoid awk -e in cpuset tests
    3f3811bacd93f cgroup/cpuset: Use WRITE_ONCE() for shared prs_err updates
    79fb405966edb nvme-pci: release descriptor pools on probe failure
    cead174d42421 nvmet: propagate percpu_ref_init() failure in nvmet_ns_enable()
    480f6b92c914b nvmet: fix Reservation Register Replace for unregistered host with IEKEY
    92533e49fe3c4 NFS: Return a delegation the client fails to record
    d8f0b83753809 sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
    eb476289c12cc SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6
    3039101d61bbd hwmon: (pmbus/ltc4283) Add missing MODULE_DEVICE_TABLE for OF match table
    bf3d173e1c410 hwmon: (cros_ec) Synchronize EC access from the thermal device callbacks
    2a1828d693e61 hwmon: (cros_ec) Store the hwmon device in cros_ec_hwmon_priv
    a098347049660 hwmon: (cros_ec) Register the thermal devices after the hwmon ones
    08d4a5f731b33 arm64: Disable KCSAN instrumentation in delay.o
    16fb33a8a323f xdrgen: Fix opaque and string encoders for unbounded members
    621d4bba8f4c6 xdrgen: Add XDR width macros for short integer types
    5585954164f50 xdrgen: Do not declare union XDR functions in the definitions header
    af0f6fb2a2f93 xdrgen: Emit a blank line ahead of enum declarations
    7ea29e2bffffc lockd: Regenerate NLMv4 XDR code
    0a7908d48ea04 nfsd: add protocol support for CB_NOTIFY
    7458727fd7cb7 NFSD: Release the export reference when reaping open stateids
    af3fe52fd108f netfilter: nft_ct: move custom expectation support to helper
    1e694ac22ef2c netfilter: nft_ct: support expectation creation for natted flows
    026f7f91de39b m68k: Fix backtraces for non-running tasks
    74669cc3483e9 media: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error path
    a1f8750668e55 media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem()
    8cd13087eb57d hwrng: imx-rngc - Disable clock on registration failure
    7c7d3e51c2903 crypto: qat - remove dead ADF_HEX code
    2a3c526c7554c crypto: qat - use 2-arg strscpy where destination size is known
    5baddf100b3be iommu/vt-d: Flush context cache with correct SID when tearing down aliases
    db5daf25f754c iommu/vt-d: Tear down scalable-mode context on probe failure
    143cd37ce7652 iommu/vt-d: Fix iopf_refcount leak on RID domain replacement
    6b822d18c33af iommu/vt-d: Clear Present bit before tearing down copied context entry
    a45f0b5eaac6b iommu/vt-d: Fix UCTP context table slot when copying root entries
    2af1e99ec14d2 iommu/dma: Restore locking around msi_page_list
    9562653261393 fbdev: clps711x-fb: Remove unreachable unregister_framebuffer() call
    7bf36dc23bcf3 fbdev: kyro: Validate overlay viewport coordinates
    4b2c707bf5b1f fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device()
    ef79a405f8399 apparmor: fix integer overflow in verify_tags() bounds check
    b518c2468d91a perf synthetic-events: Fix divide by zero in perf_event__synthesize_threads
    8340726a60aa6 perf python: Fix memory leak in pyrf__metrics_cb
    31245887b0e0e perf python: Fix count_values memory leak in pyrf_evsel__read
    9cd2a9a5fd744 perf python: Validate attribute setters in pyrf_evsel
    a05972af8e9aa perf python: Validate CPU and thread maps in pyrf_evsel__open
    1f8f4e482af32 perf python: Handle Py_None for thread and cpu maps
    3d34725649fa6 perf python: Check counts_values size in set_values
    41579b30c2fd7 perf test: Fix skiplist leak in cmd_test
    7e0cf79cd2f9c perf synthetic-events: Fix uninitialized pthread_join
    cf34a68e9adaa perf python: Fix memory leak in pyrf_evlist__get_pollfd
    fbf8dc5170dae perf tools: Fix sb_evlist leaks in top and record
    b0756b5be7298 perf stat: Fix evsel_list leak in cmd_stat
    acf06e025eea4 perf script: Fix metric_evlist leak in script_find_metrics
    a52414ecdbe6f ARM: dts: helios4: add SATA regulator supplies
    e16bf98706185 ARM: dts: helios4: add vcc-supply to GPIO expander
    8d976901462c1 ARM: dts: helios4: add vcc-supply to EEPROM
    393d33d5d54c2 arm64: dts: turris-mox: fix usb3 phys
    d1409d203251f i3c: renesas: Don't register devices when ENTDAA times out
    869ecb1312921 i3c: renesas: Follow a unified pattern for transfer and command initialization
    739eb8ac160db i3c: renesas: Return immediately if there is no transfer
    051f2da26ce37 bpf: Fix mmap_lock leak in irq_work path
    3f45d8358e01f riscv: cpufeature: Clarify ISA spec version for canonical order
    dc8b33b819cb0 net/sched: cls_api: fix teardown of an adopted proto on insert-race loss
    0ffd3e983069b iio: light: gp2ap002: re-enable irq if runtime suspend fails
    470edb012b1d9 iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes
    38c077c815901 iio: light: opt4060: Fix pointer type passed to div_u64_rem()
    12feca1268315 bpf, cgroup: Fix storage null-ptr-deref after replacing prog
    bf8f635531232 pinctrl: fix PINCTRL_GENERIC_MUX not always being selectable
    63562cfaea8a6 Bluetooth: MSFT: validate evt_prefix_len against the response length
    22624d43fd737 Bluetooth: btmtksdio: fix usage_count leak when autosuspend_delay is negative
    481533b039851 Bluetooth: MGMT: free the HCI command when it is cancelled
    fa46d428c014e Bluetooth: MGMT: free the mesh send cancel command when it is cancelled
    bb5ca1cc7744c Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths
    4d7b1c834d277 Bluetooth: hci_conn: fix the SCO setup context lifetime
    f2b586d65f90c Bluetooth: btintel: Fix diagnostics event detection
    b495a3a9b33bc Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind
    84ea9c9987480 Bluetooth: virtio_bt: avoid OOB read of build info string
    1499d5e7e2cf1 pinctrl: airoha: fix edge-triggered interrupts handling
    afd4d7aabb01c pinctrl: airoha: fix IRQ mask/unmask code
    2c968c11592b4 pinctrl: airoha: add missed IRQ resource helpers
    eb2587a252784 pinctrl: airoha: fix getting gpiochip/pinctrl pointers in the IRQ handling code
    f385f3d3248f0 pinctrl: airoha: add missed get_direction() function for gpio_chip
    10e890b305e61 pinctrl: airoha: an7583: fix spi group pins
    458b07ec42819 pinctrl: airoha: an7583: fix muxing of non-gpio default pins
    3fe11ae08e8cd pinctrl: airoha: an7581: fix mux/conf of pcie_reset pins
    ce7710c1151d7 pinctrl: airoha: an7583: fix I2C0_SDA_PD register bit order
    229b61b5b2098 pinctrl: airoha: an7581: fix pinconf of i2c_scl/i2c_sda pins
    dec9a98b444f4 pinctrl: airoha: fix mdio bitfield names
    64c6f46708f17 perf sched: Handle missing trace samples in pipe mode
    01bcff1241368 perf sched: Suppress latency table output when trace samples are missing
    c4c136555ff90 btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()
    91ed75a0a0cb0 btrfs: use aligned range for locking in extent_fiemap()
    98e3747587f9f btrfs: zoned: don't clobber the extent buffer when zeroing it out
    e2de2989adb3e btrfs: zoned: flush active metadata block group at btree_writepages() start
    81241f734f0f6 btrfs: retry verity reads for not-uptodate Merkle folios
    e6045f6e8d869 btrfs: replace writeback inhibition xarray with a fixed inline buffer
    d5602f96ff1e2 btrfs: check if root is readonly when setting posix acl
    2073f3d97b0c5 btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock
    aaac9b352f7f5 btrfs: always wait for ordered extents to avoid OE races
    ac916391e1c70 btrfs: defrag: fix deadlock between defrag and delalloc space reservation
    8249dfe46337d btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge
    6da989018eee3 scsi: sd: Fix sd_done() sense handling condition
    5d7d1b8b525e5 scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails
    748a14a0d41cf scsi: sd: Fix error handling in sd_probe() after large pool creation failure
    56e547a31acee perf trace-event: Fix integer truncation in do_read() and skip()
    077c42c5c04fb Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices
    42deed40dd99f Bluetooth: btusb: Record matched usb_device_id into btusb_data
    dce459875be52 Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855()
    19f65ea34a539 Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event
    35d534234e249 sched/fair: Check CPU capacity before comparing group types during load balance
    1d3880877efe0 sched/fair: Also gate overloaded status update for SD_ASYM_CPUCAPACITY
    304844b5545f4 perf/x86/intel/pt: Fix stop/start with no update
    55a5bc0de3b4c perf/x86/intel/pt: Use bitwise access for PERF_HES_STOPPED
    b7402b47cb08b perf/x86/intel/pt: Factor out pt_config_enable()
    f0f512b8d9ee7 ACPI: video: Release PCI device reference after lookup
    1b58cfd22ca04 thermal/drivers/spacemit: Validate clamped trip thresholds
    ec320af6cc1ed ACPI: PCI: Avoid misleading _OSC messages for non-PCIe host bridges without _OSC
    0afe0cf203a95 ASoC: tas675x: sort the register default table
    d321dc10e4b02 regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling
    b6fc0825df46a bpf, arm64: Fix exception table metadata for arena load-acquire
    76b16abbc5ea1 bpf, x86: Fix exception table metadata for arena load-acquire
    a7dad4c69e5f2 bpf, riscv: Add and use bpf_atomic_is_load_acq() helper
    5f8ade6e9b793 bpf: Reject load-acquire from pointers requiring fault protection
    7d199b6a0651a arm_mpam: Disable driver unbind to avoid UAF
    a29044c9c8351 arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt
    988e11b69ef9d perf: arm_pmuv3: Zero initialize hw_id branch stack field
    7e4f2702bbadb coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable
    275466e3b95b2 coresight: etm4x: fix leaked trace id
    5ac900f73ce1d coresight: etm4x: fix underflow for usage of (nrseqstate - 1)
    8a0c540e0901d coresight: etm4x: fix wrong check of etm4x_sspcicrn_present()
    b6ec4bf1ec444 md/raid1: don't set array_frozen in raid1_takeover()
    bb7f92d58fca9 md/md-llbitmap: stop daemon timer rearm on destroy
    2f0722435ce3a md/md-llbitmap: prevent create failure bitmap UAF
    35b27002ae9c4 md: avoid stale clone I/O accounting timestamps
    4224dccd325a9 md: wait for behind writes before destroying bitmap
    ccbdc483eb041 md/raid5: round bitmap stripes with sector division
    0fef3967ccb8e phy: qcom: qmp-pcie: Add pcs_lane1 offset to V5 offsets
    03455404fb6cb phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend
    b85bbec72fa81 phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend
    0f9789d1b63e7 phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend
    328cf94be9115 phy: qcom: sgmii-eth: vote for both voltage rails with correct current loads
    fae5aba953686 soc: fsl: qe: check platform_driver_register() in qe_ic_of_init()
    a22464c5df582 ext4: fix transaction overflow during writeback
    c391af5743a44 ext4: teach ext4_meta_trans_blocks() about number of allocated extents
    53f2e4d2b896e selftests/mm: unpoison pages in memory-failure teardown
    dc2bd517ac0bc hugetlbfs: release subpool on fill_super failure
    7bfae60ab7a53 pinctrl: rockchip: Restrict the RV1103B 2-bit drive type to bank 2
    ab698d7710b47 pinctrl: rockchip: Reset the pin count when recalculating SoC data
    1b10015957a63 pinctrl: tegra264: fix DAP2 DIN/DOUT pin assignment
    fb4824880b0db firmware_loader: do not queue completed sysfs fallback requests
    0e4b5f8cad67e scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path
    39de65117fd9c PCI: cadence: Fix host/endpoint dependencies for cadence-plat driver
    e399e9d7e291c drm/amdgpu/gfx6: Use PFP on the compute queues too
    57a9b737e7939 drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets
    36c99db9f364a perf trace-event: Fix buffer overflow in read_string()
    ece5ad121b2ac phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table
    5acdc4d5b58bd phy: sunplus: fix error handling in sp_uphy_init()
    5374f3d53376d phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure
    935f6e837a83b phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator
    3f2828c4788ae arm64: dts: ti: k3-am64: Fix MDIO clock reference for ICSSG0 node
    33145914688ed ALSA: hda: cix-ipbloq: Avoid build with 32bit archs
    5826db2ddddb6 ext4: fix spurious message about orphan cleanup on RO fs
    0fa116a17b69a drm/amd/display: Resize MST HDCP per-connector arrays to 32
    6e26232294dbc drm/amdgpu/gfx6: Fixup emit_cntxcntl()
    61b45f9be60cc leds: gpio: Clear error pointers for skipped LEDs
    ad50c2c550ff2 mfd: macsmc: Fix key count endianness annotation
    ad32c823abfb8 drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12
    7b5f4362c41ac drm/gfx12: Program DB_RING_CONTROL
    e54c7a2bce63d mfd: iqs62x: Reject zero-length firmware records
    f81bcb7e83be1 tools: Ensure tools copy of linux/filter.h exports the UAPI
    15327f1eb9cc9 mfd: rave-sp: validate received frame payload lengths
    77053624d0335 arm64: hibernate: Restore DAIF state on error
    d736ace2c4916 arm64: hibernate: mask DAIF before restoring hibernated kernel
    be919eed5e52a wifi: mac80211: skip default WMM setup for AP_VLAN links
    8351d66344237 RDMA/erdma: restrict the driver to little-endian systems
    cd2396fc9684d module/dups: Fix use-after-free in kmod_dup_req lifetime handling
    2bdd4d5d2cae6 module/dups: Inform duplicate requests about the result directly
    5ede61dc58fd3 module: use strscpy() to copy module names in stats and dup tracking
    561651d6a1558 RDMA/siw: Fix use-after-free in siw_accept()
    ad4492dcaf90a IB/isert: post the full-feature receive buffers after session registration
    4397ea31e3b0d IB/isert: delay the final Login Response until the session is registered
    545461671497c soundwire: cadence_master: add BRA_NumBytes[8] support
    55516986a3d81 cpufreq: imx6q: fix out-of-bounds write when probed more than once
    0f77d1a0a2505 cpufreq: imx6q: fix devres accumulation across driver rebind
    35a125c9abbf7 rust: cpufreq: Fix temporary write in Registration::bios_limit_callback
    04ac4e270e3d3 rust: cpufreq: Add CPUFREQ_TABLE_END as last table entry in TableBuilder::to_table
    eadc95c99cbe8 drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz
    e71206a8a1d97 drm/sun4i: Drop node references while building component list
    d9fb87926522d drm/sun4i: dw-hdmi: Drop TCON TOP port reference
    68e0643bb227a drm/sun4i: tcon: Drop remote endpoint reference
    c0d3219ffd4c0 drm/sun4i: crtc: Propagate layer initialization error
    ef396e92c50e5 drm/sun4i: hdmi: Don't leak sync polarity bits into packet control
    ae08a67bca781 drm/sun4i: tcon: Drop TCON TOP device reference
    eb1dc0e2c7acb drm/sun4i: tcon: Set output mux for DSI and LVDS
    ac9f274dac952 drm/sun4i: tcon-top: Keep mixer routes distinct
    a42daad53d09e drm/sun4i: vi scaler: Restore opaque alpha in video modes
    f587b2606d710 drm/sun4i: vi scaler: Fix coefficient selection
    4420c243e7892 drm/sun4i: Fix V3s YUV scanline size
    4dd6b79f7099c perf c2c: Clean up registered formats on c2c_hists__init() and c2c_hists__reinit() failure
    86f5cb2d1e612 perf c2c: Fix error masking, OOM, and unchecked caller errors in hpp_list__parse()
    510b305f35aa6 clk: rockchip: rk3576: fix source muxes for SPI0..SPI4
    976f1be72740c bpf: Fix sleepable check for tracing/lsm prog
    f523359c4789b bpf: Clear buf on error in __bpf_get_task_stack
    34cbcb333f30e bpf: Remove trace_in argument from __bpf_get_stack
    27ed6cf4c0ac5 bpf: Factor callchain_finalize function from __bpf_get_stack
    b61aacc66a1f6 bpf: Factor callchain_store function from __bpf_get_stack
    b5a2907bdeced ocfs2: o2hb: quiesce negotiate handlers and timeout work
    073f51e39bed3 ocfs2: synchronize heartbeat callbacks with o2net teardown
    2e689bb5643cf perf libbfd: Fix memory leaks and NULL fclose in BPF disassembly
    61fab78599058 perf bpf: Add PROG_TAGS to required arrays in __bpf_event__print_bpf_prog_info()
    5161e7ef5b388 perf header: Use write lock when translating BPF prog info pointers
    731edc4d0d01b perf libbfd: Validate BPF prog info arrays before pointer cast
    8040663c1dfdf vfio/pci: Avoid mapping BARs for devices with non-mappable BARs
    720408d98d9fb ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults
    8d7cbc6df9632 ARM: 9484/1: enable interrupts when unhandled user faults are triggered
    8de56782d6e5b ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK
    da64b150e4b7b ARM: 9481/2: breakpoint: CFI breakpoints only on demand
    fa1b33fdab3e7 RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ
    c92686867638c RDMA/erdma: Hold QP references for AE and CM processing
    4545f355654d0 RDMA/erdma: Hold CQ references when processing EQ events
    795f70fe748bd kbuild: fix modules.builtin(.modinfo) targets in the top-level Makefile
    3c5adf387155a modpost: prevent leak when early return no suffix .o in read_symbols()
    f3b6624d94210 scripts/tags.sh: Prevent binary files appearing in cscope.files
    1b18270e3d881 intel_idle: Avoid using deep idle states during initialization
    36fb592af353c xen/xenbus: check otherend_id only after it has been initialized
    4fa8915f40f74 thermal: hwmon: Remove hwmon class device along with its parent
    422a416041172 bpf: Check load-acquire src ptr type before the load
    8fd17b394719a gpu: nova-core: correct FRTS vidmem offset calculation
    018169883d483 gpu: nova-core: clean up FSP FRTS comments
    b666585dfaf41 gpu: nova-core: factor out common FSP message header
    c93fc0f7ba188 thunderbolt: stream: Fix possible short reads/writes
    de9eac1099f10 thunderbolt: stream: Restore consumer if copying from iter fails
    ede92f86b6c45 arm64: dts: qcom: talos-evk: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    7b08069029696 arm64: dts: qcom: sa8155p-adp: Fix swapped USB and UFS QMP PHY vdda-phy/vdda-pll supplies
    458864b9ef1ca arm64: dts: qcom: eliza-mtp: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    c12cf2252ddee arm64: dts: qcom: lemans: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    4a65a0ffc748a arm64: dts: qcom: glymur: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    74d6524b34635 arm64: dts: qcom: kaanapali: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    eb262afc7231e arm64: dts: qcom: sar2130p: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    407b05cf21eac arm64: dts: qcom: sm8750: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    83db0e7a95f2f arm64: dts: qcom: sm8650: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    bfd0c3600b6ed arm64: dts: qcom: purwa: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    069f1a1523d02 arm64: dts: qcom: hamoa: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    8aad733a4bb88 arm64: dts: qcom: sc8180x: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    88ac1561a1ef2 arm64: dts: qcom: sc7280: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    a9783bec0db41 arm64: dts: qcom: sc7180: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    4cd993d91c8b7 arm64: dts: qcom: sm7225-fairphone-fp4: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    dfc8d77f80789 arm64: dts: qcom: qcs6490: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    221300448bd1d arm64: dts: qcom: qcm6490: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    93c1c78f9dc26 arm64: dts: qcom: qcs8550-aim300: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    85f59f34757bd arm64: dts: qcom: sm8550: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    64e223194230e arm64: dts: qcom: sm8450: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    d843ed6b412a6 arm64: dts: qcom: sm8350: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    d143fb29b0ca2 arm64: dts: qcom: sm8250: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    9063b2373ac8c arm64: dts: qcom: sm8150: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    1b3154a198b73 arm64: dts: qcom: sdm850: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    6071a3b06acef arm64: dts: qcom: sdm845: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    3db02fe87c95f arm64: dts: qcom: sa8540p: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    15ad83a26241e arm64: dts: qcom: sc8280xp-blackrock: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
    8d951c93e4b19 selftests/mm: fix ternary operator precedence in ksm_tests
    0df56ab44ecf0 selftests/mm: fix ksm NUMA merge test for systems with memoryless NUMA nodes
    cd3c3baaa2564 selftests/mm: handle EINVAL when configuring gigantic hugepages
    229ac37735167 selftests/mm: fix memleak in migration benchmark
    2c2218560b6e2 bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed
    6282d47b24b0c remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry()
    cd07aef510ac6 PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers
    2fae17fd4fe3a PCI/sysfs: Return -EINVAL for unsupported I/O BAR mmap
    fdfb3a1f5c06e ALSA: hda/realtek: ALC269 fixup for Yoga/Legion Mic noise
    8d8d3d4a6483e arm64: dts: qcom: agatti: Add missing CX power domain to DISPCC
    b681c740e6d64 block: handle nogenerate/noverify properly in fs-integrity
    7ccd6b6448cdc block: lift BIP_CHECK_FLAGS to include/linux/bio-integrity.h
    70af551b7fcdf block: remove bip_should_check
    6e959e7691c64 ublk: clear auto buf reg before updating io->buf in batch commit
    30810bdf273b4 drm/omap: dsi: Do not copy isr table
    04e4d18e7fea9 riscv: dts: sophgo: cv180x: Allow the DMA multiplexer to set channel number for DMA controller
    7ae71629357d0 bpf: Invalidate RCU pointers after final spin unlock
    7565e44507634 fat: release buffer head after rebuilding parent
    530a9d5ef831a rapidio: clear mport->net when rio_add_net() fails
    0e7459abff46e ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full()
    9f4129b6905b7 ocfs2: validate external xattr entries when reading metadata
    3fd45b24879fa ocfs2: validate inline xattrs during inode block validation
    67201231eeccd pps-gpio: remove dead capture_clear code
    77a6bdb97e02a pps: pps-gpio: split IRQ handler into hardirq timestamper + threaded handler
    a31e768d2e4af pps: don't try to wait for negative timeouts in PPS_FETCH
    13d0dfd5d5f35 lib/string: fix memchr_inv() for large ranges
    70d7bb7a0be03 ocfs2/cluster: keep heartbeat local node stable
    653d22269a8b8 ublk: validate auto buf reg before taking uring_cmd
    af9a009ed4967 ublk: check for ublk_unmap_io() returning 0
    5ac6019cb78e9 ublk: check import_ubuf() return value
    b783da6e32c27 block/kyber-iosched: flush per-cpu latency buckets over possible CPUs
    7a578afab9e93 block/blk-iocost: collect per-cpu latency stats over possible CPUs
    29db15ba44936 block/blk-iolatency: account per-cpu latency stats over possible CPUs
    834fbb747ced4 block/blk-stat: drain per-cpu callback stats over possible CPUs
    d8c872901e645 blk-cgroup: skip dying blkg in blkcg_activate_policy()
    2cf9f50a38c18 blk-cgroup: fix race between policy activation and blkg destruction
    f97022fefe6eb phonet: pep: do not write beyond optlen in getsockopt
    c20cf591d9231 net: stmmac: Skip PHY attach if custom PCS is in use
    3ad0fd538503a iio: light: tsl2583: return zero in write_raw() on success
    0649178f3cedb iio: light: isl29028: return zero in write_raw() on success
    fe73809bc314f iio: light: tsl2772: fix ALS calibscale readback
    b75ee915ab99f perf arm-spe: Reject zero nr_cpu in metadata to prevent division by zero
    e258979168447 perf intel-bts: Fix off-by-one in auxtrace_info minimum size check
    bbf8a944b007c perf intel-pt: Fix off-by-one in auxtrace_info minimum size check
    68b37d885e886 perf auxtrace: Fix queue grow overflow and old array leak
    d18a40a72b502 perf thread-stack: Fix heap buffer overflow on branch stack wrap copy
    ef81d735d5796 HID: lg4ff: validate report length before fixed offsets
    d10a68ac87683 HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure
    b5fc0267ed840 HID: sony: add missing __packed to struct with static_assert()
    93c5cc35bcd9f HID: steam: Reject short reads
    dc766ca718ab5 HID: steam: Improve logging and other cleanup
    fdc4ef7a4bfe7 HID: steam: Add support for sensor events on the Steam Controller (2015)
    5181f83da9227 HID: steam: Rename some constants that got renamed upstream
    de102444a5385 HID: steam: Refactor and clean up report parsing
    7b5ae8d815f7a HID: i2c-hid: Fix "(null)" output when reading report descriptor fails
    b85d1000eb884 HID: synchronize input before cleaning up a failed probe
    4eff0ad8128b8 HID: i2c-hid: Refactor _DSM helper and add i2c-hid-acpi-prp0001 driver
    13378c9ac0a1b HID: logitech-hidpp: Fix FF device cleanup on init failure
    5c288cc441a2c HID: asus: fix a off-by-one in mcu_parse_version_string() validation
    744b3f930c117 HID: asus: refactor the two workqueues and init sequence
    b712b4135ce45 PCI: dwc: ep: Fix unmap potentially unmapping the wrong iATU
    5aed69e20fd3d platform: arm64: qcom-hamoa-ec: reject incomplete responses
    914704c7b318b PCI: dwc: ep: Flush cached MSI write before unmapping the iATU
    79588f2c75494 misc: pci_endpoint_test: Check SUCCESS bit for doorbell status
    6228722c27304 dm-integrity: replace forgeable discard filler with a keyed sector marker
    5c5a795bf6248 tty: clear cdev pointer after cdev_add() failure
    3dbf85ef40b63 tty: skip cdev_del() when no cdev is registered
    06b376432974f serial: core: clear freed pointers on uart_register_driver() failure
    c2aec15f78b2e serial: core: do fallible allocations before the console can be registered
    2ad24c1d0b939 serial: amba-pl011: keep console clock enabled for atomic writes
    0bcf3335dd3b4 serial: amba-pl011: unprepare console clock on unregister
    10232a59e076a MIPS: ptrace: Fix syscall skipping via PTRACE_SYSCALL
    6390b2a352fcf soc: fsl: qe: implement get_direction()
    77159db9c6f1c soc: fsl: qe: properly scan GPIO nodes at startup
    7b0093b638c8f powerpc/irq: Fix missing r2 clobber in PCREL inline assembly
    066e5e9962dd4 powerpc64/bpf: Fix build break for arch_bpf_timed_may_goto
    ce39762511209 powerpc64/bpf: Fix build break in bpf_jit_emit_func_call_rel()
    19b54740e2e11 powerpc/syscall: Fix syscall skip handling for seccomp and ptrace
    de2d453f6f71d powerpc/smp: add NULL guard for cause_ipi in smp_muxed_ipi_message_pass
    c554a8d376d5a powerpc/xive: propagate IPI init errors to prevent use-after-free
    e4c0451aa6154 powerpc/xive: add error return value to xive_smp_probe()
    0a2be2ca7ad7b powerpc/xive: make xive IPI allocation NULL-safe
    7e4b44abf682b pinctrl: spacemit: validate pins in pinconf callbacks
    09f47abc95ee9 pinctrl: generic: free maps on pinctrl_generic_to_map() failure
    9ab072a1469f1 pinctrl: eswin: Fix Handling of PIN_CONFIG_PERSIST_STATE
    91a6f4283099c objtool/klp: Fix symbol resolution for duplicate data symbols
    9f08c40740410 objtool/klp: Add .klp.symid for sympos disambiguation
    20938e167757d objtool/klp: Fix false module dependencies caused by dead relocs
    8844c2efd92ca objtool/klp: Normalize Module.symvers paths to module names
    ce962f04312fa objtool/klp: Fix module name normalization for paths with dots
    e82f260a74dea firmware: coreboot: Validate table bounds
    af8087f16714f bpf: Fix mmap_lock deadlock on arena lock failure
    db3439ad11ac5 wifi: cfg80211: stop PMSR before P2P and NAN teardown
    eef374088450b wifi: mac80211: disconnect on CSA to channel 0
    f26e1b1690455 wifi: brcmfmac: fix P2P action frame handling without device vif
    5f00970da7da0 perf build: Fix a build error on 32-bit x86
    cb04dd061d333 wifi: mac80211: skip unused probe response countdown offsets
    ef65c02a5a1fa wifi: zd1211rw: reject secondary interfaces to prevent conflicts
    4e0a67fbe3d9e wifi: nl80211: clean up color-change beacon data on errors
    c8ae335c4823e wifi: mac80211: send TWT teardown to peer after setup TX failure
    40120891f29d5 perf/cxlpmu: Fix 64-bit write to 32-bit HDM filter register
    6a1e24977e503 iommu/arm-smmu-v3: Convert to use atomic poll timeout
    88493d0d4c81e kselftest/arm64: Don't write to P0 in irritator on SME only systems
    f433869f23841 arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry
    b568c2097a690 kselftest/arm64: fp-ptrace: Fix checks for inactive SVE and SSVE regsets
    b19c3fd8e2abb arm64/fpsimd: ptrace: Fix inactive SVE and SSVE regsets
    bd89a1988f44d arm_mpam: Apply T241-MPAM-6 to 63-bit counters
    6e61b07c34874 arm64: smp: Fix IPI teardown for GICv5 flow
    0bd829443a50b wifi: mt76: mt7996: remove beacon_int_min_gcd from ADHOC interface combinations
    045d1bfb72d26 wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump
    c770e7da8cebd wifi: ath12k: fix encrypted EAPOL TX in encap offload mode
    aff81505a84d2 wifi: mt76: mt7996: fix out-of-bounds link array access in mt7996_tx()
    c1442c345ca8d wifi: mt76: reject out-of-range link ids in mt76_vif_link()
    626dce25666a8 wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum
    fa496e89e01cf wifi: mt76: fix queue assignment for disassoc packets
    c2dfb099ca941 wifi: mt76: mt7915: report RX chain signal for all RX paths
    42082f42969a3 wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1
    2c488baccd973 wifi: mt76: mt7996: do not leave state behind after a failed WED attach
    d566387df8306 wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed
    865c798933a03 wifi: mt76: mt7996: fix reg addr remap when addr is 0
    fb9c7b4c238b4 wifi: mt76: mt7915: release hif2 reference on probe IRQ failure
    648f5f03ff50d wifi: mt76: mt7915: fix ext PHY use-after-free on register error path
    29fbc5256c2d8 wifi: mt76: mt7915: fix double hif2 init on the non-WED path
    9e02b1cfb163b wifi: mt76: mt7996: fix MIB TX aggregation counter registers for mt7990
    60eb18612d216 wifi: mt76: set MT76_SCANNING when starting a hw scan
    fc3762724a368 wifi: mt76: mt7996: clear stale link state on full reset
    8826d7a5e2dd7 wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset
    bb507affe9e23 wifi: mt76: mt7996: wake MCU waiters before aborting scan in L1 SER
    c667ec75881cb wifi: mt76: mt7996: skip key upload when adding an offchannel link
    beaa42b875965 wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement
    a6d7d7a253c55 bpf, x86: Fix trampoline stack size for 128-bit arguments
    d36ac53fc83ba bpf: Reject >8 byte return values on return-reading trampoline paths
    2b33064072c8c perf machine: Check snprintf truncation for guest kallsyms path
    8cd0affed95c6 perf machine: Free scandir entries in guest kernel map creation
    c2d36639d371c perf machine: Reset errno before strtol in guest kernel map creation
    2edeb8a9f07b6 perf machine: Don't abort guest map creation on first inaccessible dir
    f320fd080d036 perf machine: Check snprintf truncation in machines__findnew()
    e67b5cb76c5b9 perf machine: Guard against NULL strlist in machines__findnew()
    c760be5c9f1b7 perf machine: Fix NULL parent dereference in fork event processing
    bb43829acdf47 perf machine: Fix fd leak on bounds check in maps__set_modules_path_dir()
    201636c1cfd34 perf libdw: Fix outer-frame name resolution and spurious "(inlined)" tag
    da56e16f42930 perf unwind-libdw: Fix unwinding of multi-threaded processes
    cb8f0d60160be ASoC: SDCA: Add missing stub for sdca_fdl_free_state()
    29dc2e24f6adb regulator: core: use system_freezable_wq for init complete work
    cc6a0133c7495 arm64: tegra: Fix CMDQV interrupt type on Tegra264
    3a50428864437 ARM: tegra: Fix OF node reference leaks in IRQ init
    08331ff6fffad ASoC: tas2783-sdw: drop stale regcache on uninitialized re-attach
    bfa756f3b8bf8 ASoC: codecs: tas2783-sdw: Propagate regcache_sync() errors
    047a817147806 wifi: ath11k: fix leak in ath11k_service_ready_ext_event()
    00008e6f544c2 drm/msm/dsi: Drop dev_pm_opp_set_rate(0)
    e532b800728d7 drm/msm/dp: Drop dev_pm_opp_set_rate(0)
    54b17a858b8be drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0)
    8a3aee5143ea8 perf: arm_spe: Make wakeup range check overflow safe
    2350896a36b58 drm/msm/dp: do not reject wide-bus modes while a YUV420 mode is active
    c89d481a50de2 drm/msm/dp: reject YUV420-only modes without VSC SDP support
    e2a99fa93b400 drm/msm: don't tear down KMS twice when KMS init fails
    0f00f6848f6b6 drm/msm/dpu: Fix DMA SSPP REC block offsets on DPU v13
    182cd086b31ea ACPI: processor: Unregister cpufreq notifier on init failure
    1558c267b78b1 wifi: mt76: only consume the WO drop bit on WED v2 devices
    4087cff2389c9 wifi: mt76: mt7996: add missing rdd_idx check when enabling background radar
    2bcbbfaaa648d wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields
    e1383c17fb5d1 wifi: mt76: report data NSS for STBC frames in RX rate decode
    c4dc85481d389 wifi: mt76: cancel reset and rc work on device unregister
    ea69a378d77ca wifi: mt76: mt7996: don't leak MLD group index on remap alloc failure
    1a51aff0e048d wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV
    01e3d5707522e wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode
    5f9c09e948cea wifi: mt76: decode the full VHT Rx STBC capability field
    594c4b7f89f9e wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER
    71bf9de2ab3fb wifi: mt76: mt7915: unwind state on add_interface failure
    6ed0fba58bb12 wifi: mt76: fix out-of-bounds access in mmio copy helpers
    93eaddfdd35aa wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config
    e6a7cfe073191 wifi: mt76: fix HE DCM max-RU capability encoding
    fd5a8b049a7e5 wifi: mt76: check txfree done event on the WED hw path
    636ab58493fc2 wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie
    a273dc3b86a7d wifi: mt76: fix RXDMAD_C buffer recycling race
    a83bc76d17131 wifi: mt76: fix uninitialised RXDMAD_C descriptor info
    0fd0bad6248dc wifi: mt76: fix stranded frames in mt76_txq_schedule_pending
    a68447b884548 wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll
    93ce0dae8e770 wifi: mt76: mt7915: write RX header translation bit to the correct register
    7b47f11d6ce0f wifi: mt76: mt7996: don't report a zero TX bitrate
    ecfd1a07e78c3 wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss
    a97b2b942d2f8 wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear
    4b92027fd043a wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset
    b1c5cf8903bec wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[]
    1584fd436132c wifi: mt76: assign link_id when sending probe request during scan
    186c957ac3325 wifi: mt76: fix non-AQL packet accounting for MLO stations
    0a951ff6704db wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP
    db4be207f3f6d wifi: mt76: fix RX data queuing of RRO 3.0
    253b30a739ca1 wifi: mt76: mt7996: fix capability of EHT-MCS 15 in MRU
    a142565452eef wifi: mt76: mt7996: fix non-MLD station num_sta leak
    85a0d0bf97266 wifi: mt76: mt7996: fix EAPOL source BSS for non-MLD stations
    6a342db7a6502 wifi: mt76: mt792x: Fix memory leak in SDIO TX path
    27dbe86665dae wifi: mt76: mt7925: fix msg len mismatch between driver and firmware
    5cfd3d6078d91 wifi: mt76: mt7925: update clc before setting sar power table
    7b7060e262731 wifi: mt76: mt7927: set band index for sniffer mode
    f544bcba4721e wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash
    b250943f3f835 wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete
    0c46d22c30a16 wifi: mt76: add init_wiphy callback
    2691bf35cee6e wifi: mt76: mt7925: add NAN MCU helpers
    2ca99492a7bf7 wifi: mt76: connac: add NAN connection type
    d4029aab5be84 wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986
    ef0190f1fafa7 wifi: mt76: mt792x: stop USB register access after bus hang
    063169a2755ab wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()
    6def491fe9c4e wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length
    2e3549a038f10 wifi: mt76: connac: add MT7991A (0x7991) to is_mt7996()
    3b052a39c4650 fanotify: report full event length for FIONREAD
    ef81e4a1628ec misc: sgi-gru: remove interrupt-context page-table walks
    961f4406a2dd3 misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe()
    a1584c5f05cb6 powerpc/crash: Fix possible memory leak in update_crash_elfcorehdr()
    2996d2a7cb92c powerpc/44x: Set GPIO chip parent
    4e8bfb2a3b271 powerpc: implement get_direction() in cpm2
    193fe50a497d4 dma-resv: Fix undefined symbol when CONFIG_DMA_SHARED_BUFFER is disabled
    34470cc3a8e66 iomap: release the folio batch on iomap callback failures
    20e9cbd3be1e3 dcache: keep shrink_dcache_for_umount() making progress on busy roots
    9be10f49dfc2e locking/lockdep: Fix NULL pointer dereference in __lock_set_class()
    1e202ab730014 pinctrl: qcom: shikra: Fix intr_target_width for summary interrupt routing
    c02d675e81468 md/raid1: create serial pool adding rdev to array with serialize_policy=1
    1f42e5898b45a fs: annotate inode timestamp accessors
    dff41b56ab7b7 i3c: master: adi: add OF module alias for autoloading
    618dd640ded6b i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices
    c1f4d7763cdf1 swiotlb: Preserve allocation virtual address for dynamic pools
    8c486293ddd0a iommu/dma: Check atomic pool allocation result directly
    a58923756b0f8 md: scope memalloc_noio to allocation critical sections
    cc543e769b97d md/bitmap: resume array on backlog_store() error path
    af409d56bb38c clk: qcom: Return expected ENOMEM error on dynamic allocation failure
    e13c99679b548 clk: qcom: gpucc-qcm2290: Park RCG's clk source at XO during disable
    bb105eb8cce85 clk: qcom: gpucc-qcm2290: Keep the critical clocks always-on from probe
    679df05c771ae clk: qcom: gpucc-qcm2290: Move to the latest common qcom_cc_probe() model
    73d816a47fcc0 clk: qcom: gpucc-qcm2290: Drop pm_clk handling
    308f3349e2fd6 clk: qcom: qcm2290: Update DISPCC and GPUCC GDSC *wait_val values
    844e78f832279 clk: qcom: qcm2290: Add RETAIN_FF_ENABLE flag for DISPCC and GPUCC GDSCs
    dfc8dea60be27 clk: qcom: qcm2290: Set POLL_CFG_GDSCR flag for DISPCC and GPUCC GDSCs
    8b516ca0d040c clk: qcom: dispcc-qcm2290: Enable runtime PM support
    a0e5c01eb1df8 clk: qcom: dispcc-qcm2290: Move to the latest common qcom_cc_probe() model
    8bc5a909a6110 clk: qcom: negcc-nord: keep GPU2 CFG clock enabled via critical CBCR
    b88c019e2cca9 clk: qcom: gcc-nord: mark PCIe link clocks as critical
    9726f63fb9255 clk: qcom: negcc-nord: use clk_regmap_phy_mux for USB3 pipe clock srcs
    c3683217826d7 clk: qcom: nord: use BRANCH_HALT_SKIP for PHY pipe clocks
    948183bb89dc0 arm64: dts: qcom: eliza: Add fallback compatible for ADSP remoteproc
    a2074f86fc965 lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone
    65e7240d679fe platform/chrome: lightbar: Limit payload to max packet size
    79347e42cfbc9 bpf: Fix potential UAF when reading bpf link info
    923f559e95b89 bpf: Fix potential UAF in bpf_netns_link_update_prog
    aab9d81a415c6 power: supply: sc2731_charger: cancel work on remove
    ad4f4e6678ecd power: supply: isp1704_charger: cancel work on remove
    3646c881b6adb arm64: dts: qcom: qcs6490-rb3gen2-industrial-mezzanine: Fix the PCIe iommu-map entries
    65fded30a4479 arm64: dts: qcom: qcs6490-rb3gen2: Fix the PCIe iommu-map entries
    d6c3c9c6cc382 arm64: dts: qcom: qcs6490-thundercomm-minipc-g1iot: Fix the PCIe iommu-map entries
    efcf504642bae arm64: dts: qcom: qcs6490-radxa-dragon-q6a: Fix the PCIe iommu-map entries
    a1e2a5239cfc5 arm64: dts: qcom: lemans-evk-ifp-mezzanine: Fix the PCIe iommu-map entries
    e57c32625d30d arm64: dts: qcom: monaco-evk-ifp-mezzanine: Fix the PCIe iommu-map entries
    d0da19edc7baf arm64: dts: qcom: monaco-monza-som: Fix the PCIe iommu-map entries
    5ac48b3956ca9 arm64: dts: qcom: monaco: Fix the PCIe iommu-map entries
    3047cfd5ebdce arm64: dts: qcom: lemans: Fix the PCIe iommu-map entries
    eb16dcbce98bc arm64: dts: qcom: talos: Fix the PCIe iommu-map entries
    604e55211af9b arm64: dts: qcom: sm8750: Fix the PCIe iommu-map entries
    ff9c3c087b67a arm64: dts: qcom: sm8650: Fix the PCIe iommu-map entries
    9eb128da8525a arm64: dts: qcom: sm8550: Fix the PCIe iommu-map entries
    0ce01e1cd0c3b arm64: dts: qcom: sm8450: Fix the PCIe iommu-map entries
    1d6e5c05018be arm64: dts: qcom: sm8350: Fix the PCIe iommu-map entries
    8c8b4f2a352c1 arm64: dts: qcom: sm8250: Fix the PCIe iommu-map entries
    dcdb31fb3e978 arm64: dts: qcom: sm8150: Fix the PCIe iommu-map entries
    22a6fcd328ab1 arm64: dts: qcom: sdm845: Fix the PCIe iommu-map entries
    04ae73e1f607a arm64: dts: qcom: sc8180x: Fix the PCIe iommu-map entries
    bf3f0faa45144 arm64: dts: qcom: sar2130p: Fix the PCIe iommu-map entries
    5f6cc86e9d609 arm64: dts: qcom: kodiak: Fix the PCIe iommu-map entries
    36fb7eea71218 arm64: dts: qcom: kaanapali: Fix the PCIe iommu-map entries
    9d0e427b1bbba arm64: dts: qcom: sm8250-xiaomi-elish: correct the board ID
    58d595f2d695c arm64: dts: qcom: talos: Fix cpu6 1094.4MHz OPP frequency typo
    030376932ffd9 arm64: dts: qcom: glymur: Fix PDC IRQ mapping
    cbbaf0c870dde block: fix dio leak on metadata mapping error
    6809ba75b8bb5 firmware: qcom: scm: Fix tzmem state on probe retry
    6fab857eccfc6 firmware: qcom: scm: Fix reserved memory cleanup on probe failure
    f312ef5026678 firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published
    edad2969959f1 firmware: qcom: scm: instrument SMC call path with tracepoints
    0e93bb22355ef firmware: qcom: scm: add trace events for the SMC call interface
    cb3219dcb859b arm64: dts: qcom: sc8280xp-crd: Fix the pin index for misc_3p3_reg_en
    a9e8aa66c5387 arm64: dts: qcom: glymur-crd: Add FocalTech ft3d81 touchscreen support
    759308ce67e93 soc: qcom: pmic_glink_altmode: Define the TBT extradata properly
    c9edf04712b5c clk: qcom: gcc-qcm2290: don't park QUP RCGs upon registration
    cf8a53ea2a805 arm64: dts: qcom: qcs404: Fix DTBS Check errors in usb controller nodes
    099702ece0620 arm64: dts: qcom: sdm632-motorola-ocean: Fix LED default trigger property
    9f84fcd286907 arm64: dts: qcom: msm8976-longcheer-l9360: Fix accidental node override
    85fc83107415d arm64: dts: qcom: msm8998: Don't pull-up I2C pins by default in sleep
    4c31039af7423 rcu: Mark accesses to ->rcu_urgent_qs and ->rcu_need_heavy_qs
    0a3709557f885 PCI: dwc: ep: Clear MSI iATU mapping in dw_pcie_ep_cleanup()
    379913074bf47 md/raid10: consistently fail atomic writes that require splitting
    110092e68836e md/raid1: restrict atomic write limits and handle runtime constraints
    acff2713c3212 wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()
    26f8f87f0a556 wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()
    ba1ee854b681a Revert "serial: 8250: Clear CON_PRINTBUFFER on port re-registration"
    cd2e268520948 selftests/zram: fix kernel_gte() for POSIX sh
    81b39df5d7019 md: recheck spare changes before starting sync
    9bb9504e2d8f3 md: remove REQ_NOWAIT support from raid1/10/456
    f6215e3a65f19 tools/nolibc/powerpc: mark ctr and xer as clobbered by system call
    86d4e8c527dee fanotify: stop permission watchdog when timeout is zero
    0187a11e2d612 md/raid5: protect lockless recovery_offset accesses during reshape
    bae1d77351139 net: airoha: fix ETS QoS stats counter underflow and cross-channel corruption
    4b9a1b5203d4e md/raid5: fix lockless max_nr_stripes reads
    fcf21df7d3c50 md/raid5-ppl: fix use-after-free in ppl_do_flush()
    16b6e6243d81f md/raid5: protect bitmap batch counters aka seq_flush/seq_write consistency
    4743959aa8d87 bus: mhi: host: Fix controller cleanup on EDL sysfs failure
    84e713a8aa7fe bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET
    1b68b6e529ce7 wifi: rtlwifi: pci: fix error path in rtl_pci_probe()
    05c1081ae4503 platform/chrome: cros_ec_debugfs: Unregister panic notifier
    e97d1fce7173f platform/chrome: cros_ec_debugfs: Clean up console log on probe failure
    618781e47fb04 regulator: tps65185: handle gpiod_get_value_cansleep() error returns
    08835d42ce640 s390/vdso: Pass --eh-frame-hdr to the linker
    4d030d7d1af95 media: stm32: dcmi: fix some error handling bugs in probe()
    cb83cfff8dff5 media: qcom: iris: handle runtime PM resume failure in core deinit
    6bd10931ac2d4 media: qcom: iris: Remove duplicate HFI_PROP_OPB_ENABLE entry
    a5e341a25de36 media: qcom: iris: Fix bitmask test in iris_allow_cmd()
    8a61c211d0d52 drm/msm: remove objects from evit list after pinning them
    29d6bbda42aa9 PCI: starfive: Fix unchecked pm_runtime_get_sync() in probe
    dad14ba26c9a2 PCI: starfive: Fix Runtime PM handling and teardown ordering
    7c7fad5607dc2 wifi: ath12k: validate TLV length in process_tpc_stats()
    5de2b8c53714a wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()
    bf97c9d512385 wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()
    761cf9c63274a drm/panthor: Add vm_bind region with kbo range overlap check
    1a7958ce58dc9 spi: davinci: switch to managed controller allocation
    44ec34cd3cbea nvmet: reject out-of-range mdts values in configfs store
    06352dae949c1 nvme-pci: return error when parsing a quirk string fails
    be5eb47ee3fea nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request
    9e136150ac55d nvmet: fix return status of RMI log page on allocation failure
    48812c8103071 IB/isert: reject login PDUs declaring more data than was received
    352dc85324b29 IB/isert: reject PDUs declaring more data than was received
    c12cc56eb9fcd media: staging/ipu7: fix async notifier leak on init error
    a64e2beb45017 RDMA/cxgb4: free STAG index when TPT entry write fails
    5b96c5ba26a8f RDMA/mlx5: Send cong param changes to the resolved port mdev
    c75ee076fa097 RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs
    6b15fc9bc117f RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()
    254579a81e49a riscv: dts: spacemit: Make dtschema recognize the etherent PHY correctly on K3 com260 board
    63ad1eb9dcebb riscv: dts: spacemit: Make dtschema recognize the etherent PHY correctly on K3 pico-itx board
    fcf7e0500ea9a clk: spacemit: k3: fix missing /2 factor in i2s sysclk dividers
    fcadc927cbff4 scsi: smartpqi: Fix AIO retry marker cleared by SCSI core between dispatches.
    f181155baf0c9 nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch
    15c8559376416 nilfs2: prevent out-of-bounds read in super root block parsing
    8cea0bc78ac64 nilfs2: fix infinite loop in nilfs_clean_segments()
    44ea94a65fd27 clk: rockchip: Fractional PLL coefficient on RK3588/RK3576 is two's complement
    554c752ebd460 clk: rockchip: Fix the fractional part denominator on RK3588/RK3576 PLLs
    42a5661ff7e4c PCI: Fix UAF when probe runs concurrent to dyn ID removal
    e0b62b59a0abf PCI: Fix dyn_id add TOCTOU
    30f79038b676b PCI: Make pci_match_one_device() match on ID instead of device
    8e25cfa697a91 clk: mediatek: mt8135: Fix inverted gate control for devapc_ck
    6bc007ee691c3 clk/x86: pmc_atom: add kasprintf return value check
    a3c031fd2c4c8 clk: palmas: Manage external-control prepare with devm
    1183dc2450a26 clk: eswin: Zero-initialize stack-allocated clk_init_data
    fea0b4fd891a2 clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path
    8ed265c0b4720 clk: tegra: tegra124-emc: put EMC node on register failure
    41e42bf05da99 arm64: dts: allwinner: sun50i-a64-pinephone: Fix mpu6050 mount matrix
    0b56ad971fa02 wifi: mac80211: fix per-STA profile length in cross-link CSA parsing
    ce30b9f6ace6f media: stm32: dcmi: fix error handling on MDMA pool alloc failure
    1d4b590277347 RDMA/efa: Fix PBL chunk length computation
    4cfb448705da3 RDMA/rxe: Fix UAF in ODP init error-handling path
    417190bde0fda iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path
    0b139ec4641c7 iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID
    421f5ab135cd4 iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs
    86197679b293f iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc()
    a168254ff8db0 iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs
    f3ef4abc271a1 iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init
    b4535b403d6bf iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized
    967a5ff8a614d fs/ntfs3: reject restart table growth beyond U16_MAX entries
    e67992e9089be staging: rtl8723bs: use kfree_sensitive() for key material
    c582b049fd021 arm64: dts: qcom: glymur: fix SoCCP memory mappings
    0dc9e289bbb54 remoteproc: qcom: q6v5: Request shutdown if crash is triggered host-side
    a8deb8980c636 remoteproc: qcom: pas: Add late attach support for subsystems
    61862ed651b24 remoteproc: Prevent crash handling to race with rproc_del()
    0ff49320a49ca remoteproc: core: Attach rproc asynchronously in rproc_add() path via schedule_work()
    38e4018ac5cc1 remoteproc: Allow shutdown of crashed processors
    b22af817f56d0 cpufreq/amd-pstate: Set min_limit_freq based on bios_min_perf
    732fc96c1f872 perf annotate: Be robust to annotating without a thread
    f173b0c5e6561 perf ui hists: In report UI ensure thread is set with reference counting
    b5ea46ba8a953 gpu: nova-core: fix packed registry table size
    973e3c9087f97 gpu: nova-core: build SetRegistry entries dynamically
    4d6270bbb4e08 sched_ext: Abort directly from the hardlockup handler
    30f4e6c8225ed sched_ext: Fix exit_cpu accuracy for lockup paths
    7965965aa2828 w1: ds2482: Fix signedness bug in ds2482_w1_triplet()
    1cd16c8d68f58 spi: oc-tiny: switch to managed controller allocation
    7069684d4bc68 clk: mediatek: mt6735: Unregister PLLs on probe failure
    1c90da6376e47 PCI/pwrctrl: tc9563: Power off only the external ports in tc9563_pwrctrl_disable_port()
    972c771674e88 PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node
    3371d30a97a25 isofs: release zisofs block pointer buffer head
    16a56afd56c49 powercap: intel_rapl_tpmi: Handle PMU registration failure during probe
    74d2066418412 thermal/drivers/qcom-spmi-adc-tm5: Drop IIO_VAL_INT check in adc_tm5_get_temp
    82d250eb2a04b thermal/drivers/airoha: Fix copy paste error for sen internal
    bf7994d4d7f5e thermal/drivers/airoha: Fix copy paste error on clamp_t low temp
    67332b75ca7ec ACPI: bus: Avoid confusing complaints regarding missing _OSC features
    f917707f0de08 RDMA/mlx5: Fix integer overflow of user QP buffer size
    093f290dd8790 crypto: keembay - publish OF module alias for OCS AES/SM4
    5aae80dcec074 crypto: keembay - Initialize completion before requesting IRQ
    2b3fb5693c25c scsi: ufs: debugfs: Reserve space for a string terminator
    cfef700703d98 scsi: ufs: rpmb: Validate request frame length before parsing
    4b62f73836f4d scsi: ufs: core: Validate connected lane counts
    a769095d1d74e scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags
    66da25277256b scsi: ufs: core: Validate string descriptors
    f7f970bc70529 power: supply: sbs-battery: Use a per-device serial number buffer
    d29a8ee271da1 arm64: RSI: fix field-spanning write warning in attestation token init
    df6bc642201d7 riscv: dts: spacemit: Fix phy id check for the phy on com260 board
    a510644ce03e7 riscv: dts: spacemit: Fix phy id check for the phy on pico-itx board
    9875c4587d651 tools/build: Allow versioning of all LLVM tools defined in Makefile.include
    e06785cba7f86 pinctrl: mediatek: free EINT resources on unbind
    b8fa1098ee9f6 pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip
    908f3ea3f050b liveupdate: Remember FLB retrieve() status
    217775362e805 liveupdate: Reference count outgoing FLB data
    f2a3a52b82930 liveupdate: reject nonzero reserved value for SESSION_FINISH
    dc59caae4d8f7 riscv: dts: spacemit: Add enough deassert time for the PHY on com260 board
    bf26fb05720ba riscv: dts: spacemit: Add enough deassert time for the PHY on PICO ITX
    56140bd357c5d riscv: dts: spacemit: improve RTL8211F PHY configuration on K3 Pico-ITX board
    7c37d7cd2d0b5 power: reset: reboot-mode: Remove devres based allocations
    8f7683ce37a53 cxl/region: Fix use-after-free in find_pos_and_ways() error path
    c44c01167aed2 pinctrl: fix unmet dependencies from missing GPIOLIB
    1a6e68cd61174 selftests/bpf: Fix memory leak on subtest_states reallocation
    3d83554653bb2 selftests/bpf: Fix missing allocation null checks in test_progs.c
    8d2b2adee3b94 selftests/bpf: Fix incorrect error checking for pthread_create
    48a0209d8da0d bpf: Fix WARNING in bpf_tracing_link_release
    5de0acc36e233 ARM: lpc32xx: only run SoC init on LPC32xx hardware
    a2cbab47f44e9 bpf: Fix CFI mismatch in task work callback
    843419e12402b arm64: dts: rockchip: Fix rk3566-bigtreetech-cb2 touchscreen property
    94987478c83e0 arm64: dts: rockchip: Fix Gru WLAN sideband interrupt
    331fd2c8cd1e2 arm64: dts: rockchip: Add missing hclk for RK3588 eDP1
    d506e4a1b179f arm64: dts: rockchip: Add missing hclk for RK3588 eDP0
    24f20986b253c exfat: fix valid_size extension over a shared writable mapping
    8cb66c6579ab2 drm/panthor: return PTR_ERR() from devm_drm_dev_alloc()
    72caafbc95c5d fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init
    c408d416618eb netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet
    fdb1a59dfc8cf drm/tve200: add OF module alias for autoloading
    0b37120b0bb53 perf trace: Correct default cpumask formatting to hexadecimal
    8edcf5385ca71 perf cap: Remove used_root parameter and simplify capability checks
    aabd063d7987c ASoC: spacemit: rename clock inputs to match binding
    5b856fd4a7632 clk: sunxi-ng: mux: fix determine helper rate propagation
    4eda2111b111c leds: pca9532: Fix phantom device registration on missing hardware
    c2b4cd53bc6f3 PM: hibernate: Fix memory leak in snapshot_write_next() error path
    334145d683ad3 RDMA/erdma: complete object teardown when the destroy command fails
    56a347950e661 xfrm: Fix skb double-free in xfrm_dev_direct_output()
    9562da57ff483 perf cs-etm: Avoid truncating AUX buffer sizes to int
    28bb9cb313477 perf cs-etm: Flush thread stacks after decoder reset
    a8412fdcd0007 gpu: nova-core: correct RISC-V HALTED field
    8f396ccaf128d riscv: dts: thead: th1520: remove pclk for I2C1
    e8a504606b945 riscv: dts: spacemit: k1: Split gmac_clk_ref into independent pinctrl groups
    da3066cee2c83 riscv: dts: spacemit: set console baud rate on K3 Pico-ITX board
    24f57e7c75b7e bitmap: Properly initialise destination bitmap for scatter & gather test
    4520d4a1db371 firmware: arm_scmi: Unrequest devices if driver registration fails
    826413b858ea2 firmware: arm_scmi: Roll back partial protocol table registration
    f4ade8d224756 cpufreq/amd-pstate: handle missing policy in dynamic EPP callbacks
    54d63431854b5 cpufreq/amd-pstate: Toggle auto_sel in active mode on shared memory systems
    f15b9aa413078 cpufreq/amd-pstate: Fix EPP return type and handle errors during initialization
    ba6ce23d17db3 cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active
    2f923ccc88715 ARM: dts: allwinner: a10: Fix PMU interrupt
    09c7565ebdf64 ext4: skip tail block zeroing for inline data files
    83663c0b73948 ext4: check dir entry fits before reading the hash trailer in ext4_search_dir()
    e1e342d9a561c ext4: fix buffer_head leak in ext4_init_orphan_info
    518df61b9b0a5 RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap
    9ddbc95dac167 wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx()
    9e6ec0977f0b9 wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx()
    919c31763d65d wifi: ath12k: fix survey indexing across bands
    0fd2c54d8a56a wifi: ath11k: Correctly copy the hint BSSID in WMI scan request
    84f87c46cec51 wifi: ath12k: Correctly copy the hint BSSID in WMI scan request
    8d66010645bc9 wifi: ath12k: allocate HOST_DDR and BDF regions after Q6 RO region
    39520ff5cdfdf wifi: ath12k: refactor QMI memory assignment
    c78e6912404ba wifi: ath12k: switch to name-based reserved memory lookup
    2f3635213ecf5 wifi: ath6kl: avoid buffer overreads in WMI event handlers
    f2dd3a8580dfd wifi: ath12k: fix ML-STA authentication timeout on QCC2072
    850211b0ba6ce wifi: ath12k: advertise ieee_link_id in vdev start MLO params
    1f77d0c58b6ab wifi: ath12k: Set IEEE80211_OFFLOAD_ENCAP_4ADDR after tx_encap_type vdev param
    2d3cb65c4846f wifi: ath12k: Advertise multicast Ethernet encapsulation offload support
    b4c7285779337 ext4: validate readdir offset before accessing dirent
    439aedfd7ae86 ext4: use fsdata to track inline data write state and fix race
    9fd3ffc3c51c9 ext4: drain in-flight DIO before buffered write fallback
    43ae387c3ae6a ext4: clear stale xarray tags on folios skipped during writeback
    7720fddd1fe34 ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()
    169772cd2147c thermal: intel: int3400: clean up ODVP on probe failures
    b801158f81fe7 iommu/arm-smmu-v3: Declare eats_s1chk and eats_trans as host-endian u64
    64e29e5099069 iommu/qcom: Fix inverted fault report check in qcom_iommu_fault()
    e3e12b851953b iommu/qcom: Remove sysfs device on probe failure path
    99d42aef089a0 iommu/amd: Fix undefined behavior in devid_write debugfs function
    21d35c5f46e99 firmware: arm_scmi: Fix requested device removal race
    c06f2856a1d7e RDMA/core: Fix potential use after free in ib_dealloc_pd_user()
    bfc119a40c04b RDMA/core: Fix potential use after free in uverbs_free_dmah()
    43403fe45379c RDMA/core: Fix potential use after free in ib_free_cq()
    64c72390d8407 RDMA/core: Fix potential use after free in counter_release()
    95c992c869df5 RDMA/core: Fix potential use after free in ib_destroy_srq_user()
    8a72a6aad84b3 RDMA/core: Fix potential use after free in ib_destroy_cq_user()
    001383248e5d7 RDMA/core: Fix use after free in ib_query_qp()
    56024193f6d73 RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations
    638b9a5364c14 RDMA/mana_ib: drain QP references after partial table insertion
    61a25b8d333e1 RDMA/erdma: Fix CEQ tasklet use-after-free on removal
    3ec5f37e14bcb PCI: j721e: Fix incorrect max_lanes for J7200
    425addfb52c46 RDMA/srpt: Pass the mapped task attribute to target_init_cmd()
    641f814965d73 bpf: Mark bpf_refcount field as unique
    373a1e9366e71 bpf: Preserve unique-field state across nested structs
    92356df4aa2b0 bpf: Fix offset warn check for bpf_res_spin_lock
    a21001465264d virt: arm-cca-guest: use migrate_disable() for attestation token requests
    2373496c0dac3 ACPI: battery: Adjust charging status validation check
    08fe2eaa60918 bpf, riscv: Fix extable handling for arena load_acquire
    a6e11a81da342 riscv, bpf: Fix kernel stack corruption in tailcall with CFI
    2a3a29e900218 riscv, bpf: Fix memory leak in bpf_jit_free
    4c39115eb6e30 libbpf: Search /lib64 and /lib in resolve_full_path()
    0e94a2ca7905b selftests/bpf: Fix lsm_bdev dev_t encoding mismatch
    912189169df3f selftests/bpf: Fix make install target
    e2396b8a56207 bpf: Zero queue and stack outputs on lock failure
    27a3be4e965bf platform/x86: acer-wmi: reject missing gaming WMI results
    2fb8ff81659a5 ext4: skip extra isize expansion during mount to prevent deadlock
    36bf17bb90cdf ext4: fix out-of-bounds read in ext4_read_inline_dir()
    32f7ab52875ec ext4: fix circular lock dependency in ext4_ext_migrate
    6e11ac626f9f9 ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root
    355bee5f11acb ACPI: processor: validate MADT IOAPIC entry bounds
    2267448f67874 ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer
    c57e238b475e8 RDMA/nldev: validate dynamic counter attribute length
    d324c4353f641 irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()
    bf18426dddbf3 samples: rust: debugfs: fix excessive stack use
    5a9f8b7f11674 rust: device: make lifetime on `Core` and `CoreInternal` invariant
    082435d51f286 selftests/bpf: Silence maybe-uninitialized compiler warning in libarena
    555e689c46308 selftests/bpf: Silence array bounds warning in global_map_resize
    0fb8a60765319 selftests/bpf: Check malloc result with ASSERT_NEQ in test_sha256
    05e588ad77154 selftests/bpf: Check malloc result with ASSERT_NEQ in test_loader
    af33d192af2fb x86/bugs: Don't use cpu-type matching in cpu_vuln_blacklist
    b86e65df16da0 arm64: dts: imx8-ss-audio: Fix LPCG clock indices for ASRC0
    cb6b14e24b992 kcsan: avoid unintended access checking in NMIs
    bd02d644bd19a RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters
    c5643ea4f040a RDMA/bnxt_re: Validate udata before executing commands
    ee901a0f46515 RDMA/core: Add ib_no_udata_io() helper
    5ec111ddc1f72 RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[]
    ca99431820e8c RDMA/hfi1: Propagate sdma_txinit_ahg() errors
    7e24fd5253fcf arm64: dts: amlogic: meson-axg-s400: enable mipi_pcie_analog_dphy for PCIe
    a22abf6d48eeb arm64: dts: amlogic: meson-axg: Add missing nand_rb0 pin to nand_all_pins
    0c52d48122a13 phy: starfive: Fix runtime PM cleanup in JH7110 DPHY RX probe
    da666984ffda4 phy: starfive: Fix runtime PM cleanup in JH7110 DPHY TX probe
    cdaa9cb77eb67 iio: dac: ad5686: missing NULL check on match data
    5ed1b048527be ASoC: meson: Keep link pointers valid on realloc failure
    2787034ea0163 dmaengine: dw-edma: Clear stale requests on termination
    6fc436e1500c5 dmaengine: dw-edma: Serialize channel state checks
    f71c94c1a6574 dmaengine: dw-edma: Serialize abort state updates
    f3ec6702a1d21 dmaengine: dw-edma: Terminate all descriptors without callbacks
    57cf929a33cb7 bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn
    17da80d0c7b56 bpf: Disallow interpreter fallback for gotox insn
    408b6d3bc19c4 bpf: Disallow interpreter fallback for arena-related insns
    8a08635656037 bpf: Reject arena frees below the arena base
    49882b4d5290d arm64: dts: qcom: glymur: Add CX power domain to GCC
    9d7355c6040cf drm/msm/a6xx: Fix RBBM_CLOCK_CNTL3_TP0 value in a730_hwcg
    50fb8b5857d5c driver core: soc: Unregister bus on early device registration failure
    231bbc04c58f1 software node: Fix software_node_get_reference_args() with index -1
    07fee585336ac drivers: base: Remove statistics group if encryption group not created
    7244dd0f12629 drm/v3d: Associate BOs with every job that accesses them
    89d4159768527 drm/v3d: Convert submit helpers to operate on struct v3d_submit
    87bdadba51c57 drm/v3d: Make v3d_get_cpu_indirect_csd_params() a pure parser
    d7c6dfcd286db drm/v3d: Introduce struct v3d_submit and convert CL/TFU/CSD ioctls
    941522179e62f drm/v3d: Migrate BO reservation locking to DRM exec
    cfb009ab26186 drm/v3d: Extract v3d_job_add_syncobjs() helper
    a3e81f48c9e61 drm/v3d: Drop unused drm_encoder.h include from v3d_drv.h
    02438d15b0f41 perf build: Fix compiler errors with old capstone
    c91d07e966806 perf ui hists: Fix uninitialized stack memory free on pstack allocation failure
    c645f6dd1af2e mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()
    37be7bc2c2d09 mtd: mtdswap: Avoid freeing registered blktrans device twice
    529aeba63d448 mtd: intel-dg: Fix runtime PM error path in probe
    b07d0469126c1 soc: ti: knav_qmss: Remove debugfs file on teardown
    fda8fb7e81795 vfio/pci: clear vdev->msi_perm after freeing it on init failure
    1d36a009c8ee1 vfio: selftests: Avoid VLAs
    6fb4cd8ee68f6 char: xilinx_hwicap: unregister class on init errors
    4a6518be31602 ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove
    5c8927882b70b ppdev: prevent overflow when setting port timeout
    1105f6e7b3922 cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64)
    b044a6c443d55 misc: lan966x_pci: depopulate children on populate failure
    ab2fe43041412 misc: ad525x_dpot: use driver core groups for sysfs files
    3ac54631098a7 misc: rtsx: add missing write register handling
    4984277bc43f8 misc: bcm-vk: Use acquire/release for msgq_inited
    0b8177cca0c93 misc: pch_phub: Complete enum usage for device identification
    c70f3be8be0d5 mei: lb: fix incorrect type in assignment
    ca4489b3e5466 speakup: keyhelp: guard letter_offsets possible out-of-range indexing
    d65abe969dcb7 accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status()
    ec5bd6731183e uio: Fix stale info pointer in failed registration path
    8bf5e01238c33 gpib: use 'static inline' instead of 'extern inline'
    0a53e4bc076ee gpib: Move stuck SRQ update under lock
    2750b16e85391 tlclk: if sscanf() fails, fall back to 0, not random value
    c48e5aa015255 staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths
    b21cb958292ee UDF symlink pathComponent header OOB read
    56ad47bee6d37 tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64
    977659adb341f usb: gadget: f_uac1_legacy: remove broken string configfs attributes
    d0667c263362b ACPI: processor: idle: Expand _LPI package sanity checks
    a88fae3508aa3 crypto: aspeed - Propagate platform_get_irq() errors
    6ee726526f08a crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping
    c5b52d79d6b2e wifi: rtw89: fw: use MAC source for IO offload delay command
    a28a7d9b3bb11 scsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR context
    576312f027d15 bpf: Sync tail_call_reachable with callee state on entry
    09b360eb6ce34 drm/msm: Only fini scheduler after successful init
    d684f756d029d drm/msm: Fix task_struct reference leak in recover_worker
    8fc6a356f498d drm/msm/a6xx: Fix IRQ storm during msm_recovery test
    197912ffbb657 drm/msm/a6xx: Fix A621 GPUCC register list for state capture
    9d52bfc956c77 drm/msm/a6xx: Fix A663 GPUCC register list for state capture
    dc64cf9d71428 drm/msm: Recover HW before retire hung submit
    51fcee9d4140b drm/msm/a6xx: Fix stale rpmh votes after suspend
    105aaff286a15 drm/msm/adreno: fix use after free on error path in a6xx_gpu_init()
    b00290d1dc23a gpu: host1x: Avoid stack over-read in debug output helpers
    eb9f221498757 gpu: host1x: Fix offset calculation in trace_write_gather
    a1c4229ebeb46 gpu: host1x: Avoid double device_add when clients already present
    082b353c05b8e wifi: iwlwifi: mei: pass correct argument to function
    bc7a7ad930708 wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments
    f7f770d12e6e9 wifi: iwlwifi: mei: check SAP message length before reading it
    2a77cb320e399 wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser
    769e1910d41fd wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs
    1d74ddb6da546 perf stat: Fix duplicate output with --for-each-cgroup
    b3ce55b4a9da2 spi: geni-qcom: Fix sticky ret causing wrong return value on invalid proto
    3296c42d1c3c1 drm/solomon: remove unneeded variables in blit functions
    51a548f546519 soc: renesas: r8a78000: Drop duplicate "default ARCH_RENESAS"
    fa8dc4d73314c clk: qcom: gcc-glymur: Enable runtime PM
    64de7f5c2d5cd perf jevents: Add more components to the metric sorting order
    789395e53ebf4 perf sched: Free subcommand string after perf sched stats
    7a936fa41c55c perf sched: Fix memory leaks in perf sched stats report
    cf3282cf46be6 perf sched: Add missing perf_session__delete()
    c2d4db21ad2d5 arm64: dts: qcom: milos: Add reset for sdhc_2
    c5d8ff2d2f055 arm64: dts: qcom: sm8250: correct frequencies in the Iris OPP table
    9362c436aec0b arm64: dts: qcom: sm8250: sort out Iris power domains
    6f73a043f8248 arm64: qcom: ipq5018: Add GEPHY RX and TX clocks
    f9f86d8363a74 arm64: dts: qcom: ipq5018: Correct CMN PLL reference clock rate
    1d857673a0769 arm64: dts: qcom: glymur-crd: merge duplicate &pmh0101_gpios node extensions
    31901797093e0 arm64: dts: qcom: eliza: Enable first QUPv3 wrapper by default
    be3f5db2d705b arm64: dts: qcom: sc8280xp-x13s: Fix the drive-strength of mclk pin
    74689c170832f arm64: dts: qcom: msm8996-xiaomi-gemini: Fix up ti,drv2604 enable GPIO
    fb97d1d6c2069 x86/mm/pat: Take cpa_lock around large-page collapse
    9ff718df54737 drm/bridge: tc358767: clamp the reported AUX read size to the request
    b375b66a47222 perf: evsel: Fix error handling in tp_format lookup
    2907676ed67aa remoteproc: qcom: Fix glink->node reference leak in qcom_add_glink_subdev
    688f621a8d9c4 remoteproc: qcom_q6v5_mss: Fix MDM9607 subsystem control instance ID
    beab49fb74054 remoteproc: qcom_q6v5_mss: Make ssctl_id configurable per platform
    73a9119d57e7a cpufreq: schedutil: Fix self-contradictory comment in sugov_iowait_apply()
    b12839d2af893 cpufreq: intel_pstate: Fix setting minimum P-state at init time
    ae56bcb41607d drm/amd/display: remove duplicate link_dp_panel_replay.h include
    c71783a6ed19a drm/amd/display: fix wrong register field in dccg35_set_hdmistreamclk_src_new
    7ccdcfbb8617c drm/amd/display: Remove unused-but-set variable hubp from
    6970ec944567f drm/amd/display: Fix DM I2C teardown race
    f0c4b7ca24d2e OPP: Fix cleanup ordering
    7d102d1f06318 media: ipu6: Do not free aux device pdata after init
    de9be39cefda1 media: bcm2835-unicam: Fix asc leaked in error/remove path
    c4b00825780a4 media: platform: amd: fix unmet dependency for VIDEO_V4L2_SUBDEV_API
    76511a617ae4b media: i2c: rdacm21: Fix missing media_entity_cleanup()
    78cdd9438ad3b media: ti: vpe: Select V4L2_FWNODE for VIP
    7c614f83301d4 irqchip/renesas-irqc: Fix generic interrupt chip leak on remove
    f58abff399f72 PCI: keystone: Fix OF node reference leak in init
    578ab48dc684c PCI: xgene: Drop unnecessary OF node reference
    f9ed38e80443a cpufreq: spear: Fix an IS_ERR() vs NULL bug in spear1340_set_cpu_rate()
    68682c9b7b8ca dax: fix holder_ops race in fs_put_dax()
    eb412f80311fc dax: read holder_ops once in dax_holder_notify_failure()
    c8c16c2de9114 dax/fsdev: fail probe on invalid pgmap offset
    7b642bd3d3910 dax/fsdev: use __va(phys) for kaddr in direct_access
    9b0f91dc9147a dax/fsdev: clear pgmap ops and owner on unbind
    93c5509033e47 dax/fsdev: don't leave a dangling dev_dax->pgmap on probe failure
    d298a0513aaf7 dax/fsdev: clear vmemmap_shift when binding static pgmap
    58db9b927866b dax/fsdev: fix multi-range offset in memory_failure handler
    154540d584ae1 dax: fix misleading comment about share/index union in dax_folio_reset_order()
    6beaef33ee568 libnvdimm/labels: Bound the on-media label size before the shift
    a8e3a0e8997de tools/sched_ext: scx_qmap: Fix stale API name in comment
    92a4e01e2ef89 regulator: adp5055: Fix error code in adp5055_of_parse_cb()
    ca95b15a0760e cxl/features: Clamp Get Feature output size to the remaining buffer
    16b7c99eff030 cxl/features: Reject Set Features output buffer smaller than the header
    329ea475581c6 cxl/features: Reject Get Feature count larger than the output buffer
    4635953b4c1af firmware: arm_scmi: Fix transport device teardown lookup
    c59b3393df134 firmware: arm_scmi: Fix SCMI device destroy lifetimes
    3515aed7fe424 firmware: arm_scmi: Unwind P2A receiver mailbox setup failure
    9958f55eace8b firmware: arm_scmi: Unwind TX receiver mailbox setup failure
    45e54438f4fd8 firmware: arm_scmi: Fix OF node reference handling
    3f4cf1edf7365 firmware: arm_scmi: Clear SystemPower flag on create failure
    77d2985d1e80e firmware: arm_scmi: Drop handle on protocol bind failures
    09d08581ead97 firmware: arm_scmi: Protect device request lookup with RCU
    ad39c232ffac7 firmware: arm_scmi: Use channel ID for transport teardown
    0b6e59eb885f9 firmware: arm_scmi: Reject out of range DT protocol IDs
    bab26acebe55e firmware: arm_scmi: Avoid IDR updates while cleaning channels
    fbaebd380caa4 firmware: arm_scmi: Free transport channel on IDR failure
    43aad7687238d firmware: arm_scmi: Clean up channels on setup failure
    5e30d3d16d1a9 firmware: arm_scmi: Quiesce notifications before teardown
    74fcaa0a3f7ad firmware: arm_scmi: Unregister device notifier before IDR teardown
    a1bc587568a4e firmware: arm_scmi: Publish channel state before callbacks
    54be1b7c1eb80 x86/entry/fred: Encode frame pointer on entry
    ccbd20f2168f5 wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate
    3dfa1b8ccf7c3 wifi: ath12k: fix rx_mpdu_start layout for QCC2072
    329b10ddc919b wifi: ath12k: fix MLO peer delete race
    af405d216316d wifi: ath12k: fix dp_link_peer dangling references on AP vdev rollback
    473ea7aa35615 hfsplus: validate thread record before delete key rebuild
    8e0c487b0b1b5 cxl/port: Restart port enumeration when a sibling adds the dport first
    7682b617db1f1 cxl/features: Serialize multi-part Get/Set Feature transfers
    ada7aa90eb65d cxl/pci: Honor -EPROBE_DEFER from component register setup
    e77594e0cea67 cxl/mbox: Break poison list loop on an empty payload
    5354222bef789 cxl/memdev: Fix firmware upload exact-fit handling
    dc0a119613617 cxl/test: Rework cxl_type2_mem_init() to use cxl_mock_platform_device_add()
    455e817515ffc iommufd: Simplify iommufd_device_remove_vdev()
    795113f9da49f arm64: dts: renesas: r9a09g047: Fix PCIe dma-ranges memory space code
    531ff98bcec50 arm64: dts: renesas: r9a09g056: Fix PCIe dma-ranges memory space code
    92425d1fdebc4 arm64: dts: renesas: rzt2h-n2h-evk: Remove unused MII/GMII pins
    e559626bee8a6 rpmsg: glink: fix deadlock in endpoint destroy during driver detach
    b86dbfe4583bf fs/resctrl: Fix UAF from worker threads when domains are removed
    6bd8bfb85257b perf record: Fix multiple PERF_RECORD_COMPRESSED2 records per push
    9f06abd2f64f5 perf record: Return the written size from process_comp_header()
    4c593c62c1499 fs/resctrl: Prevent use-after-free in rdtgroup_kn_put()
    5116fef23016e tools/sched_ext: scx_flatcg: Fix uninitialized stats on allocation failure
    9fb74dce5c650 media: v4l2-async: Unregister sub-device if asc_list is empty
    fb66f61a8e752 rust: drm: gpuvm: require Send + Sync for the driver's associated data
    59c557d2474c3 iommufd/selftest: Avoid selftest dirty bitmap size wrap
    9c6eace8d07e9 isofs: fix out-of-bounds page array access on empty zisofs block
    4e0af1264a0ff ASoC: apple: mca: increase SERDES reset delay
    6247fbddbcdf1 RDMA/hfi1: Initialize debugfs after probe completes
    364be5873f2ab RDMA/hfi1: Stop flushing the global IB workqueue
    83fe4e4f4fbf0 RDMA/hfi1: Free RX data on late probe failure
    4204f5c0312ba RDMA/hfi1: Preserve unit 0 on allocation failure
    b1e1b25723af4 RDMA/rvt: Return NULL after port allocation failure
    0d85891822df0 misc: rtsx_usb: avoid USB I/O in runtime autosuspend
    901951d0ed7a7 pmdomain: bcm: bcm2835: handle genpd provider registration errors
    6514c99d2c7d5 ALSA: hpi: Check transport errors during HPI6000 adapter initialization
    26b6b14c7a036 esp: do not unref managed frag pages in esp_ssg_unref()
    5f35a29a5eed3 xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full
    ed566979f99c5 crash_dump: release keyring reference at the correct time
    30e78390af056 hwrng: ks-sa - Fix runtime PM cleanup on registration failure
    e6d3c7eae75a4 crypto: ccp - Fix memory leak in SEV INIT_EX path
    364f3841bc22c crypto: ccp - Fix possible deadlock in SEV init failure path
    5de981b7db1f5 Revert "drm/msm: dsi: fix PLL init in bonded mode"
    96379c2dec725 drm/msm/dp: add missing drm_edid_connector_update() before add_modes on cached EDID
    0d37e2503efd1 RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state
    24ce944721dcd RDMA/ipoib: Drain RCU callbacks during module teardown
    4664368b9bd9d RDMA/mlx5: Drain RCU callbacks during module teardown
    48b72fa0d209a RDMA/core: Wait for RCU callbacks before unloading ib_core
    ea4a4237b161a iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE
    13a472452dcd5 wifi: rtw89: 8852a: fix RSSI report when average beacon RSSI is not ready
    280145253fd38 bpf: Mark tracing_multi trampolines as ftrace managed
    b7e2a5c6519ad bpf: Require a BPF cpumask for bpf_cpumask_populate()
    b425cc3913fb1 clk: qcom: camcc-sc8280xp: unregister CAMCC_GDSC_CLK
    b7cd0d057e4fc bus: qcom-ebi2: use managed resources for clocks and children
    f98700ea19755 soc: qcom: rpmh-rsc: manage PM notifiers with devres
    a819fd4479c7f perf metricgroup: Fix metric expression copy leaks
    ad44537175f7e clk: spacemit: k3: fix parent clock of UFS aclk
    c4e364ecb8098 perf record: Fix teardown hang on system-wide multi-threaded sessions
    c30c5ae811eea drm/panel: samsung-s6d16d0: Power off on prepare failure
    a0ac59897309e usb: chipidea: imx: fix missing ret assignment for dev_err_probe
    616dfbd3a0b48 usb: typec: ucsi: gaokun: unwind notifier on UCSI register failure
    9ada6c7692c0c usb: renesas_usbhs: Fix power-off ordering on unbind
    7a5b2e8ec85ac usb: mtu3: allow system suspend during active gadget connection
    428a82d987fcd platform/surface: acpi-notify: Check ACPI companion before use
    d25dd08268aea platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL
    3308b8c5f5a28 platform/x86: asus-wmi: fix resource leaks on probe failure
    e6a9c6b79b700 usb: fix UAF when probe runs concurrent to dyn ID removal
    9e6f57107c188 usb: gadget: aspeed_udc: check endpoint DMA allocation
    9c4bc8f7426aa usb: ljca: bound bank_num in ljca_enumerate_gpio()
    969bf1c64b840 usb: typec: tcpm: fix EPR AVS APDO maximum voltage decoding
    36315a330e067 usb: gadget: configfs: fix out-of-bounds read of qw_sign
    58952c83dfe6e usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths
    3819c6f255a37 usb: gadget: uac: validate rate list length before storing
    59faa59c25a0a serial: qcom-geni: do not advance stale DMA completions
    494bb296407fe serial: ma35d1: Fix OF node reference leaks in console init
    606f769df00d8 serial: 8250: Clear CON_PRINTBUFFER on port re-registration
    08182086dca4e media: platform: amd: use refcount_t instead of atomic_t
    55bb98850f392 spi: qcom-geni: Fix missing error check on pm_runtime_get_sync()
    7bfa711f311a5 platform/x86: asus-wireless: Fail probe when there is no ACPI match
    73e2e363a9661 perf capstone: Fix kernel map reference count leak
    01f6c6ff9ebfb selftests/sched_ext: Fix bpf_link leak on early return in prog_run
    891aee54b39d2 hwspinlock: propagate errno when registering single lock
    56a3846830ac9 bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max
    bce6b48af3abf remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3
    5aed51501447e remoteproc: qcom_q6v5_adsp: Fix reference leak for device node
    f3614622dc41f bpf: Drop scalar id on sign-extending narrowing stack fills
    acc1903222505 platform/x86: lg-laptop: Fix LED resource handling
    392c19faec6bf platform/x86: dell-wmi-base: Fix handling of ultra performance key
    f59cd5007055c platform/x86: dell-wmi-base: Fix resource leak on module load failure
    ef59ff891adf9 platform/x86: dell-privacy: Fix race condition
    3fd86a5d6facb ACPI: RISC-V: Fix riscv_acpi_add_prt_dep() loop handling
    088c1c8592134 ACPI: RISC-V: Check acpi_get_handle() status in riscv_acpi_add_prt_dep()
    b0f9c3418735b ACPI: RISC-V: Fix riscv_acpi_irq_get_dep() loop termination
    8f194dee0c0d1 printk: Fix possible console use-after-free
    a09efb1e256f0 leds: st1202: Validate LED reg property against channel count
    f1a049284bcb7 leds: st1202: Disable channel when brightness is set to zero
    6d711caa9f240 leds: st1202: Fix brightness having no effect while pattern mode is active
    14bb601435c02 leds: st1202: Set all pattern PWM slots to full after clearing pattern
    037359b67bb9c leds: st1202: Fix spurious pattern sequence start in setup
    2e3900c92db27 leds: st1202: Fix pattern duration prescaler and pattern_clear skip marker
    523902fc6f2e0 leds: st1202: Stop pattern sequence before reprogramming
    e9d1f11c70498 leds: pca9532: Fix inverted GPIO output polarity
    2c1795907ac5a arm64: dts: mediatek: tungsten-smarc: Remove unnecessary cells
    585a58a6568d2 iommu/amd: Fix false positive in SB IOAPIC IVRS validation
    5af7fdb7659b0 iommu/amd: Prevent SB IOAPIC from overriding IVRS validation errors
    697c84154983e iommu/msm: Return -ENOMEM on memory allocation failure in probe
    35ebd93daaec0 bpf: Fix security_bpf_map_create error handling
    90f661bcfaf3a iommu/mediatek-v1: Fix off-by-one in MT2701_LARB_NR_MAX
    21c6445366795 bpf: Reject programs with inlined helpers if JIT is not available
    8467d5a2fb87e bpf: Introduce jit_required flag and remove bpf_prog_has_kfunc_call()
    8f3f64faee335 bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation
    2b2a903bee56d bpf: Fix use-after-free on mm_struct in bpf_find_vma()
    cab81e3ad9485 efi: fix stale reference to efi_recover_from_page_fault()
    86d11c594d60b bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux
    8e29690f91286 perf dso: Fix kallsyms DSO detection with fallback logic
    20740a2115723 perf vendor events amd: Reintroduce deprecated Zen 5 core events
    7ff668cfc3960 drm/amdgpu/mes: Fix hung_queue_db_array loop limit for multi-XCC
    272c97f9286d5 bpftool: Check EVP_Digest when computing excl_prog_hash
    c4058355d2748 udf: Mark LVID buffer as uptodate before marking it dirty
    6be64cca6527f usb: gadget: r8a66597: avoid double free of ep0_req in probe error path
    62efee3515663 usb: typec: ucsi: unregister debugfs entries on teardown
    d67607e774952 thermal/drivers/rcar: Fix error checking in probe()
    437d6d15936db staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()
    acd23fc1af6f7 staging: media: ipu7: fix pm_runtime refcount leak in ipu7_init_fw_code_region_by_sys()
    19d5566b84ca1 bpf: Reject writes through untrusted BTF pointers
    1238e1c7e5d3d perf data convert json: Fix trace_seq memory leak in process_sample_event()
    6993d1fdb9de2 perf record: fix poll storm when monitored threads exit
    f7a1cf9f679da clk: qcom: gcc-qcs8300: Use retention for USB power domains
    8dcdeb8e2337c clk: qcom: gcc-qcs8300: Use retention for PCIe power domains
    6ccc420af8188 arm64: dts: qcom: sc8180x-lenovo-flex-5g: Describe the display power net
    1d6f9c6e84523 arm64: dts: qcom: sc8180x-lenovo-flex-5g: Rename regulator nodes
    c7e72d6d5126e arm64: dts: qcom: sc8180x-primus: Describe the display power net
    c64326ede83c2 arm64: dts: qcom: sc8180x-primus: Rename regulator nodes
    9ff0ec945a73f arm64: dts: qcom: sdm670-google: add lpi reserved gpios
    488c42ff7f42f arm64: dts: qcom: sm6125-xiaomi-laurel-sprout: Fixup panel compatible
    07bb368ae12b8 arm64: dts: qcom: sc8280xp-arcata: Fix top USB-C DP alt mode
    40bd77fa2857c clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister()
    fade2037ee2aa clk: qcom: gdsc: propagate gdsc_enable() failure for ALWAYS_ON domains
    02533b6cf5f69 clk: qcom: gdsc: propagate gdsc_check_status() errors from gdsc_poll_status
    609ebd03deee4 arm64: dts: qcom: Add #{address,size}-cells to Chromium-based /firmware
    ac2f3219b3303 timekeeping: Account for monotonicity adjustment in ntp_error
    ad25b583d5919 y2038: uapi: Use 64-bit __kernel_old_timespec::tv_nsec on x32
    1f0c3c0c36c7a time/namespace: Validate nanosecond field in proc_timens_set_offset()
    a36bf15ab84c5 timers/migration: Fix memory leak in tmigr_setup_groups() error path
    7099de4de14af timekeeping: Unwind aux clock sysfs children on failure
    2a4ffc16d3a78 clocksource: Unregister subsystem on device registration failure
    d739c63bfa385 selftests: timers: leap-a-day: Fix -w option and update usage comment
    dd32537936976 irqchip/gic-v3-its: Fix its node leak in gic_acpi_parse_madt_its()
    de5d0190c97fe irqchip/gic-v3-its: Fix memleak in its_probe_one()
    10f639168da59 selftests/lsm: Fix memory leak in attr_lsm_count
    ab0c755ad5e7a selftests/bpf: Fix memory leak in msg_alloc_iov
    88500a86ab79f s390/bpf: Replace ly instruction with llgf
    e626a50d07d43 bpf: Reject MEM_ALLOC BTF accesses past object bounds
    5280e0d3d6a5c selftests/bpf: Fix memory leak in msg_alloc_iov error path
    0916005195488 selftests/bpf: libarena: Clean up allocation state before buddy tests
    c812c2ff5507d ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer()
    08d6d9800e2e1 kbuild: unset sub_make_done before calling kselftest build system
    911190f0b9511 staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()
    b2243ffaac14c staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown
    41a79bd9e5a74 staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown
    b7fa32159dc51 staging: fbtft: Use sysfs_emit_at() to print to sysfs file
    cfcc5a41a9664 greybus: audio: bound the topology section sizes against the fetched size
    d13a82297796b staging: sm750fb: Add missing Kconfig dependency
    dd5767bd42401 staging: sm750fb: gate dualview dataflow using g_dualview
    fbf9e0f2d5369 staging: greybus: audio: correct sscanf() return value check
    1c2a4ab6efa26 wifi: mac80211_hwsim: avoid NULL skb in stop queue drain
    b2adb0e2f313e PCI: qcom: Skip PERST# GPIOs provided by downstream PCIe devices
    c6eca03162e1c bus: qcom-ebi2: Fix clock leak on probe failure
    f28e119378322 arm64: dts: qcom: sc8280xp: sort reserved memory regions
    7a9ab46f1e2eb clk: qcom: gcc-glymur: Move EVA clocks to critical clock list
    784d168036a4b arm64: dts: glymur-crd: Add reset GPIO to touchscreen node
    368b8e4299650 arm64: dts: qcom: glymur-crd: Move common board nodes to shared DTSI
    45f5512f13113 arm64: dts: qcom: glymur-crd: Add Embedded controller node
    6f1ed14f6c5e1 arm64: dts: qcom: glymur: Fix gcc clock specifier for usb_mp_qmpphy nodes
    144094da5b917 arm64: dts: qcom: glymur: Fix unit-address mismatch for spmi_bus2
    da9ddc8ba43ca arm64: dts: qcom: hamoa: Fix clocks for HSPHYs
    19c802bcaf764 arm64: dts: qcom: sm6125: Use 64 bit addressing
    f78fcc42099fe arm64: dts: qcom: sm7225-fairphone-fp4: Fix address in fb node name
    e7483891df45e arm64: dts: qcom: sc8280xp-blackrock: switch to uefi rtc offset
    4b6f2aebaa922 arm64: dts: qcom: monaco: fix wrong connection for the replicator
    bee77cd34ce83 clk: qcom: gxclkctl: Use custom disable callback for gx_gdsc
    dee085f96cb91 clk: qcom: gdsc: Add custom disable callback for GX GDSC
    78d9daf5e13ad cgroup/cpuset: Make nr_deadline_tasks an atomic_t
    195d7cca6433e PM: sleep: Fix off-by-one in wakelocks number limit check
    46b5a0f22bfd4 bus: ti-sysc: Fix /chosen node reference leak
    d553a9dc1c456 nvmet-rdma: fix response resource leak on queue teardown
    e24951cab8aa6 nvmet-rdma: factor out response resource cleanup
    840ab22ffa4d8 nvme-apple: Use acquire/release for queue enabled state
    0550a269c04b8 fuse: move "epoch" from dentry.d_time to fuse_dentry.epoch
    02d4ee65dc2e8 RDMA/bng_re: return a timeout when firmware responses stall
    ec790449ad225 arm64: dts: qcom: talos: Fix GMU unit address
    59d485a6289cb arm64: dts: qcom: sm8750: wire UFS to ice instance
    a6c0e693a7c88 RDMA/irdma: Add refcounting to user ring MRs
    ff994bedc6690 RDMA/irdma: Add irdma_cq fields to track pbl allocations
    e4df2e98e4393 RDMA/irdma: Add a refcount to track user ring MR associations
    dc043b8d976df RDMA/irdma: Deduplicate the irdma_del_memlist logic
    a3217fe799862 crypto: keembay - Fix AEAD unregister count in error path
    0a261177ad324 crypto: rk3288 - fail ahash requests on HASH idle timeout
    9486a6bcc90de hwrng: omap - Fix probe error path cleanup
    bdc3b37a935f2 hwrng: xilinx-trng - propagate timeout before any data is read
    b68b35ed97d3e crypto: sa2ul - stop probe if context pool creation fails
    94abda77b57a3 crypto: atmel-sha204a - fix heap info leak on I2C transfer failure
    add28e9988902 crypto: atmel-ecc - reject hardware ECDH without a public key
    92e4979e1a770 crypto: qat - clear AES key schedule from stack
    1a106c6e17525 crypto: qat - cancel work on re-enable SR-IOV timeout
    bee8d1fcdc8f3 hwrng: core - fix rng list on registration error
    15732636ac123 perf vendor events amd: Update Zen 6 core events
    e9d249a231845 perf vendor events amd: Update Zen 5 core events
    6959e254f522c perf test amd ibs: avoid using executable heap
    1b3d6fef10e69 perf/x86/amd/uncore: Add group validation
    945e335da3402 libbpf: Detect uprobe syscall with new error
    7273ac5e72408 libbpf: Change has_nop_combo to work on top of nop10
    16776fb9c55de perf cs-etm: Filter synthesized branch samples
    54080d72abb3c perf cs-etm: Fix thread leaks on trace queue init failure
    56e2ff5c9be15 tools/nolibc: mark arg1 operand in __nolibc_syscall0() as write-only
    08af0f96120a2 fanotify: initialize permission event watchdog state
    1b3fecd099100 uprobes/x86: Move optimized uprobe from nop5 to nop10
    310a504467a18 uprobes/x86: Allow to copy uprobe trampolines on fork
    88a3464c421f1 uprobes/x86: Do not leak trampoline vma mapping on optimization failure
    1ca1ca70e90a9 uprobes/x86: Remove struct uprobe_trampoline object
    f132fc01b359a wifi: rtw89: fix HE extended capability length check
    942becee7e788 wifi: rtw89: check return values in rtw89_ops_start_ap()
    80ea28c94cf18 wifi: rtw89: fw: fix link ID filling for LPS MLO common info
    6268f46d83875 platform/chrome: sensorhub: Fix memory overread in ring handler
    582b5e5362455 wifi: rtw89: fw: correct preload field of w2 in rtw89_fw_h2c_default_cmac_tbl_be()
    876b110114da3 wifi: rtw89: debug: fix off by on in rtw89_ppdu_str()
    e984c63bd3359 selftests/rseq: Replace glibc-specific __GNUC_PREREQ with portable check
    343aa5275484d csky: Fix a4/a5 restoration in syscall trace path
    feb0901bbcaf9 iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure
    c1900758c3a8b soundwire: qcom: Fix port exhaustion check in stream_alloc_ports
    8b5654d317277 dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout
    54c9b3315adac dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe
    aec7cf9a5bd89 dmaengine: zynqmp_dma: fix race between runtime PM and device removal
    c3e943490ced0 dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers
    8896852b6fcd3 dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure
    7d83720d0741d leds: lp5860-spi: Fix an error handling path
    989f3d01fc196 leds: lp5860: Fix a potential double-unlock
    1017fe1c7f48e mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug
    915c2d9d69fc6 bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks
    1d39861b9c41a selftests/bpf: Mask socket type flags in mptcpify prog
    ff3f22ed8d2f3 bpf: Copy per-CPU map value padding in copy_map_value_long()
    03b44839ce81d tools/bpf/bpftool: Reset vmlinux BTF after struct_ops commands
    f6fd865651ccf tools/bpf/bpftool: Reset vmlinux BTF after map commands
    8d52adf7c923b bpftool: Strip all -Wformat* flags from bootstrap libbpf build
    32bd68edbc6cb drm/amd/display: Fix dangling pointer in CRTC reset function
    80c0f51aced43 drm/amd/display: Fix dangling pointer in plane reset function
    4bd683d1a7d33 ASoC: ti: j721e-evm: Avoid mixing goto with guard()
    daaac025b1588 ASoC: samsung: i2s: Avoid mixing goto with guard()
    06aef6dcc1d52 drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup
    1664327ce797e drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup
    83c680de6d41d drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
    fceac25487b21 regulator: tps6594: Fix device node reference leaks in multiphase loop
    f88c65473f525 PCI: imx6: Fix building against PCI_PWRCTRL_GENERIC
    6d0343961cebe PCI: imx6: Fix building against PCI_HOST_COMMON
    385f7a0f62b2e perf tests: Fix flakiness in branch stack sampling tests
    8c0a67e54ec32 perf tests: Fix flakiness in BPF counters test on hybrid systems
    16d72de0201e8 perf tests: Fix flakiness in trace record and replay test
    cf79e50a1d30d perf tests: Add robust record retry helper and use subsecond workloads
    a69133af55da2 perf tests: Fix Python JIT dump profiling test failure
    5aa6eb9129c46 perf tests: Skip metrics validation if system-wide recording lacks permission
    63aa9756ce0b6 perf test: Truncate test description to fit terminal width
    b0f59d0a779eb perf parse-events: Restrict core PMU bypass to --cputype option
    2097ae16533d3 perf evlist: Add reference count checking
    fa437210fcbd6 perf evsel: Add reference count
    744f25f0cbab4 perf evlist: Add reference count
    a1a3ba14f4430 perf util: Sort includes and add missed explicit dependencies
    5678f866a499c perf pmu: Recognize default_core as a core PMU in more places
    e482f9ee97762 wifi: ath12k: correct monitor destination ring size
    de3e556137804 wifi: ath12k: fix TLV32 length mask
    82396ecb8f518 media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define
    4661b90eb66fb media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define
    b7f54ac6a1313 cxl/test: Propagate -ENOMEM on platform_device_alloc() failures
    348a95be32389 cxl/test: Add hierarchy enumeration support for type2 device
    3e0285b77f515 cxl/test: Refactor platform device enumerations
    3f6fba439a2d3 cxl/test: Add test for module parameters
    66aa3763cf3fe perf test: Skip failing 'perf test aslr' test case
    15a6207d39b16 workqueue: only show running workers in stall diagnostics
    0d98c5669d01c riscv: kexec_file: Fix crashk_low_res not exclude bug
    23d41b2e68765 drm/panthor: Fix NPD issue on partial unmap of an evicted BO
    f01cb11729447 drm/panthor: Support sparse mappings
    e215d705f5a07 drm/panthor: Pass vm_bind_op to vm_prepare_map_op_ctx
    727f043d699ab pinctrl: bcm2835: Don't remove an unregistered GPIO chip
    76777e5d5139f perf/x86/intel: Keep cap_user_rdpmc in sync with RDPMC user-disable state
    1a6a214f732d9 pinctrl: imx1: fix device_node leak in dt_is_flat_functions()
    64aa1bb4017d5 perf/x86/intel/uncore: Fix uncore_box ref/unref ordering
    9c8967bcbb77e perf/x86/intel/uncore: Introduce PMU flags and broken state
    23fcbd6df3fd3 perf/x86/intel/uncore: Factor out box setup code
    18f4d93162155 perf/x86/intel/uncore: Let init_box() callback report failures
    c27d15aac37a6 perf/x86/intel/uncore: Fix refcnt and other cleanups
    5026e40cf9268 perf/x86/intel/uncore: Fix PCI PMU cleanup on setup failure
    a48296454b486 perf/x86/intel/uncore: Keep PCI PMUs working when MMIO/MSR setup fails
    f94e62d21faad sched/fair: Fix overflow in update_tg_cfs_runnable()
    089e307fda2ea sched/core: Fix inter-class wakeup_preempt()
    d452a11898eb2 mm/mm_init: fix incorrect node_spanned_pages
    e0773ad25a34a drm/lima: call drm_mm_init() with a valid allocation range
    666700062f1ce clk: imx: scu: drop redundant init.ops variable assignment
    99a07a8976704 arm64: dts: imx8mp-ab2: Enable MU2 for DSP communication
    11047c7ed5cc3 arm64: dts: freescale: imx95-toradex-smarc: add alias for lpuart5
    4e29df25bbe67 arm64: dts: imx93-kontron: set memory node to 0x80000000/1GiB
    db414a1cb1d46 firmware: imx: sm-misc: Add NULL check for kmalloc in syslog_show
    bea093a6e388b ARM: OMAP2+: Fix OF node reference leaks in omap_hwmod
    67c9db97fa087 ARM: imx: fix device_node refcount leaks in imx7_src_init()
    6b60c84e78469 ARM: imx: fix device_node refcount leak in imx_src_init()
    48852aed10700 clk: hisilicon: reset: Use devm_kzalloc to initialize hisi_reset_controller
    eebc053abef68 arm64: dts: imx8mp-frdm: Add missing HDMI DDC pinctrl
    22c944e440bc9 ASoC: fsl_audmix: rework runtime PM handling in probe
    a47f087877bb2 ASoC: rt700-sdw: always drain jack work on remove
    3d9f555852975 clk: stm32: add missing bitfield.h header
    a0a546a9625d3 clk: nuvoton: ma35d1: fix ma35d1_clk_pll_determine_rate logic
    ff955d3d1c45e clk: nuvoton: ma35d1: fix PLL_CTL1_FRAC bit field width and fractional calc
    0a6901e715bae clk: nuvoton: ma35d1: fix ignored div_u64 return values in PLL freq calculation
    36d5c243d2db6 clk: moxart: remove unused variables, fix refcount leak
    69815429f8bc7 clk: eswin: Add CLK_IGNORE_UNUSED to NoC clock
    c37fa5d8b2a69 clk: canaan: Clear rate fields before reprogramming dividers
    7b38ddc1c1fb0 clk: versaclock7: Fix APLL clock leak on probe failure
    9c2b1efef2537 ARM: imx: avic: Fix OF node reference leaks
    f0c12add5439d cxl/pci: Remove incorrect mbox.valid check in cxl_pci_type3_init_mailbox()
    723808b2c117c arm64: dts: imx943: Correct PCIe outbound address space configuration
    0c6897bdadffb arm64: dts: imx94: Correct PCIe outbound address space configuration
    b4e11c731d6be cxl/mbox: Clamp mailbox output allocation to the payload size
    4992cdc4eb979 ASoC: SOF: ipc4-topology: Return error for invalid number of formats
    a81768b43b592 mtd: rawnand: pl353: Fix debug prints
    6559174fcb151 media: cec-pin: Fix event FIFO ordering
    394dec22a5d59 soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap()
    99330b12376c3 HID: roccat: bound device-supplied profile index
    12c889727ddc0 HID: nintendo: Fix imu_timestamp_us double increment per report
    0fecd89f979a8 HID: core: quiesce input in hid_hw_stop() to prevent use-after-free
    b1af4cccae717 selftests: proc: include fcntl.h in proc-pidns
    54d6b0ee9b8ba platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count
    aeb3e0083a07d x86/cfi: Use symmetric SYM_START and SYM_END in __CFI_TYPE()
    6a052a154106e drm/bridge: of-display-mode-bridge: Fix missing static const for the bridge funcs
    26cb44b0afff9 sched_ext/scx_flatcg: Fix cvtime_delta race and add hweight scaling to bypass charging
    c776670f4ec9d cgroup/cpuset: Avoid unnecessary cpus & mems update in cpuset_hotplug_update_tasks()
    f2df709905ab6 smack: restrict smackfs/{direct,mapped} values to 0-255
    4d27a82210103 smack: deduplicate smackfs/{direct,mapped} file_operations
    c62a818897189 smack: simplify write handlers of sysfs entries
    d02c55e3ea82e smack: fix incorrect task context in smack_msg_queue_msgrcv
    66f8255d1dd0f drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure
    4a2355385486c drm/bridge: cdns-dsi: Return an error pointer on allocation failure
    b49e7a24cf5bd rust: drm: gpuvm: update DriverGpuVm for DeviceContext
    c69e63065f35b drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format
    a53cc0561dd18 drm/rockchip: vop2: Add RK3576 to the RG swap special case
    0d33645973227 drm/display: hdmi-state-helper: Try subsampling in mode_valid
    0b9878aba5cf9 drm/v3d: Clear queue->active_job when v3d_fence_create() fails
    3b259831b7388 gpu: nova-core: gsp: tu102: keep unloading if FWSEC-SB fails
    23c02299e7d13 drm/bridge: display-connector: trigger initial HPD event for DP
    a1303a44165dd drm/bridge: display-connector: don't autoenable HPD IRQ
    887315e5d2eb8 drm/rockchip: analogix_dp: Fix OF node reference leak via auto cleanup
    4cd23a6e5c9d6 drm/rockchip: analogix_dp: Enable hclk for RK3588
    69173c1ebedec drm/rockchip: vop2: Wait for layer cfg done before switching LAYERSEL_REGDONE_SEL
    e83dbc07404a0 drm/rockchip: vop2: Fix wrong wait target in layer cfg done check
    11f07929f454e drm/rockchip: dw_dp: Release core resources
    b66710d95db2f drm/rockchip: dw_dp: Add missing newline in dev_err_probe() message
    48aaa495e24ce drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel
    317dc1ead82e2 drm: lcdif: Wait for vblank before disabling DMA
    ef28f1970de4b drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader
    873fab4fa057b drm/atomic: Drop drm_private_obj.state assignment from create_state
    20a30536d60e3 drm: Remove unused header in drm_dumb_buffers.c
    b34b41c5bda73 Smack: Fix error in capability bypass
    dfc4ee8954d3e KVM: x86: Check EFER validity on KVM_SET_SREGS*
    8fb2065261ec6 KVM: x86: Move the bulk of register specific code from x86.c to regs.c
    562f2b0c8824a KVM: x86: Rename __{g,s}et_sregs2() => kvm_vcpu_ioctl_x86_{g,s}et_sregs2()
    515dead3bb640 KVM: x86: Move get_segment_base() to regs.h, as kvm_get_segment_base()
    e92b03627ad89 KVM: x86: Extract REGS and SREGS runtime sync code to helpers
    34c1d674cef84 clk: qcom: Fix test_ctl_hi field for DEFAULT_EVO PLLs
    6a78b7697a88e mm/mremap: reset unfaulted VMA page offset for MREMAP_DONTUNMAP
    b1e740b915662 nvdimm: virtio_pmem: refcount requests for token lifetime
    c4a140f0a30f2 nvdimm: virtio_pmem: use READ_ONCE()/WRITE_ONCE() for wait flags
    fc25f9a9db8ee nvdimm: virtio_pmem: always wake -ENOSPC waiters
    c9cd77db17a98 nvdimm: virtio_pmem: stop allocating child flush bio
    72561ca1ab96f nvdimm: pmem: keep PREFLUSH before data writes
    e9414030257b4 nvdimm: preserve flush callback -ENOMEM
    007bc1842317b memcg: move LRU size accounting on reparenting instead of copying it
    4e30fbd26e84e ksmbd: fix tree connection use-after-free in smb2_tree_connect()
    a6c88e5e3a75f smb/server: fix tree connection leak in smb2_tree_connect()
    35d5c59fe6b1d ksmbd: fix maximum allowed access checks
    7fa251df1110e btrfs: abort transaction before releasing tree_log_mutex on commit failure
    9cf8c4c60020b tracing/probes: Fix BTF kflag check for anonymous struct member access
    b8f5e4ab11e09 tracing/probes: ignore id update from btf_type_skip_modifiers
    15f78eea8c4be staging: sm750fb: fix mono image source stride mismatch in lynxfb_ops_imageblit()
    daed571f85fe3 udf: Fix data loss when converting inline inodes to out of line
    d347c971aaddc udf: Move udf_map_block() up
    4822a030929e0 dm-pcache: validate the persisted dirty_tail chain at load
    150e71808d371 i3c: master: Do not treat master device as a duplicate target
    50034d8d0f797 i3c: master: Fix use-after-free of master->this
    b4bf8af5e7d7d dm-pcache: validate seg_id fields from persistent memory
    9dc73c51ed3ee i3c: master: Fix recursive locking during device registration
    6ecf17bf5fe8d i3c: master: Fix device_register() error path
    96b066831f6e0 mm/damon/core: skip aging from repeated aggressive merging
    e54602d9e38db batman-adv: bla: avoid CRC corruption due to parallel claim add
    f68038c77a2f3 batman-adv: dat: atomically update mac addresses
    fe3772ea9d269 drm/amd/display: Scale custom brightness curve from full range
    a300e35c0a4b4 Linux 7.2.5
    be15b8da4a82c ksmbd: zero pipe read compound padding
    ecdcceed4d377 PCI: Allow per function PCI slots to fix slot reset on s390
    8418a7201bb3f PCI: Introduce PCI_SLOT_PLACEHOLDER constant for slot_nr placeholder value
    fb27cd32dd781 mm/damon/vaddr: drop last same folio access check optimization
    e3db5d6bb0349 mm/damon/paddr: drop last same folio access check reuse optimization
    91b75a9e79e98 mm/damon/ops-common: use nr_accesses moving sum for quota score
    8a96a06e04d21 mm/damon/core: avoid infinite kdamond_merge_regions() internal loop
    013731074ab6a power: supply: ab8500_fg: fix use-after-free on remove
    7a184e6f211c8 power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe()
    57dba479a3e1f remoteproc: qcom: pas: Guard dtb metadata release with dtb_pas_id check
    ea0408273ccf5 rpcrdma: arm rn_done before publishing the notification
    c4efdc1d4cb3e bpf: Disable preemption in bpf_get_stackid
    f1e97925827c5 bpf: Use stack id functions instead of __bpf_get_stackid
    b3024de68b817 bpf: Factor stackid_new_bucket from __bpf_get_stackid
    370069c1f627c bpf: Factor stackid_fastpath function from __bpf_get_stackid
    b8cf96ff8c113 bpf: Factor stackid_init function from __bpf_get_stackid
    8cc98db4fc590 ksmbd: fix use-after-free in oplock break notification
    88abd367fe8a7 drm/nouveau/gsp: fix vblank interrupts on GB20x
    37ae6066f65e6 drm/nouveau/disp: fix head state readback on GB20x
    37a758989faa5 drm/nouveau/disp: fix HDMI GCP AVMute register offsets on GB20x
    20ca0fdad658e drm/nouveau/disp: fix HDMI vendor infoframes on GB20x
    dbcaa9d0e9ee5 drm/nouveau/disp: route GSP-RM display MMIO through nvkm_disp_func hooks
    a1db244bb2828 drm/nouveau/disp: move the GSP HDMI GCP AVMute write to engine/disp
    0cec2ceb5d955 drm/nouveau/disp: move GSP head-timing ISR and vblank helpers to tu102.c
    c60033c172420 drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE
    4083d24c2636f drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE
    3857238de6bce drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op
    4f3f9deca7e79 drm/nouveau: Use write-combined maps for coherent
    1fef7553dc628 drm/nouveau: unsubscribe the channel-kill event before the fence context
    ae5d57131dbff drm/nouveau/gsp: use per-version DP_CONFIG_STREAM params on r570 firmware
    4deb29b9d33bf drm/nouveau/dmem: fix mismatched DMA unmap size for large folios
    0163b92946d0a drm/nouveau/dmem: fix callocated underflow on large folio split
    10e92e18e3dab drm/pagemap: Fix folio allocation fallback and use-after-put
    f34f8b904592e drm/sysfb: ofdrm: Fix is_avivo() constant comparison bug
    d9daf9a6e7a6f drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation
    bbdc6761c5566 drm/sysfb: simpledrm: Improve stride validation
    48c60b763a0dd drm/sysfb: simpledrm: Improve panel-size validation
    5683b1b2a6090 drm/sysfb: simpledrm: Improve framebuffer-size validation
    62e744babd0b5 drm/amdkfd: Reject zero-sized AQL queue allocations after size halving
    c643c229babe2 drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore
    0a9a0e8a97da7 drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram
    58e866711b234 drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds
    a2035918a7a1d drm/amdkfd: Fix error path at svm_migrate_copy_to_ram
    6aae545c87087 drm/amdkfd: Add TLB flush after MES queue eviction/suspension
    6decb921f7c58 drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT
    4e651478656b5 drm/amdgpu: update the fw version for gfx12 userqueues
    bcc58f2ef7708 drm/amdgpu: update the fw version for gfx11 userqueues
    c931aedaf18c9 drm/amdgpu: Skip accessing psp rum time db for APUs
    ebe7542553d00 drm/amdgpu: force complete the MES ring fences on reset
    bdd6a58743e00 drm/amdgpu: force complete the KIQ ring fences on reset
    4614011a844b4 drm/amdgpu: fix Idle BOs list in VM debugfs status info
    c41cc2632bd60 drm/amdgpu: fix byte/dword unit mismatch in coredump IB dump
    236ccf3ff9fde drm/amdgpu: fix autosuspend cleanup during removal
    6ea36fc580cdb drm/amdgpu: Disable runtime PM for externally attached dGPUs
    0bfb938182d13 drm/amdgpu: clamp the isolation index for rings outside a partition
    4d030c3487074 drm/amdgpu: delay ttm buffer func enablement on xgmi
    fd4746ed0574d drm/amdgpu: check thunderbolt before switcheroo registration
    a46ab76b6cf54 drm/ttm: Drop tt->restore after successful restore
    e6195b941fdc8 drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used
    d152b582d852c drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value
    eab46d9629807 drm/gud: validate TV mode names before creating enum property
    6ea61f1d4cbaa drm/gud: NUL-terminate TV mode names read from the device
    9ae19bd60891b drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check
    25ad527dc92aa drm/amdgpu/gfx8: only apply compute quantums to KCQs
    2d2071d673039 drm/amd/display: Set gpuvm min page size to 4K on dcn35/36
    647426f78a344 drm/amd/display: Remove const Qualifier From Non-Pointer Fields
    b10cc09b32924 drm/amd/display: validate plane degamma LUT size for private color prop
    3891405e64885 drm/amd/display: Fix HPD consideration for VGA/LVDS connectors on DCE
    dac29cbb405b9 drm/amd/display: fix dc_lock leak on GPU reset error paths
    15ee43aad0df4 drm/amd/display: avoid divide-by-zero in __is_lut_linear()
    ac908108d1977 drm/hibmc: Use drm_atomic_helper_check_plane_state()
    93f36cf57c729 drm/hibmc: Fix list of formats on the primary plane
    d8c055b34ab3a drm/nouveau/disp/r535: Add scanline position support + head state support
    423fd96d094c1 drm/ssd130x: fix column and row end address in partial updates in ssd133x
    956005c09cfd9 drm/sun4i: fix refcount leak in sun4i_backend_init_sat()
    adadda76184eb drm/ssd130x: fix column and row end address in partial updates for ssd132x
    84829e324a396 drm/i915: Guard against NULL driver_data in i915_pci_probe()
    80e4fd48b9004 drm/i915/display: Clear SEL_FETCH_PLANE_CTL on plane disable
    2d1215a72159d drm: fix race between partial drm_dev_register() failure and ioctl
    972afe6d53140 drm/panel-edp: fix i2c adapter leak on probe failure
    f7f61839ba393 drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure
    3e5c7cddc0073 drm/panthor: fix firmware control interface bounds checks
    6ae19dce3e8c1 drm/panthor: harden firmware build-info bounds checks
    c659ba6939702 drm/xe/vram: report FLAT_CCS base misalignment
    967a179463d32 drm/amdgpu: avoid force-completing uninitialized UVD rings
    3e234c6face86 drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()
    c42608c09b6b5 f2fs: fix to zero post-EOF data when extending file size
    0b196c07407f4 f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer()
    153df7dc3aaee f2fs: fix to reclaim space in f2fs_allocate_pinning_section()
    931e1aa4d44c5 f2fs: fix valid block count leak on data block allocation failure
    bee6dfcc111b1 f2fs: protect critical_task_priority updates with s_umount
    3923ec2b98c96 f2fs: fix to clear dirty flag on folio in error path
    436cdabc64c10 f2fs: fix to off-by-one issue in f2fs_zero_post_eof_page()
    e88a37a6ec5d9 f2fs: fix to return -EFSCORRUPTED in f2fs_get_node_info() correctly
    4e85a62b0c27b f2fs: fix i_size when pinned fallocate partially fails
    905411f650487 f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()
    b9776094aa711 f2fs: fix to migrate all curseg types during free_segment_range
    8f3b99c50dd0d f2fs: avoid NULL checkpoint thread access in sysfs
    cc34df18da92f f2fs: fix folio_nr_pages() race after put in large folio invalidate
    93a3e6a4c9e72 f2fs: fix dentry folio leak in find_in_level
    99d14d61aa8be f2fs: embed f2fs_gc_kthread in f2fs_sb_info
    34d9717097485 f2fs: fix to avoid potential section-unaligned pinfile
    47a4aaa566226 f2fs: don't drop the top folio order in the f2fs_iostat tracepoint
    317d32e1a8dea f2fs: limit recovery filename logging to stored length
    cb0446b707668 f2fs: return writeback error from collapse range
    ab31e3b774f5d f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set()
    83f234dcb0e8d f2fs: dirty directory inodes on mtime/ctime update
    dcae1eeda5314 f2fs: validate MOVE_RANGE destination size
    c14282d35ea86 f2fs: fix to avoid move_range and defragment on device_alias file
    89c65ec3c1890 f2fs: only redirty pinned folios in redirty_blocks
    45837717808fb f2fs: reject overlapping move range after len expansion
    5ba01cc400413 f2fs: return symlink writeback errors
    e9bfb56e2c1bd scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started
    7881faf862ee3 scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak
    4cd349f89daa3 scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics
    7d0b3f745efb2 scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition
    91fde7ad72253 scsi: qla2xxx: Drop vport reference under lock in report ID acquisition
    e70036dc2ddc0 scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort
    35124cfa9898b scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()
    f6e8977bce887 scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
    845d4abd92cd2 scsi: qla2xxx: Avoid double completion in async IOCB timeout
    157ca7d1af45f scsi: qla2xxx: Quiesce response IRQ before freeing request queue
    df86c27cf1ba9 scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()
    29f1f9ad9e354 scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
    a6374b508893d scsi: qla2xxx: Don't query firmware state while chip is down
    aac0d3cb91991 scsi: qla2xxx: Fix FCE trace enable parsing in debugfs
    9f31de4d07e4c scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()
    41ef7edde27ac scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump
    122bf170c94a3 scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
    33735490789e5 scsi: qla2xxx: Serialize flash version read in reset handler
    33c77254e6e91 scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
    b02ff132017b2 scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
    f2d4f025b67fc scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()
    9fc03be982763 scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
    61f05f2e98f0f scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config()
    f4aaa4a4e6f1d scsi: qla2xxx: Initialize NVMe abort_work once at submission
    d556f899964d1 scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
    e25241f9fa01f scsi: qla2xxx: Fix BSG job leak on validate flash image error path
    b185375d2996b scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters
    75fd6d041c4a3 scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
    47049fdadc0ea scsi: qla2xxx: Bound i2c->length in I2C bsg handlers
    a5501c4225623 scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
    2215e55ee1e5e media: chips-media: wave5: Resume device before setting EOS flag
    2e5b9d632da6d media: chips-media: wave5: Fix pipeline stall when queuing fails
    63d758d2f9dba media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued
    c104f37b9f79d media: chips-media: wave5: Add timeout while stop_streaming
    dc37c478ed659 media: chips-media: wave5: avoid skipping device_run while VPU has work
    8c3cfb9fff965 media: chips-media: wave5: Set inst->std during default format initialization
    5ee3099138fc2 media: chips-media: wave5: Guard bit depth check with initial_info_obtained
    cfcaa26b36f7e media: qcom: iris: fix missing hfi_id in gen1 GOP_SIZE cap
    d7f34cbaced92 media: qcom: iris: use disable_irq() during power-off
    14f49e4577810 media: qcom: iris: fix state-change debug log printing stale value
    672dbccf43513 media: zoran: Avoid freeing a registered video_device twice
    b24d34fd0b7cc media: vimc: fix pixel format lookup in enum_framesizes
    0e7f2cd72a4f9 media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure
    22128985b581d media: venus: fix payload size calculation in parse_raw_formats()
    66fe517d2dd38 media: venus: fix payload size returned by parse_caps() and parse_alloc_mode()
    881aafb139520 media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
    2bce73ab36d69 media: v4l2-ctrls: Allow unknown HDR10 white point and luminance
    30f85a7c59113 media: v4l2-ctrls: validate HEVC EXT SPS RPS counts
    a57d94026cb4f media: v4l2-async: avoid deleting unlinked ASC entry on link error
    fd5b4a14c87b2 media: ti: vpe: quiesce overflow recovery before freeing streams
    f1ba602afd5ee media: tda18250: fix possible integer overflow
    fc65623524b5b media: saa7164: fix cleanup on resource allocation failure
    7d221859ba45d media: s2255: check firmware size before reading trailing marker
    dd739517560c8 media: s2255: bound JPEG frame size before copying into the buffer
    5249a092ed2cf media: rzg2l-cru: Align bytesperline to hardware DMA stride requirement
    ac02b2c56ccef media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure
    a0d9d9a3b41a1 media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak
    74938f83a8abb media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow
    5ef075c44c79f media: rkvdec: hevc: tighten EXT SPS RPS control dimensions
    e21f0344fcdfd media: rkvdec: Propagate platform_get_irq() errors
    b866d4bcd2ec6 media: rockchip: rga: don't change RGB quantization
    5e6f5bffaa80f media: rc: sunxi-cir: Unregister rc device on probe failure
    f220b29d318f3 media: mali-c55: Fix scaler factor overflow for large crop sizes
    efb92bf2bd7a6 media: mali-c55: Fix AEXP IHIST disable bit shift
    003b2bf690683 media: mali-c55: Fix clock leak on reset deassert failure
    63fbd6372f77d media: mali-c55: fix dropped last AEC histogram zone weight
    5a65e6f9dff66 media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks
    de7192f111a47 media: nxp: imx8-isi: Correct color map between V4L2 and ISI
    ab15c39a83b6d media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing
    426ead7eed6d6 media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup
    0259ade4c4cea media: platform: mtk-mdp3: Fix SCP device refcounting
    d61ba609c3226 media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common
    f99d78280faaa media: iris: Enumerate cap->bus_info to differentiate between encoder and decoder
    dc31e4f1e1463 media: ipu-bridge: check all DMI entries when overriding sensor rotation
    eee6069e4e951 media: intel/ipu6: fix async notifier cleanup leak on parse error
    ea97482e46cc2 media: imx355: Avoid calling imx355_power_off twice in error path
    64d5e26dc6bb6 media: i2c: vd55g1: Fix media bus code initialization
    7304585c75972 media: i2c: vd55g1: Fix manual digital gain on color variant
    c85aa92f1b166 media: i2c: ov9282: restore flash duration calculation
    09453b467990e media: i2c: ov7740: fix use-after-destroy in remove
    6e13784452785 media: i2c: ov02a10: fix endpoint parsing use-after-free
    55eb48818f778 media: i2c: imx415: Return test pattern write errors
    46c63cc1c1aef media: i2c: imx415: Release runtime PM reference on VBLANK error
    9d2e6262f65dd media: i2c: alvium: Fix: Correct name of register in alvium_set_ctrl_auto_exposure
    e6f1a1ac9b8cc media: go7007: defer the ALSA v4l2 put until card release
    16cb1ee17e093 media: em28xx: fix use-after-free of dev_next->devlist on disconnect
    4666197ca4f7d media: em28xx: defer audio-only extension registration
    86d8468e9015c media: dt-bindings: nxp,imx8-isi: Drop fsl,blk-ctrl requirement for i.MX8ULP
    99cd62b9b1c81 media: cx23885: cancel NetUP CI work before teardown
    a636c72c7f522 media: cx231xx: reject geometry changes while the VBI queue is busy
    8c6610e230b93 media: cobalt: Avoid freeing ALSA private data twice
    81aa608ac3a56 media: cedrus: fix memory leak in cedrus_init_ctrls()
    ae614f4871215 media: cec: Serialize exclusive follower delivery
    6e7a52d237013 media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash
    7ad2fec276946 media: cec: extron-da-hd-4k-plus: add sanity check
    9c6ceb0949227 media: cec: disable delayed work before freeing an interrupted transmit
    cca2407794795 media: cec: core: Fix kmemleak due to missed rc_free_device() call
    e3c973c912aa4 media: bcm2835-unicam: Fix pipeline wrong validation for unpacked formats
    a6a568171d189 media: amphion: Remove obsolete frame_count check in venc_start_session
    c6749ac8f59cc media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref
    cc2bc29770b31 rust: drm: ioctl: fix unbounded lifetimes in ioctl handler arguments
    c4357ebeee63c LoongArch: Avoid preempt count underflow without probe
    c048b0a3c0836 LoongArch: Do not save/restore percpu base register in rethook trampoline
    fbf6ed7d827b4 LoongArch: Do not select HAVE_RUST when KASAN is enabled
    6311b8c471afa LoongArch: Fix acpi_package_ids[] array overflow
    90b84201cb651 LoongArch: BPF: Fix off-by-one error for insn_is_cast_user()
    f0e4d069cb47c LoongArch: BPF: Move arena register slot below TCC context
    00cdb31f17c7c LoongArch: Expand module virtual address space to 2GB
    96f44d493c280 LoongArch: BPF: Refactor jump offset calculation in tail call
    2a148e146993e LoongArch: BPF: Optimize redundant TCC loads in epilogue
    55e18311c705c LoongArch: Add DIRECT_MAP_PHYSMEM_END definition
    83715a40a2d30 LoongArch: KVM: Validate MSI data before routing it to EIOINTC
    bc7a6849b4395 LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY
    3bf6f5e2e1007 LoongArch: KVM: Free init resources if kvm_init() fails
    26bda95b64e8f LoongArch: KVM: Fix TOCTOU race on pv_features
    de54ab63ef127 LoongArch: KVM: Fix resource leak in kvm_loongarch_env_init() error path
    4595c9b2bdb0d LoongArch: KVM: Add unregister helpers for the KVM interrupt devices
    8e61f76e74583 LoongArch: KVM: Fix PC double advance in kernel MMIO read fast path
    f56060b0e10fa LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc
    46aa64821f6c0 LoongArch: KVM: Set vcpu->cpu before IN_GUEST_MODE is set
    2de38f0448b45 KVM: arm64: Correctly cap TLBI Range to the architural limit
    36df368861d26 KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save
    2bf6e59be382a KVM: arm64: vgic: Reset in_kernel on private IRQ allocation failure
    b6c2abf620a45 KVM: arm64: vgic: Fix detection of MI on no pending LR
    d3a2d20b7248e KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
    3feb83918e30f KVM: arm64: Sign-extend VA for range-based TLBI invalidation
    87c2bbf189829 KVM: arm64: Remove VM-wide VNCR mapping counter
    11ee3faab4f17 KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
    9065c1261f8a0 KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping
    c624731ca6fe5 KVM: arm64: Correctly handle end of VA space TLBI invalidation
    1c9fca34b9625 KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation
    66c36dd659954 KVM: arm64: Consider SCTLR_EL2.M when mapping the L1 VNCR page
    f3064dde05527 KVM: s390: Restore sigset on error path
    3a131f7758d33 KVM: s390: pv: Fix rc/rrc offset for PVM_DUMP
    ae452b990e054 KVM: s390: keyop: use mmu_lock to read gmap->asce
    7077ec953996a KVM: s390: Fix memory corruption by not reinjecting CK machine checks
    f8ed98e97a460 KVM: s390: Zero initialize irq in reinject_machine_check
    134f235e0e8de KVM: s390: Zero initialize data structures for inject_pfault_token
    4c05bf21d1806 KVM: s390: Take srcu when importing watchpoint data
    e4d8b7f176b97 KVM: s390: Free guest debug data on vcpu destroy
    46cb8a273e2f8 KVM: s390: Fix old_data leak in guest debug error path
    581be9f608583 KVM: s390: Fix memory leak in guest debug handling
    3fe801db90bde KVM: s390: Fix length check __import_wp_info()
    ac943db6e5fac KVM: x86: Move enabling EFER.SVME and EFER.LMSLE to generic EFER setup
    a97d4eb883d3c KVM: x86: Ensure runtime reads of disabled_quirks are resolved once
    92e24ca69e0f8 KVM: x86: Serialize writes to disabled_quirks using kvm->lock
    bdb732ebee545 KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
    8edb3c09e43f7 KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk
    655694a1cba2d KVM: x86/mmu: Use CMPXCHG when clearing Accessed bit in TDP MMU
    9941850e8adf1 KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU
    62c3ee4c9f0e2 KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
    bbec4adc2f340 KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit
    7fda9304d0d85 KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02
    121991d150735 KVM: nVMX: Always flush vpid02 on first use
    bb9f763d7aed4 KVM: PPC: Book3S HV: Validate arch_compat against host compatibility mode
    d393ef49d94f5 iio: light: opt4001: Fix reversed GENMASK() arguments in fault count mask
    fb21a4113e911 iio: light: opt4001: Reject integration times with a non-zero seconds part
    2fb1e09451aef iio: light: opt4001: Fix incompatible pointer type passed to div_u64_rem()
    4157573b37f64 iio: light: opt4001: Fix power down clearing bits of the wrong register
    0107ac927b1e7 iio: light: opt4060: Fix incorrect register name in threshold read error message
    7d2ddfee2952e iio: light: opt4060: Reject integration times with a non-zero seconds part
    a54b53b00e0f6 iio: ti-ads7138: Disable STATS_EN bit while reading conversion results
    6b7584b976d58 iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register()
    44063a6673a63 iio: srf04: fix pm_runtime handling on probe error path
    4a84300a1033d iio: pressure: mpl115: Fix runtime PM cleanup
    3fa189573cca2 iio: pressure: dps310: fix NULL pointer dereference on ACPI probe
    80e7381e8cccb iio: light: ltrf216a: fix runtime PM reference leak in error path
    c2c83ecb1ef7d iio: light: gp2ap002: Disable regulators on resume failure
    c1870bbfcfdd2 iio: light: cm32181: return zero after writing calibscale
    3ce75e455dd6e iio: light: apds9306: fix PM reference leak in apds9306_read_data()
    bc5fbf9868ca1 iio: imu: st_lsm6dsx: Update enable mask when using sensor fusion
    14db27a2f11af iio: gyro: mpu3050: fix sign of raw angular velocity readings
    daa1674ce8736 iio: dac: mcp47feb02: add missing 'select REGMAP_I2C' to Kconfig
    9fe22f563b2a0 iio: dac: m62332: Fix regulator reference count imbalance
    36f17988eb86c iio: dac: ad5446: fix OF module device table
    98bbd0844aeda iio: dac: ad3552r-hs: fix scnprintf() buffer bound in data source show
    44d52c8b1c6da iio: chemical: sgp30: Handle IAQ thread creation failure
    30b0d44c978bb iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF
    777e8ebfe6b3f iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable
    8b3e221590181 iio: buffer: Tie IIO dma fence lock lifetime to the fence
    11cef99491117 iio: buffer: Make IIO DMA fence release RCU-safe
    6d4bdbf7bad63 iio: buffer: Fix potential use-after-free in anonymous buffer release
    af113b29f884f iio: adc: pac1921: fix wrong channel used in trigger handler read
    90a2810faefb5 iio: adc: max34408: add missing 'select REGMAP_I2C' to Kconfig
    776bb4fb57bab iio: adc: max14001: add missing 'select REGMAP' to Kconfig
    fc8a0d0eb346d iio: adc: adi-axi-adc: add data size support for AD408X backend
    9c408b3309ee8 iio: adc: ad4080: configure backend data size
    87c0fb907c415 ASoC: tas2783-sdw: sort the register default table
    adf51dd6e11b9 ASoC: tas2783-sdw: drop duplicate reg_default entry
    622319a4ac9f6 ASoC: tas2780: sort the register default table
    86870ada907fd ASoC: tas2764: sort the register default table
    fee1916410912 ASoC: tas2552: sort the register default table
    a2ec67511c156 ASoC: sti-sas: sort the register default table
    abf06bc6ac17c ASoC: sgtl5000: sort the register default table
    856f0648beb7f ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get
    55b5e9fc08223 ASoC: rt721-sdca-sdw: sort the register default table
    b4eb588408717 ASoC: rt715: sort the register default table
    a099f59e8c1d2 ASoC: rt715-sdca: sort the register default tables
    f735844b71afb ASoC: rt715-sdca: drop duplicate reg_default entries
    418da4d4ccb80 ASoC: rt712-sdca-sdw: sort the register default table
    836df0d31a9a1 ASoC: rt712-sdca-dmic: sort the register default table
    cf6017e0feee7 ASoC: rt711: sort the register default table
    b7f7451a29c37 ASoC: rt711-sdca: sort the register default tables
    e15783332f451 ASoC: rt700: sort the register default table
    a35b77dc8e265 ASoC: rt700: drop duplicate reg_default entry
    3954b3b217420 ASoC: rt298: sort the register default table
    b50de175dd03a ASoC: rt286: sort the register default table
    b454c7ed1cf9e ASoC: rt274: sort the register default table
    74fe7483e6eb2 ASoC: rt1318: sort the register default table
    876d3276fd9c4 ASoC: rt1318-sdw: sort the register default table
    ec7064d07e24c ASoC: rt1316-sdw: sort the register default table
    b5a45169cbf91 ASoC: rt1017-sdca-sdw: sort the register default table
    2f972da629f6a ASoC: pm4125-sdw: sort the register default table
    fc569468e874d ASoC: pcm512x: sort the register default table
    0381caa253cb9 ASoC: ml26124: sort the register default table
    207f95aed374f ASoC: max9860: sort the register default table
    bb1602908c67d ASoC: loongson: Fix error handling in ACPI property parsing
    4731e2d22e4be AsoC: intel: sst: fix PCI device reference leak on probe failure
    cb6b0b1a9d5a6 ASoC: hdac_hda: Fix hlink refcount leak on component registration failure
    a201b5bcdfd61 ASoC: fsl_easrc: sort the register default table
    3e50bcfe6212f ASoC: fsl_easrc: Use div64_u64 for 64-by-64 division
    cbb3444113a8f ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure
    99d5973d7a0f9 ASoC: cx2072x: sort the register default table
    07a86575edc30 ASoC: cs35l34: drain threaded IRQ before runtime suspend
    84cf6acd01a1e ASoC: cs35l33: drain threaded IRQ before runtime suspend
    86f47316e536c ASoC: adau1761: sort the register default table
    1c9a77101f2d1 i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure
    b2956d578e87a clk: qcom: gcc-mdm9607: Drop incorrect BIMC PLL and related clocks
    fb3438a00799c clk: qcom: gcc-mdm9607: Fix halt_reg for gcc_apss_axi_clk
    76ff1eff73589 clk: qcom: gcc-mdm9607: Fix enable_reg for gcc_blsp1_sleep_clk
    30223154daacf clk: qcom: gcc-mdm9607: Drop incorrect system_noc_bfdcd_clk_src
    691d472c9509f clk: qcom: gcc-mdm9607: Drop incorrect apss_tcu_clk_src
    4865ff30e9189 clk: rockchip: rk3588: Don't change PLL rates when setting dclk_vop2_src
    c6679c13e3c36 clk: qcom: gcc-msm8939: Fix enable_reg for gcc_blsp1_sleep_clk
    508d6150d9405 clk: qcom: gcc-msm8916: Fix enable_reg for gcc_blsp1_sleep_clk
    8eb29dc9a9ad8 clk: microchip: mpfs: fix regmap_update_bits() mask/val order
    bf85bd6e550c1 clk: meson: align gxbb_32k_clk_sel number of parents with actual count
    bf538cdc9bb45 clk: mediatek: mt8196: Select REGMAP_MMIO for vlpckgen
    9a511980e81b1 clk: clocking-wizard: fix integer overflow in rate calculation
    edf86952488fa batman-adv: bla: prevent CRC corruptions after claim flush
    9a0c47023d325 batman-adv: bla: fix freeing of claims on meshif deletion
    0c2df865338bb batman-adv: dat: avoid unaligned fault in IP extraction
    2879177539e3e batman-adv: mcast: linearize skbuff for packet generation
    e4af59a2dc956 batman-adv: mcast: ensure unshared skb for multicast packets
    b9c2d3a5043fc batman-adv: fix TX priority extraction for BATADV_FORW_MCAST
    2dffc8c44b6e3 batman-adv: fix stale receive device on merged fragments
    23e747fe58583 mtd: rawnand: validate ONFI extended parameter page sections
    97f1f4cdec16f mtd: rawnand: sunxi: fix H6/H616 controller timings
    6086af3e39b0a mtd: rawnand: sunxi: describe tADL and tWHR delays
    c3d542c6204c8 mtd: rawnand: sunxi: group controller delay tables
    a732ae52c6aef mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses
    00b4d5d206298 mtd: nand: realtek-ecc: add missing MODULE_DEVICE_TABLE()
    1e5cd8bc90233 mtd: mtdoops: free page bitmap when the backing MTD is removed
    d14e6298139f5 mtd: afs: validate v2 image info bounds
    0307c2e82847a s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object
    09548edc6114f s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap
    7db2511fc601c s390/vfio-ap: Fix NULL deref in status_show() during queue probe
    0fd74477d0574 s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects
    04b35dd88c108 s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed
    4f7e869d0db24 s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL
    2ff68bf414de1 s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove
    c8a9772f6dfee s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove
    13bfc94eef389 s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()
    c99e2c7811bee powerpc/crash: stop watchdogs before booting kdump kernel
    08ec4e8e3c540 powerpc/pseries: Move H_WATCHDOG definitions to a common header
    8536f38107a69 powerpc/pseries: Handle and log pseries-wdt registration failures
    7968852a7ca3c powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population
    c4cb547f26d9b powerpc/kexec_file: Prevent kexec range truncation
    4ff3d9fd71c7b powerpc/kexec_file: Fix null-ptr-def in extra size calculation
    c513c8d173187 parisc: Fix alignment of asm statements in head.S
    16a62a3f2128b parisc: eisa: Fix infinite loop when parsing invalid IRQ value
    9dfa11cef4750 nvdimm/btt: reject an arena whose nfree is below the lane count
    c74eba81766ee mm/hugetlb_cgroup: call page_counter_set_max() outside VM_BUG_ON()
    05caf140e24ad mm/hugetlb: keep max_huge_pages when dissolving surplus folios
    10f616ef06c5b mm/hugetlb_cma: fix null nodemask dereference in hugetlb_cma_alloc_frozen_folio
    e456129942506 mm/hugetlb: fix missing migratable flag on same-node hugetlb migration
    99186b185c245 mm/migrate_device: avoid out-of-bounds writes for compound folios
    431402bfca1c4 mm: fix incorrect vm_flags usage when checking allowable orders for tmpfs
    cc5d6446ead38 Revert "pmdomain: qcom: rpmhpd: Add missing MXC and MMCX power domains for Eliza"
    e19e41d1c6281 Revert "once: don't use a work queue to reset sleepable static key"
    3ddf7b95818a5 Revert "irqchip/mbigen: Fix mbigen node address layout"
    a78d2d9a84569 pmdomain: airoha: fix unselectable AIROHA_CPU_PM_DOMAIN kconfig
    1cbed7538946c nvmet-tcp: reject unsolicited H2CData PDUs
    d95d342bc0ea8 nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU
    eb4f9127a2b8a nvmet-auth: Synchronize timeout work during SQ teardown
    bb6dafa790403 nvme: skip the zoned limits update if the zone info query failed
    76023560d60f1 nvme: add missing SRCU grace period in error path
    a0c389b8a495b nvme-tcp: check the data direction of a C2HData PDU
    5f89d68c00ccd nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails
    d21da6cc91ba1 nvme-fabrics: fix DHCHAP secret leak on parse failure
    b3e0f79af1f27 accel/ethosu: fix job completion fence cleanup
    f7aad73b48119 accel/ethosu: check MMIO mapping errors in probe
    f00def884a831 accel/amdxdna: return early from a zero-length flush
    dd403f6a38c53 ring-buffer: Allow splice reads on static buffers
    50afadf1ea665 ALSA: pcm: Fix race between non-atomic ops and trigger-start
    cd209eb3136e0 ALSA: harmony: initialize locks before requesting IRQ
    faba321da0eb6 ALSA: rawmidi: Return the error from snd_rawmidi_input_params()
    34f1d4f9f5ea6 arm64: errata: pass REVIDR when matching target implementation CPUs
    d2d22ff377cd4 arm64: Don't read GMID_EL1 when MTE is disabled
    0f05d95b99164 arm64: mm: Fix the lockless page-table walk in show_pte()
    b00ada2f55c53 i2c: qcom-cci: fix autosuspend cleanup
    694e7e6edf249 i2c: mux: Fix channel node leak on adapter add failure
    552836be2d95c i2c: core: fix debugfs UAF on adapter removal
    19cd6394f7ddc i2c: qcom-geni: update frequency table to fix timing parameters
    ac257b283962b i2c: designware: Enable interrupt mask workaround for HJMC3001
    0c739f54f1c77 perf: Fix use-after-free when perf mmap() revival races with the last munmap()
    517b02eaf30dd perf build: Add clang and rust target flags for LoongArch
    d9a9da94c9da6 perf hisi-ptt: Fix PTT trace TLP header parsing
    ecd69a46c029c perf trace: Refactor augmented_raw_syscalls using bpf_for
    92ad79c286f63 perf trace: Factor out BPF loop body
    a820237b03785 perf/x86/intel: Remove anythread_deprecated bit from perf_capabilities
    68c4b780b266a perf/x86/intel: Fix kernel address leakages in LBR stack
    a5c7962e64fff rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers
    ea318a4675ee9 rtc: rzn1: Handle unset alarm weekday in rzn1_rtc_read_alarm
    75c1e64b7b14e rtc: rzn1: Fix weekday underflow when alarm crosses month boundary
    2f24968108904 rtc: rzn1: Handle EPROBE_DEFER for optional pps interrupt
    5ec8f629a300c memcg: make the v1 soft limit knob inert
    d44c3c5986c7a memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done
    6165478eaa309 memcg: keep folio's objcg same as its node
    2943f1f4b7f28 mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()
    9435cddf1378d mm/huge_memory: transfer the pmd dirty bit to the folio on zap
    d69841dbd92af misc: fastrpc: don't publish fd before copy_to_user() succeeds
    6e62cf983a2bd kprobes: Protect kprobe_blacklist with RCU
    732510e13ee59 irqchip/stm32mp-exti: Fix the unit of the hwspinlock timeout
    d62a84a78de5f ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
    e5b64bd7e57fb ata: ahci: work around lost interrupts on Marvell 88SE61xx
    df1a97d5313fc ceph: lock mutex in ceph_mds_check_access()
    a5b5e62baceff bpf: Fix infinite loop in pcpu_freelist push with one possible CPU
    683fa887e19f3 bpf, riscv: Make arena support depend on ZACAS
    fdbaeae9313b2 block: flag zoned disks with GENHD_FL_NO_PART
    9b7c322cf29ed cpuidle: psci: Fix support for probe deferral by dropping the faux device
    3394c7ba23336 cpuidle: dt_idle_genpd: kfree() the original name allocation
    e79449be26ac8 dmaengine: dw-edma: Mark emulated IRQ as level-triggered
    d91fb6c0d10da dmaengine: dw-edma: Initialize IRQ data before requesting IRQs
    3044460e2d310 dmaengine: dw-edma: Complete descriptors before pausing
    8cd010697b79b dmaengine: dw-edma: Fix HDMA channel status register access
    2a3801ae5c344 dmaengine: fsl-edma: tracing: no ptr dereference during log output
    feeb2ef775081 dma-direct: return struct page from dma_direct_alloc_from_pool()
    0d4a5d218055d dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds
    94380ecd5ff9b dm: fix resume-vs-remove race
    00ad6f9ed27f9 dm: fix race when loading and unloading a table
    0cdc6cb242dd8 HID: wacom: validate report length in wacom_intuos_pro2_bt_irq
    48934c2927414 HID: rmi: fix OOB access with undersized RMI reports
    bfb7939788f3c HID: bpf: serialize device reference release in struct_ops destroy path
    b260b54f11405 ftrace: Synchronize the initialization of ftrace_ops
    cee8f286794df ftrace: Take trace_array reference before accessing its ftrace_ops
    b715872ef0ccc futex: Provide rt_mutex_.*_schedule() equivalents for futex scheduling
    e4a4ccfa470f9 futex: Prevent rcuwait use-after-free during requeue PI
    3b4f72bdddff6 mm/secretmem: properly account locked pages
    0b8faf28d1374 mm/damon/core: initialize damos->last_applied
    463ebd63e8ee3 mm/damon/core: handle region split failure in apply_min_nr_regions()
    54ef3a3f14e9b mm/damon/core-kunit: skip wrong region walk in commit_target_regions()
    bbbf6a9781fda mm/damon/core-kunit: skip wrong quota goal walk in commit_quota_goals()
    bee189b41f9d0 mm/damon/core-kunit: skip wrong dest walk in commit_dests_for()
    03a8f89172365 mm/damon/core-kunit: handle region split failure in filter_out()
    4deb1ec699936 mm/damon/core-kunit: check region count before testing in split_at()
    54439210c91e4 mm/damon/sysfs: kobject_del() target (normal), context and kdamond dirs
    e94f9f9478af3 mm/damon/sysfs: kobject_del() region and target (error) dirs
    11ce1b269aac5 mm/damon/sysfs-schemes: kobject_del() scheme region dirs
    5091760ab2ac4 mm/damon/sysfs-schemes: kobject_del() scheme quota goal dirs
    eca049e5b5e56 mm/damon/sysfs-schemes: kobject_del() scheme filter dirs
    df7a40102ae43 mm/damon/sysfs-schemes: kobject_del() scheme dirs
    43b33bdace2c5 mm/damon/sysfs-schemes: kobject_del() scheme action destination dirs
    b8ec303f53b04 samples/damon/wsse: stop and free damon ctx when damon_call() fails
    e60774d6335b8 samples/damon/wsse: handle damon_start() failure
    9fbc1811e83f9 samples/damon/prcl: stop and free damon ctx when damon_call() fails
    f383b55811d8e samples/damon/prcl: handle damon_start() failure
    215f9a7e4f1dc samples/damon/mtier: handle damon_stop() failure
    b4bba194bd06e samples/damon/mtier: handle damon_start() failure
    cb97afccffd6a mm/damon/vaddr-kunit: check region count in three_regions test
    3ed555fb2c6e4 mm/damon/tests/core-kunit: catch test failure in test_merge_regions_of()
    25253bbd8066d mm/damon/sysfs: read ops_id only once in damon_sysfs_apply_inputs()
    81e9ca01ebc2d mm/damon/sysfs: read addr_unit only once in damon_sysfs_apply_inputs()
    b9687ed098d7f Docs/ABI/damon: fix typo in intervals_goal sysfs path
    e20b16aa3b49f scsi: pm8001: Use rollback index when freeing MSI-X vectors
    4dd118d06dec9 scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame
    f033530105aa7 scsi: bsg: Fix TOCTOU in io_uring passthrough command setup
    5d326efc334ea scsi: bsg: Cap io_uring sense copy to max_response_len
    3ddf3ea291a0e scsi: target: iscsi: Reserve a terminator byte for the login payload
    5def8b6aaad44 spi: Fix DMA mapping ownership on partial map failure
    103e7b19d1085 spi: bcmbca-hsspi: disable clocks on resume failure
    6b1ccecf311c0 spi: bcm63xx: disable clock on resume failure
    d07d4fbae4793 spi: bcm63xx-hsspi: disable clocks on resume failure
    220cea6c1662b soc: qcom: geni-se: Use HW PROG_RAM_DEPTH to validate firmware size
    b437284a4c29d soc: fsl: qe: Add chained_irq_{enter,exit}() calls in cascade handler
    fa5e1bc673ca5 ublk: clear VM_MAYWRITE on read-only ublk char device mmap
    dfc17986c608d userfaultfd: reset err to be 0 when move_pages_ptes succeeded
    64a41f4a9a968 tracing: Take trace_array reference when opening options file
    2ee3f7d43f79e tracing: Have show_event_filters/triggers files take trace array ref
    e6ccc279cb8ed tracing/probes: Fix anon_stack check for unnamed bitfields in btf_find_struct_member
    50af36b7f9011 thermal/drivers/qoriq: Disable clock on resume failure
    909cdbd028f84 thermal/drivers/imx: Disable clock on runtime resume failure
    7236bbd2cb7d9 xhci: fix lost bounce buffers on TDs spanning several ring segments
    fd19b8895f8a9 staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()
    a54fd1a44862d staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()
    34f51d196c43a staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
    5117f236e9e30 usb: gadget: fix null pointer dereference in usb_put_function_instance()
    64ec019bf9a8b USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
    858576de6b2f5 usb: gadget: f_midi: initialize work in f_midi_alloc()
    49fab5e1bdb20 usb: gadget: f_midi2: fix use-after-free in string attribute show path
    b9b5b5df5b8dd usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()
    4079f19a0e1ce usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs
    bdaaf3074aedc usb: typec: ucsi: displayport: Fix OOB altmode array index
    87f7222587b48 usb: typec: tipd: Fix Thunderbolt altmode VDOs for cd321x
    e5f9f36c5d610 usb: typec: tcpm: constrain TCPM_SOURCING_VBUS event handling
    52d556f085477 usb: typec: qcom-pmic: cancel reset_work on stop
    b5efa3b89395d usb: typec: qcom-pmic-typec: drain cc_debounce_dwork if port_start() fails
    1ab669c2b44e1 usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop
    e2e424655e312 usb: typec: mux: Fix typec_switch_match()
    312a11d6f7392 usb: typec: mux: avoid duplicated mux switches
    df7cd3908e075 usb: typec: hd3ss3220: track VBUS enable state per consumer
    cae9dbba6adae usb: storage: realtek_cr: fix use-after-free on disconnect
    e01408ee52fe5 usb: dwc3: clear forceRM when issuing EndTransfer
    d8cfb7f630eb7 usb: dwc3: google: Initialise probe properties with DWC3_DEFAULT_PROPERTIES
    619aae11b85f9 usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns()
    2571029a92ee7 usb: cdnsp: fix wakeup from S3 after controller context loss
    996c319b8bd5a usb-storage: ene_ub6250: fix race between scan work and probe
    1618257cb0aba media: usbtv: keep device alive while ALSA card exists
    d2c87eadcec4e clk: qcom: gcc-mdm9607: Increase delay for USB PHY reset
    9d81885d97cba ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
    e22428f0c038c usb: image: mdc800: change kmalloc() to kzalloc()
    b08c3d5ee7fea drm/amd/display: fix division by zero in get_estimated_bw()
    6fedb2eaff775 NFSD: Prevent client use-after-free during blocked-lock reaping
    e57a9ed34ea8c NFSD: Prevent client use-after-free during close_lru reaping
    b75ecd5122088 NFSD: Consolidate the revocation-path client unpin
    c05ae58fe06ce NFSD: Prevent client use-after-free during export state revocation
    0146467a2fce8 NFSD: Guard admin state-revocation walks with NFSD_NET_UP
    f7e7fcd82f574 NFSD: Annotate caller preconditions for the state-table walkers
    2640cc26ed0dd KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped
    98bcc7034db1e KVM: x86/mmu: Use split "zap all fast" helpers when invalidating memslot
    689c1b2da4779 KVM: x86/mmu: Split kvm_mmu_zap_all_fast() into "front" and "back" halves
    00388b7b718a1 KVM: x86/mmu: Fold kvm_mmu_zap_memslot() into kvm_arch_flush_shadow_memslot()
    7a90d99686e5a ACPI: battery: Protect all properties with a separated mutex
    d7a6af8e5176d ACPI: battery: Use kstrtoul() over sscanf("%lu\n")
    d044d796e2a36 HID: sony: clean up device list on probe failure
    5a4ed79030efb HID: sony: use guard() and scoped_guard()
    3b467c68803d7 ceph: properly decrypt filenames in vmalloc() buffers
    052b6b2d5fe97 zram: fix slot lock bit position on big-endian 64-bit
    342d140c82251 zram: move lockmap to be per-zram instead per table
    4a2fb2d12b87b usb: gadget: f_fs: Fix Use-After-Free in AIO error path
    7411de0ce3b45 USB: gadget: ffs: fix mm lifetime handling
    68a069b407303 mm/page_alloc: don't spin_trylock() in NMI on UP
    348c3db4f1520 drm/xe: Don't hand out the flat CCS storage as usable VRAM
    a84f3db72561c fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()
    bab5a851e44a3 net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
---
 .../linux/linux-yocto-rt_7.2.bb               |  6 ++---
 .../linux/linux-yocto-tiny_7.2.bb             |  6 ++---
 meta/recipes-kernel/linux/linux-yocto_7.2.bb  | 24 +++++++++----------
 3 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb b/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb
index f4e0d14b57..da34435770 100644
--- a/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb
+++ b/meta/recipes-kernel/linux/linux-yocto-rt_7.2.bb
@@ -15,13 +15,13 @@ python () {
         raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it")
 }
 
-SRCREV_machine ?= "020f32fea18afa789c8eb8f28ce45ad65256fc87"
-SRCREV_meta ?= "ad69d353910ffe62233ed32046d153c01a32cba8"
+SRCREV_machine ?= "5391c0d4e57d3cacdd66e7d5a016dba8c6f5956e"
+SRCREV_meta ?= "b5d69636e3e56aa6a5b8f987b4587e7a56c4782a"
 
 SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine;protocol=https \
            git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-7.2;destsuffix=${KMETA};protocol=https"
 
-LINUX_VERSION ?= "7.2.4"
+LINUX_VERSION ?= "7.2.6"
 
 LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
 
diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb
index 8d166fd970..3a8f086d5c 100644
--- a/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb
+++ b/meta/recipes-kernel/linux/linux-yocto-tiny_7.2.bb
@@ -9,7 +9,7 @@ require recipes-kernel/linux/linux-yocto.inc
 include recipes-kernel/linux/cve-exclusion.inc
 include recipes-kernel/linux/cve-exclusion_7.2.inc
 
-LINUX_VERSION ?= "7.2.4"
+LINUX_VERSION ?= "7.2.6"
 LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
 
 DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}"
@@ -18,8 +18,8 @@ DEPENDS += "openssl-native util-linux-native"
 KMETA = "kernel-meta"
 KCONF_BSP_AUDIT_LEVEL = "2"
 
-SRCREV_machine ?= "881860c6d624e61b44ad488360a18310ba83cf26"
-SRCREV_meta ?= "ad69d353910ffe62233ed32046d153c01a32cba8"
+SRCREV_machine ?= "c591fbeae3281cba1d1e16470afd6541ab445b46"
+SRCREV_meta ?= "b5d69636e3e56aa6a5b8f987b4587e7a56c4782a"
 
 PV = "${LINUX_VERSION}+git"
 
diff --git a/meta/recipes-kernel/linux/linux-yocto_7.2.bb b/meta/recipes-kernel/linux/linux-yocto_7.2.bb
index e3edaaada5..550ba49ebc 100644
--- a/meta/recipes-kernel/linux/linux-yocto_7.2.bb
+++ b/meta/recipes-kernel/linux/linux-yocto_7.2.bb
@@ -17,25 +17,25 @@ KBRANCH:qemux86-64 ?= "v7.2/standard/base"
 KBRANCH:qemuloongarch64  ?= "v7.2/standard/base"
 KBRANCH:qemumips64 ?= "v7.2/standard/mti-malta"
 
-SRCREV_machine:qemuarm ?= "af1653e938edb4571aac7a943ec531e70badb57c"
-SRCREV_machine:qemuarm64 ?= "881860c6d624e61b44ad488360a18310ba83cf26"
-SRCREV_machine:qemuloongarch64 ?= "881860c6d624e61b44ad488360a18310ba83cf26"
+SRCREV_machine:qemuarm ?= "0e60d19f0d15f5fbef845da9454998c76b37bd97"
+SRCREV_machine:qemuarm64 ?= "c591fbeae3281cba1d1e16470afd6541ab445b46"
+SRCREV_machine:qemuloongarch64 ?= "c591fbeae3281cba1d1e16470afd6541ab445b46"
 SRCREV_machine:qemumips ?= "ab0e33fefa2a3d0366b2b8deb7cfb3be2d8dc436"
-SRCREV_machine:qemuppc ?= "881860c6d624e61b44ad488360a18310ba83cf26"
-SRCREV_machine:qemuriscv64 ?= "881860c6d624e61b44ad488360a18310ba83cf26"
-SRCREV_machine:qemuriscv32 ?= "881860c6d624e61b44ad488360a18310ba83cf26"
-SRCREV_machine:qemux86 ?= "881860c6d624e61b44ad488360a18310ba83cf26"
-SRCREV_machine:qemux86-64 ?= "881860c6d624e61b44ad488360a18310ba83cf26"
+SRCREV_machine:qemuppc ?= "c591fbeae3281cba1d1e16470afd6541ab445b46"
+SRCREV_machine:qemuriscv64 ?= "c591fbeae3281cba1d1e16470afd6541ab445b46"
+SRCREV_machine:qemuriscv32 ?= "c591fbeae3281cba1d1e16470afd6541ab445b46"
+SRCREV_machine:qemux86 ?= "c591fbeae3281cba1d1e16470afd6541ab445b46"
+SRCREV_machine:qemux86-64 ?= "c591fbeae3281cba1d1e16470afd6541ab445b46"
 SRCREV_machine:qemumips64 ?= "ab0e33fefa2a3d0366b2b8deb7cfb3be2d8dc436"
-SRCREV_machine ?= "881860c6d624e61b44ad488360a18310ba83cf26"
-SRCREV_meta ?= "ad69d353910ffe62233ed32046d153c01a32cba8"
+SRCREV_machine ?= "c591fbeae3281cba1d1e16470afd6541ab445b46"
+SRCREV_meta ?= "b5d69636e3e56aa6a5b8f987b4587e7a56c4782a"
 
 # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll
 # get the <version>/base branch, which is pure upstream -stable, and the same
 # meta SRCREV as the linux-yocto-standard builds. Select your version using the
 # normal PREFERRED_VERSION settings.
 BBCLASSEXTEND = "devupstream:target"
-SRCREV_machine:class-devupstream ?= "5015d0d945b3d3f2b038d2667880d5762f7d9437"
+SRCREV_machine:class-devupstream ?= "500df175a7f9e6bc1a9c328590ca5150f84f9ff0"
 PN:class-devupstream = "linux-yocto-upstream"
 KBRANCH:class-devupstream = "v7.2/base"
 
@@ -43,7 +43,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA
            git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-7.2;destsuffix=${KMETA};protocol=https"
 
 LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46"
-LINUX_VERSION ?= "7.2.4"
+LINUX_VERSION ?= "7.2.6"
 
 PV = "${LINUX_VERSION}+git"
 
-- 
2.43.0



  parent reply	other threads:[~2026-09-17  5:13 UTC|newest]

Thread overview: 13+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-09-17  5:13 [PATCH 0/6] linux-yocto: cosolidated pull request bruce.ashfield
2026-09-17  5:13 ` [meta][PATCH 01/06] linux-yocto/6.18: update to v6.18.50 bruce.ashfield
2026-09-17  5:13 ` [meta][PATCH 02/06] linux-yocto/6.18: update to v6.18.52 bruce.ashfield
2026-09-17  5:13 ` bruce.ashfield [this message]
2026-09-17 14:05   ` [OE-core] [meta][PATCH 03/06] linux-yocto/7.2: update to v7.2.6 Antonin Godard
2026-09-17 14:13     ` Bruce Ashfield
2026-09-17 14:37       ` Antonin Godard
2026-09-17  5:13 ` [meta][PATCH 04/06] linux-yocto/7.2: drm/client: avoid spurious vblank-timeout warning bruce.ashfield
2026-09-17  5:13 ` [meta-yocto-bsp][PATCH 05/06] yocto-bsps: update to v6.18.50 bruce.ashfield
2026-09-17  5:34   ` Patchtest results for " patchtest
2026-09-17  5:13 ` [meta-yocto-bsp][PATCH 06/06] yocto-bsps: update to v6.18.52 bruce.ashfield
2026-09-17  5:34   ` Patchtest results for " patchtest
2026-09-17 10:19 ` [PATCH 0/6] linux-yocto: cosolidated pull request Richard Purdie

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20260917051340.1472139-4-bruce.ashfield@gmail.com \
    --to=bruce.ashfield@gmail.com \
    --cc=openembedded-core@lists.openembedded.org \
    --cc=richard.purdie@linuxfoundation.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.